Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: NQoz9NJ7Ft1KWZWpYHcuGjV+GS3Yj6NWFlOBxtgO/iI=
Subject key identifier: BE:36:17:2A:73:01:83:F8:DB:EE:B1:4E:B7:DB:13:3D:47:8C:9B:82
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 019FA862002954C1A15A13FC5D9EA9B94928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 11:00:22 +0000
Manifest this update: Tue 28 Jul 2026 11:00:22 +0000
Manifest next update: Wed 29 Jul 2026 11:00:22 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: SPDGweQnK5f5pnHQwQA8XU2m0mUgymhzDtgyLo4NBNM=)
2: CpV5ifZcjPyGOZZo5Kthc-0aYIE.roa (hash: lgb25S95umOL8YFj63EWLcLTY42lwBMqoGZsvrLzBnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:00:29:54:c1:a1:5a:13:fc:5d:9e:a9:b9:49:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Jul 28 11:00:22 2026 GMT
Not After : Jul 29 11:00:22 2026 GMT
Subject: CN=be36172a730183f8dbeeb14eb7db133d478c9b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bf:4d:1f:9c:be:31:4c:2a:cd:51:31:76:35:
f6:89:f5:e3:11:a3:0a:91:93:28:8c:78:66:32:b3:
d5:10:47:02:90:33:9c:16:08:d3:de:9d:4b:8c:b1:
64:f9:78:67:4d:dc:bf:12:83:23:3c:a2:16:89:aa:
1d:d9:8d:d2:de:1d:e8:a9:c0:9d:88:27:4e:36:09:
2b:f6:0b:36:82:b1:b9:57:5a:0a:9c:a4:fc:07:dc:
92:24:19:83:ac:d0:6e:43:3e:e0:bd:07:8b:57:19:
d1:bb:ce:fa:d7:cc:a3:38:c0:a1:4b:c2:19:34:4c:
2c:11:93:d4:30:e4:33:8d:e1:fa:70:1d:5b:cc:ee:
57:89:60:c0:2e:bf:d7:41:24:e2:37:c0:6c:2e:d2:
8a:75:ce:17:b1:30:cb:7b:d1:54:a7:01:e7:04:87:
6d:5e:8d:a8:23:20:01:07:49:c4:db:09:02:98:8d:
e9:41:5e:26:1a:f9:07:14:5e:a5:5c:57:40:0f:c7:
02:45:ad:2b:44:86:f8:91:07:c2:1d:09:91:6e:18:
f5:5e:09:96:78:84:6d:7b:34:56:72:6f:44:e9:45:
d7:01:35:9d:33:ff:5e:27:9e:b1:e2:e6:51:5e:49:
02:d3:65:73:a2:8d:f8:1b:ba:73:67:2e:12:87:53:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:36:17:2A:73:01:83:F8:DB:EE:B1:4E:B7:DB:13:3D:47:8C:9B:82
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:65:55:90:de:94:e4:bf:f0:f1:34:dd:6c:25:bd:12:7e:
49:48:59:2b:49:c5:51:a1:6a:d7:79:be:97:42:b5:8a:5a:6c:
59:b5:7c:5a:af:11:c5:f4:79:47:79:93:5b:c6:86:3f:c5:21:
38:80:12:af:ae:ac:66:ec:02:8a:58:ac:6a:22:d0:62:e4:32:
2e:e9:65:1a:46:15:0e:f1:35:91:c2:14:b4:55:4d:70:bb:4a:
d0:43:bb:11:54:de:fc:45:01:f9:46:60:2b:58:21:17:a2:2e:
dd:49:9f:ac:a5:06:83:08:36:ea:97:68:22:1e:66:61:6b:db:
c1:b2:b6:bc:a1:f4:e3:87:0e:f5:3a:d4:2f:f9:59:af:e8:02:
51:29:1e:36:a3:96:4a:1a:00:54:9a:23:f3:7b:2d:0d:b0:0f:
cc:b0:37:10:9a:40:37:23:8d:01:6b:89:37:ef:55:08:de:7d:
59:78:ae:3a:1e:0b:f8:c1:12:b3:14:1f:de:73:10:1a:2b:ee:
6f:3b:1d:57:ba:3d:fd:6b:e0:ca:33:b4:57:f6:35:03:29:e8:
29:1a:45:2a:65:bf:a2:d2:e9:6d:33:d2:46:74:32:f0:3b:57:
05:84:01:46:2f:b7:23:15:12:1c:04:2a:7c:e3:b1:10:a5:89:
69:22:68:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:19 2026 by rpki-client