Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: qtdZplr/ZDMKeoURGd7M/zrGf0+b0L4KPUuzvsbK+BQ=
Subject key identifier: BE:F5:8F:5C:B4:6C:F0:8D:EF:C5:CB:9B:D9:3C:CB:3E:E3:E3:08:9A
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019FA93DD695903EBA5BC79C44A79448BE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 0A39
Signing time: Tue 28 Jul 2026 15:00:29 +0000
Manifest this update: Tue 28 Jul 2026 15:00:29 +0000
Manifest next update: Wed 29 Jul 2026 15:00:29 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: 3ANastTInDfA66eDjvhwA+R3Pg2DrdTWsHvJe2AfD4U=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:d6:95:90:3e:ba:5b:c7:9c:44:a7:94:48:be:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Jul 28 15:00:29 2026 GMT
Not After : Jul 29 15:00:29 2026 GMT
Subject: CN=bef58f5cb46cf08defc5cb9bd93ccb3ee3e3089a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:57:c7:f6:cb:b5:e6:93:24:42:ef:8f:25:
48:8a:94:76:24:f1:40:38:3c:bf:4a:42:b1:f9:83:
f2:79:40:ce:f4:b5:a0:e2:6e:2e:87:e3:ea:17:cb:
5b:4e:39:bb:c0:70:f4:1d:cb:c4:38:bd:19:58:a6:
15:76:6d:19:c7:2d:4c:e9:b3:47:7f:ad:48:a5:0e:
c5:0b:78:6d:ee:e7:d7:09:76:f9:8b:07:07:92:c1:
1d:84:5f:02:40:e2:4b:f8:2f:c7:eb:00:bd:f1:b0:
12:c9:e7:4b:1b:72:9c:3d:b5:0e:56:77:32:a0:d5:
57:bf:bd:6c:25:0a:f9:ff:82:25:bd:c8:1f:e5:e6:
42:80:e3:60:2c:a3:0d:d8:0c:a3:46:0a:62:19:b8:
ea:00:9e:c2:b8:a0:b9:0f:9f:31:63:ea:fc:97:0d:
23:2c:33:1a:b7:34:39:c2:7e:62:11:f9:bc:2c:17:
8f:3d:b6:72:96:58:55:10:0b:ee:9a:d6:0c:67:ed:
c5:5f:68:82:2e:04:5c:05:9d:6e:26:85:4f:4f:45:
17:a5:82:8d:ee:b6:11:fc:e0:f6:a1:4e:7a:ef:23:
47:90:06:6e:9d:e6:1d:be:b9:a4:ca:1c:73:0d:ae:
0f:18:fd:cf:2e:ab:74:04:c6:23:d5:39:ab:4e:48:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:8F:5C:B4:6C:F0:8D:EF:C5:CB:9B:D9:3C:CB:3E:E3:E3:08:9A
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:be:99:13:3c:90:70:dd:29:2c:ca:41:6d:48:61:95:c7:40:
cd:2f:25:dd:20:3c:c0:f8:2f:61:0a:73:fa:fd:7d:10:2c:9f:
31:4a:6c:87:e9:68:d9:41:75:06:32:6c:83:de:cb:59:4b:ab:
61:30:fa:7c:31:f9:0e:9f:a1:9b:3a:02:ef:01:8e:da:cd:bf:
c5:24:a9:b4:14:9e:af:0c:bb:eb:ac:19:6c:41:81:e8:22:cc:
e1:d6:e4:2b:b8:75:75:40:38:20:f5:5c:89:6f:bf:bf:06:cf:
b9:2a:44:e5:fe:63:8a:b6:32:24:0e:c7:0d:ba:11:e2:79:61:
ea:a3:27:b9:5d:93:14:ce:65:f8:70:4a:f9:6a:f8:3d:f6:71:
0a:67:5a:46:67:74:d6:93:1e:9b:f5:65:35:0a:c3:11:e0:5d:
b1:17:98:7e:24:95:3e:59:15:11:da:67:11:14:46:f8:02:7a:
20:27:a1:d5:06:82:a6:db:c5:21:97:54:2f:fd:30:35:6c:1f:
b1:90:67:9a:9a:7e:30:61:78:54:ef:9a:d1:58:f2:5f:9b:90:
01:5e:62:26:1e:d9:a7:8d:c1:c1:2d:ec:c1:cf:f4:33:4f:35:
1e:3b:5c:2f:6e:f6:b4:7b:71:73:1b:98:d2:4a:ce:3b:78:41:
61:cc:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:40 2026 by rpki-client