Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: rTCZUR0+SpC+7ySd2lKuNul1v5t+1nmHOA+8UtxqBFk=
Subject key identifier: 53:CF:1B:7F:9D:9D:0F:F5:15:C9:1D:0D:91:59:10:F8:A6:5A:48:EE
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019FA9E3187B1FC456660CE83D41C82DBED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 160C
Signing time: Tue 28 Jul 2026 18:01:00 +0000
Manifest this update: Tue 28 Jul 2026 18:01:00 +0000
Manifest next update: Wed 29 Jul 2026 18:01:00 +0000
Files and hashes: 1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: H0e0GRNIGwhi5w6xt03pt96qAk8uzhqlrqLWOqWWWTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:18:7b:1f:c4:56:66:0c:e8:3d:41:c8:2d:be:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Jul 28 18:01:00 2026 GMT
Not After : Jul 29 18:01:00 2026 GMT
Subject: CN=53cf1b7f9d9d0ff515c91d0d915910f8a65a48ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:11:e6:8f:82:51:8e:da:57:61:52:62:13:
e9:99:d2:eb:e2:7f:88:18:74:15:44:c7:33:5c:df:
a3:37:b1:f3:ae:8d:36:ec:85:08:6c:86:a6:e3:46:
53:7b:c8:6e:6e:46:5b:0b:44:4d:75:23:0d:7f:df:
fa:1d:46:32:2d:7c:47:9f:46:cb:6f:c2:de:89:5a:
0f:15:c2:0d:44:63:e3:ba:86:52:5b:ee:36:66:0e:
82:df:97:d1:e4:c3:ce:13:f0:38:15:a4:d0:b6:d0:
64:cf:76:23:f6:e4:87:44:1b:97:0f:bf:04:44:ba:
a6:25:56:12:ef:4f:cf:d1:77:d3:ab:56:63:48:97:
a0:15:79:2a:47:26:18:74:e3:de:10:f3:76:75:d7:
7d:ca:bb:fa:a8:38:50:44:86:dc:20:0a:fd:7f:bd:
bd:a4:16:08:da:83:5c:15:82:5a:b0:27:45:84:84:
ec:b6:4e:db:96:ae:bf:c4:c4:1e:92:d6:58:da:74:
49:5f:f1:ab:64:d0:d1:26:6c:c4:5d:a9:32:c3:ba:
2c:55:c8:da:11:be:b8:54:15:3c:6b:05:e8:cf:5e:
44:c6:2b:a8:66:20:88:d3:10:ca:ff:3a:9b:97:30:
37:10:82:f3:b8:a8:aa:11:81:cf:9a:21:6b:fb:ca:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:1B:7F:9D:9D:0F:F5:15:C9:1D:0D:91:59:10:F8:A6:5A:48:EE
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9c:c8:2f:d8:0a:30:29:8c:3e:ac:8f:31:46:d1:df:fb:cc:
cc:36:ae:4b:57:44:1c:99:70:e1:f6:2b:f3:7a:25:08:5a:7b:
58:71:1f:aa:a3:c0:06:d8:9c:d3:f9:ec:5a:b3:b8:19:bf:d5:
54:1e:2b:e7:3c:fd:46:6f:14:1d:c4:b7:8e:50:70:be:9d:43:
65:2f:85:bb:fe:2d:9b:f5:bf:1e:b5:e1:bd:3b:76:36:f8:da:
73:5d:e6:6e:ce:37:17:8a:2b:2f:1e:ae:04:62:c7:4f:73:80:
39:db:cb:ae:f0:e1:62:66:88:f5:45:f0:6c:ad:97:78:a4:38:
29:42:c3:0b:16:3b:ba:44:bd:2e:04:0f:45:b1:92:4d:92:bd:
3a:e8:71:f0:3f:a0:55:01:c2:b9:3c:db:05:66:4c:fa:d7:dd:
8b:84:6a:b0:44:25:7d:3e:3c:8d:1c:21:f2:48:fb:11:5e:3e:
c3:ef:da:7d:42:bf:46:0d:3d:ed:c8:a0:c9:b0:64:7f:e4:d2:
16:f4:89:26:7f:f9:86:e1:d1:89:57:3b:b8:a9:f7:2f:80:a9:
62:a0:a3:b1:7b:49:6b:62:a9:80:e0:b3:06:40:8d:60:b4:a3:
13:e7:32:dd:8a:97:fb:ff:bc:c4:ae:d8:f7:cb:cb:09:09:3a:
d0:41:e7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:19 2026 by rpki-client