Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: jPlug8Owm/nUGM9X/y3fSj9YPyy8i8I29bxQtXJc/6w=
Subject key identifier: 82:75:EC:9B:A0:0A:4D:77:08:33:C2:32:05:E8:C3:EA:90:3E:6A:9F
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019FA9E2C04868E0595AE59CF8256F0E41E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 07D5
Signing time: Tue 28 Jul 2026 18:00:37 +0000
Manifest this update: Tue 28 Jul 2026 18:00:37 +0000
Manifest next update: Wed 29 Jul 2026 18:00:37 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: 0FMd9Ayh8jucLdB+rnFqcCYy/mMtbBcUdoXjII4gkCc=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:c0:48:68:e0:59:5a:e5:9c:f8:25:6f:0e:41:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Jul 28 18:00:37 2026 GMT
Not After : Jul 29 18:00:37 2026 GMT
Subject: CN=8275ec9ba00a4d770833c23205e8c3ea903e6a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:de:8e:82:da:65:ce:71:c1:88:bf:a8:ab:
fb:ce:23:82:94:ab:0c:60:f0:ac:cd:b3:c9:f9:65:
e4:af:f1:e0:2d:c4:51:9e:39:7c:c0:b4:43:a9:35:
81:0a:2f:10:d9:8b:50:ce:b7:04:50:24:84:0a:a2:
7d:b6:ee:22:fd:7b:a7:8e:8c:8c:6a:46:38:64:b4:
7c:93:c9:d6:bf:c6:3c:d4:73:19:76:53:08:25:14:
20:e6:d5:9a:33:b7:3b:18:c4:9f:66:f6:5e:0d:f6:
10:29:c3:4f:56:b8:df:45:ff:bb:ac:c0:7e:c2:5e:
be:93:96:df:0c:49:dc:41:ad:fb:76:6b:aa:d2:37:
3c:53:a5:f0:a4:70:45:3d:37:d6:9d:22:26:b1:b3:
77:0a:f9:4e:48:53:11:30:df:b2:7a:92:4d:fb:b5:
9b:82:21:9b:df:d2:ff:2f:35:18:36:15:22:d7:e7:
98:5e:7f:43:b6:50:47:d1:ed:6a:72:3a:e5:be:97:
e3:5f:3e:5a:7d:2f:52:56:7f:bf:c3:be:2d:52:e0:
1c:a5:d1:81:07:a3:dc:77:b6:35:c5:17:e1:89:56:
b0:a3:14:63:a8:fe:c8:94:5a:59:7f:a1:f6:a3:7d:
f4:66:2f:7a:71:c8:ce:9a:4f:56:fe:f1:c4:fd:22:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:75:EC:9B:A0:0A:4D:77:08:33:C2:32:05:E8:C3:EA:90:3E:6A:9F
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:90:c8:b6:06:03:15:ad:c8:e5:dc:a3:52:c1:04:2a:06:26:
78:2b:8f:cc:cc:09:fe:fa:fd:21:4a:3f:a0:70:9e:7a:7a:ce:
0c:4b:5a:c7:c0:f4:b4:49:64:63:f3:27:3d:b1:44:fd:a7:cd:
a3:7f:9a:a5:29:02:d7:2d:f8:05:54:89:5f:75:17:1f:4a:6a:
ca:98:27:c6:79:6b:6f:a9:4d:38:c0:58:35:8c:6f:d2:cf:3f:
a1:f1:76:ff:b8:81:9c:0c:a1:82:59:4e:a4:8a:60:cb:fc:4d:
97:45:97:be:db:a1:11:46:0c:ac:e2:0f:f2:51:77:f1:9c:29:
14:cb:ca:d7:af:b9:b8:c7:bb:c0:61:93:7d:40:21:15:f0:86:
27:60:25:e9:fd:25:eb:f3:a4:a6:fd:fa:19:2b:dc:c2:22:51:
89:29:53:84:04:ce:18:73:ee:f9:f4:01:ac:a6:5c:0c:36:31:
6b:c7:c4:9f:23:32:c5:ee:98:7c:7c:2f:f6:42:0b:a2:25:ff:
f0:94:3b:e9:b5:47:7f:ca:a4:0b:5f:3a:cd:ba:e6:2d:37:62:
95:96:85:e1:ed:4c:74:00:13:b7:69:c0:1d:00:ec:6f:87:a6:
0d:16:91:07:d5:36:f0:69:55:cf:54:64:40:ea:af:68:b6:97:
4c:22:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:03 2026 by rpki-client