Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
File: 4A98YCwtJIbuagplJAe5BKfUDeA.mft (raw, json)
Hash identifier: jXAPMAKKVG1r/rN+NLz6YObOTJ+o7NWRqa0b1l2yojw=
Subject key identifier: 42:EF:46:1F:43:84:64:CE:FD:2E:7D:40:1B:BC:83:67:AB:F2:20:97
Authority key identifier: E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
Certificate issuer: /CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Certificate serial: 019FAC76518F7E3435792D71E4F6614B6FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:02 +0000
Manifest this update: Wed 29 Jul 2026 06:01:02 +0000
Manifest next update: Thu 30 Jul 2026 06:01:02 +0000
Files and hashes: 1: 4A98YCwtJIbuagplJAe5BKfUDeA.crl (hash: W5VceiP8Ms59bs5ChxYVbt528oc2gjE59LJazxM88ks=)
2: XYZAtepajrERzVfepYrQ1WLpJn0.roa (hash: NwsD9n0fR/8scpVFCnvi5VpS0JM3A+KLBhhzQOSTM9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:51:8f:7e:34:35:79:2d:71:e4:f6:61:4b:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Validity
Not Before: Jul 29 06:01:02 2026 GMT
Not After : Jul 30 06:01:02 2026 GMT
Subject: CN=42ef461f438464cefd2e7d401bbc8367abf22097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:3d:49:aa:15:eb:9c:45:4f:7e:1b:8c:47:
37:a4:80:88:23:ab:75:1c:b1:28:e7:a6:82:f4:bc:
7f:a6:c2:5e:55:9a:4b:38:ee:ee:7e:7a:39:2e:48:
fc:c6:c9:b0:74:1b:fb:0a:78:76:3e:8f:c6:54:62:
4c:73:f5:5d:e7:dd:e2:5d:c6:ee:29:bb:0b:c1:85:
7b:77:20:4e:81:b3:ec:a5:f3:c5:75:fb:64:28:c2:
3e:d9:c1:6c:51:44:b2:bd:29:f3:66:2b:b8:2f:8f:
f8:25:a9:bb:8a:7d:51:ae:da:04:31:a3:76:10:f1:
8b:a6:1b:e6:5a:94:dc:92:40:7a:ab:25:91:09:0b:
d9:49:60:55:99:95:02:ba:36:c0:9e:56:ac:ff:65:
9c:c5:a8:82:d0:71:cd:86:c2:7d:f3:45:f2:3c:85:
f9:12:4d:b0:8c:9a:1a:db:7f:31:88:4e:48:f9:b2:
49:74:52:e8:67:8c:f3:0c:e4:08:ce:7f:ce:80:3a:
7f:a4:5f:4c:e7:89:f6:17:8b:bd:ea:3f:03:56:c5:
ec:73:5f:98:ea:33:3b:50:24:56:cf:1b:15:32:3f:
69:70:a5:a8:9f:11:da:21:dc:93:c2:95:80:bd:62:
c6:98:4b:67:0a:37:80:bd:c3:3d:50:21:a2:cc:c8:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:46:1F:43:84:64:CE:FD:2E:7D:40:1B:BC:83:67:AB:F2:20:97
X509v3 Authority Key Identifier:
keyid:E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:76:36:cc:3c:eb:89:66:3f:0f:9c:f7:10:37:49:87:e8:90:
a2:d9:f4:35:a5:bf:76:0e:3c:85:18:de:9d:c2:e9:9d:71:6e:
bf:a2:e0:b3:ed:24:85:b6:69:de:7b:02:24:8f:40:7b:44:61:
7b:57:70:35:b2:3a:92:44:ae:04:aa:2e:62:a1:20:ed:2f:d5:
70:f9:1c:e7:e2:96:ac:fd:d5:b7:9f:5e:f7:be:30:1a:8f:a9:
d9:79:8d:0b:67:11:50:89:cc:03:4b:33:dc:7f:80:b0:fe:91:
7b:6b:49:4a:84:a7:3b:06:7b:01:8d:01:ae:86:47:46:4f:e5:
7b:56:e8:34:ed:af:f5:1a:40:36:54:18:8c:43:5b:5b:35:09:
46:ce:c1:0e:1a:88:31:7a:ca:fc:76:61:86:c3:7c:c7:99:67:
d6:ac:8b:91:82:12:d6:3b:71:e3:50:34:86:d6:86:6d:e5:1d:
eb:c4:d2:f9:fc:46:37:2e:44:6f:0b:5c:ac:20:be:6e:88:18:
91:75:da:7c:3f:00:87:cb:cb:e1:5a:2b:44:3b:95:8a:e2:f1:
75:11:2b:ed:a3:0f:ec:46:58:7b:d1:32:b2:93:59:30:e6:aa:
59:3a:bc:d9:c1:eb:88:4c:8b:07:95:90:21:12:8e:b3:da:fd:
22:30:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:26:51 2026 by rpki-client