Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: TpxOjMMeLDvuJ7BphRSpqDz6BJ4nDBsnq0ls5hlbPMQ=
Subject key identifier: 66:13:14:1A:B0:1B:9F:51:91:05:1B:C2:16:C1:B9:7F:23:61:15:75
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 019FA9E33C13D0AB491E7D4896448D6C6F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0DFF
Signing time: Tue 28 Jul 2026 18:01:09 +0000
Manifest this update: Tue 28 Jul 2026 18:01:09 +0000
Manifest next update: Wed 29 Jul 2026 18:01:09 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: 5oAovW6kqIegneY5+2jfiHHqkdGRmbYwlMOPyyYahOU=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:3c:13:d0:ab:49:1e:7d:48:96:44:8d:6c:6f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jul 28 18:01:09 2026 GMT
Not After : Jul 29 18:01:09 2026 GMT
Subject: CN=6613141ab01b9f5191051bc216c1b97f23611575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d0:1c:de:59:1a:45:03:ff:bf:3b:de:90:1d:
7f:ad:a5:d1:4b:c7:fe:08:60:98:db:fd:f9:11:b9:
b8:a3:36:3e:06:58:34:49:f4:be:b8:f0:d0:6b:62:
23:a4:4f:87:ed:05:72:4a:ec:2a:bc:98:ef:2b:51:
16:eb:3c:a2:79:9d:ae:71:16:63:4b:45:db:96:36:
a2:f1:8d:48:b6:4a:45:9c:01:56:0e:39:d2:6a:7b:
18:05:46:76:38:93:8e:94:4a:71:91:a1:c4:e8:70:
7b:df:f1:43:55:9a:a6:45:52:02:1f:d2:92:23:57:
a0:0f:d7:d9:1b:50:ea:7a:3f:a6:04:b7:ba:25:bc:
1d:da:a9:9d:54:ff:6b:c8:f6:2d:0e:4a:8b:ae:69:
be:03:1f:02:75:f3:38:27:6e:90:c1:d7:5b:da:e4:
d0:68:65:a4:24:6f:6b:0c:7b:be:38:09:09:a0:77:
8b:d4:db:32:e9:4d:39:2d:7c:d2:c8:81:c6:0a:9d:
b5:64:c8:19:ab:c7:db:85:03:09:cb:4a:fe:ce:e3:
0b:5c:15:60:d4:58:d3:77:39:de:ea:d4:16:d0:aa:
95:1a:f0:e4:8b:fd:3d:40:32:8f:c4:47:81:c9:87:
5d:22:82:06:2e:92:45:9a:92:ba:4b:4f:d3:8b:41:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:13:14:1A:B0:1B:9F:51:91:05:1B:C2:16:C1:B9:7F:23:61:15:75
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:28:bb:08:c9:4b:e9:e6:cc:18:eb:86:0a:ab:c4:da:a7:06:
79:65:f2:87:b6:f7:79:ac:09:65:a8:43:3b:8e:cb:2e:ef:be:
c4:88:f7:f6:7d:b6:ea:cc:c3:92:ef:09:89:18:aa:bf:17:44:
68:c8:e0:3c:f0:1c:53:7a:1e:66:c4:9b:c4:77:fc:e4:5c:4d:
5d:9e:a5:a1:92:f6:3c:a8:ea:b9:78:e4:15:72:58:a7:68:ce:
d0:3e:a6:9f:c7:e3:78:de:94:87:ae:56:65:d7:ee:54:ac:16:
62:1a:29:09:70:22:be:19:7a:27:51:ca:6d:88:e3:87:e9:6a:
ad:09:0d:68:37:aa:17:bc:ce:39:45:f8:a5:d4:9a:b0:61:b3:
f5:ef:75:f7:90:ab:aa:16:87:3e:ae:95:67:ec:76:9b:b5:a2:
f6:d6:4e:1c:61:1b:c9:b5:3d:9e:50:f3:77:66:22:f9:f2:a2:
b0:e3:36:d5:50:5f:35:64:3b:b5:1f:4e:0e:0b:3c:68:9d:56:
0b:6a:4f:a9:82:18:84:96:95:c1:28:4e:af:35:c2:3a:45:24:
a7:7d:d0:4c:9d:e5:9a:6d:e2:76:ee:26:e1:50:ea:6c:b7:e0:
61:c8:bc:36:e0:36:a0:c9:24:47:88:3c:e3:0b:20:f8:0e:37:
c8:4f:d5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:06 2026 by rpki-client