Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: Z9r6KwNOOuCZNVJljD/asA7mZEFuktUBB+wjolIwXew=
Subject key identifier: 7D:BC:E7:9C:34:0A:A6:23:57:3C:51:DB:FC:05:F9:F1:A3:62:CA:28
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019FA898F58FC44A16E6D6A44B89D5C0D18A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0FEA
Signing time: Tue 28 Jul 2026 12:00:24 +0000
Manifest this update: Tue 28 Jul 2026 12:00:24 +0000
Manifest next update: Wed 29 Jul 2026 12:00:24 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: FPdZECKocWfvX0Cg8g5W9tDBGI/zohxhk2RDuPPsaSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:f5:8f:c4:4a:16:e6:d6:a4:4b:89:d5:c0:d1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Jul 28 12:00:24 2026 GMT
Not After : Jul 29 12:00:24 2026 GMT
Subject: CN=7dbce79c340aa623573c51dbfc05f9f1a362ca28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:15:d6:b7:14:00:8e:e4:f8:d7:65:84:d9:
cc:e6:57:ac:85:13:10:23:3c:1e:19:1f:17:ae:5a:
f0:01:52:f1:11:fe:5d:42:17:f5:41:df:5b:e9:f5:
00:a5:7a:2b:cb:9c:9d:86:3d:3b:eb:9a:b2:ce:d8:
c9:c2:e6:dc:17:97:3a:b0:94:bf:d9:4e:08:3a:f4:
0e:2b:8d:bf:05:3d:23:f4:1e:67:d3:b8:16:f4:5a:
2c:a1:ce:9c:64:00:7c:3e:5b:de:05:98:d6:3b:96:
be:e8:2e:5d:69:91:8a:7b:90:b0:c7:f6:f3:df:92:
14:9b:4e:2f:0a:f2:b0:d8:3e:53:43:a8:58:ba:d8:
7d:37:ab:17:d6:48:7e:63:27:21:7e:f7:40:a8:47:
be:39:a5:8d:30:a8:05:fc:b7:1d:92:e8:88:ad:af:
0d:f6:84:69:99:94:d5:0b:d0:84:31:e1:82:f4:ab:
47:5b:fa:2e:5b:a8:fc:02:f5:0a:8d:6d:aa:f6:04:
3a:82:a9:89:21:e5:53:48:5f:03:c6:a8:64:71:c8:
4d:01:35:d4:fc:fa:33:70:28:71:d8:af:bf:89:52:
6a:ee:2e:91:31:fb:b8:dc:fa:24:34:3f:9a:49:fb:
c2:55:33:00:ca:d5:1b:4b:11:3f:5a:e9:88:1b:17:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:E7:9C:34:0A:A6:23:57:3C:51:DB:FC:05:F9:F1:A3:62:CA:28
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:da:71:28:75:79:04:49:35:ae:57:c9:44:49:df:cb:ab:9b:
62:5f:a0:22:75:e1:43:d4:b4:d7:fa:2e:ab:da:a2:ed:35:dc:
88:c7:1a:12:9d:5c:70:69:77:b0:34:e2:1e:2e:96:18:7d:78:
5b:8d:d9:d3:ca:4e:44:37:e3:03:60:6f:9f:b8:e9:75:0d:5b:
97:0a:b7:9b:33:66:4d:c2:98:6e:b4:b6:c7:6b:f2:46:57:b1:
93:9e:1a:7c:19:69:be:8e:4e:44:76:af:c5:85:42:7c:38:54:
d8:f5:de:c0:b2:46:57:4a:b1:3f:d2:fe:a6:87:34:37:32:de:
90:af:3a:30:35:cb:68:af:87:c1:c8:e4:27:ed:83:d5:08:3e:
2c:47:ec:6c:08:d7:12:2a:75:5f:d2:5f:04:ea:bb:0d:5c:dd:
8b:31:14:18:91:f9:22:52:de:40:b9:db:62:07:89:8e:4a:f5:
55:1d:a3:f2:e6:83:2b:3d:22:b1:82:2f:bc:cd:8c:5e:d3:2e:
0e:4e:84:71:e3:ff:67:5c:f4:fa:ec:ef:c6:c5:b0:9a:a1:37:
4a:80:c6:e8:46:ff:36:3b:b5:8c:89:2d:5a:56:12:e4:cc:86:
da:b7:8d:b6:d6:1e:29:49:27:f1:49:16:cc:9a:7f:56:ad:3d:
c5:68:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:00 2026 by rpki-client