Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: gV9Sg7JMwUWK4JUgtV5ecJfj6DPhNT1d8zw3i1NWRj0=
Subject key identifier: E3:C3:AD:D7:38:E7:1F:09:8E:68:72:D7:53:08:E1:40:9A:BE:55:13
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 019FA89A2C1CDBC671C509BD8F563B237D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 0AFF
Signing time: Tue 28 Jul 2026 12:01:43 +0000
Manifest this update: Tue 28 Jul 2026 12:01:43 +0000
Manifest next update: Wed 29 Jul 2026 12:01:43 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: OiBprqDIahQ2SdDHWiJekb+WnS6ikWYN9MRmIrU0RH4=)
2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:2c:1c:db:c6:71:c5:09:bd:8f:56:3b:23:7d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Jul 28 12:01:43 2026 GMT
Not After : Jul 29 12:01:43 2026 GMT
Subject: CN=e3c3add738e71f098e6872d75308e1409abe5513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cc:75:1c:34:f5:c9:e4:19:7e:bd:12:56:54:
ea:c7:c8:f9:37:54:d3:95:bd:96:8d:84:51:a2:1c:
83:26:1e:32:87:27:20:1e:d5:d1:48:da:67:cf:60:
c7:37:07:fd:cc:7f:21:b3:f8:e0:0c:a1:b2:d1:22:
90:b1:b7:ba:e7:be:0e:86:fc:e9:7a:22:a9:aa:82:
be:d7:c5:79:57:79:ec:3b:df:2d:42:76:14:46:d0:
0a:c3:e4:34:71:ad:e6:7a:60:d5:cb:77:54:5e:62:
a7:38:d3:3c:91:dc:7c:26:6b:21:15:e6:e5:16:9b:
81:19:bf:14:ba:ee:3b:a2:67:d6:87:79:a0:19:e7:
3e:bf:31:b9:9c:6f:02:b8:d6:58:cd:ec:ce:d4:04:
c9:b1:cb:c1:d5:17:35:77:3f:20:1c:55:3a:02:7a:
c3:a8:f0:c3:cb:96:4d:25:31:6b:0b:1b:a8:b5:0c:
d5:1f:83:08:86:76:ff:b9:0a:66:4f:33:f4:1d:31:
64:2b:be:a2:d9:9c:d8:f9:cb:46:b9:d9:68:dd:fb:
1b:07:3c:5f:fc:60:d1:ba:0b:10:7b:ba:c6:ef:fa:
a2:85:d4:c5:7d:9f:55:d0:7f:c3:7f:fb:24:cc:d1:
d1:20:10:36:77:2d:e9:7e:1d:be:5c:a1:a7:be:95:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C3:AD:D7:38:E7:1F:09:8E:68:72:D7:53:08:E1:40:9A:BE:55:13
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:04:85:33:f7:05:83:39:1f:d5:e3:c3:eb:16:ec:d5:f8:d0:
39:ed:48:73:e3:fa:d9:8e:37:5b:69:5a:17:ee:42:39:b5:d5:
01:36:4b:9c:fd:58:9c:08:c5:32:5a:f4:54:45:c1:df:54:f1:
25:ee:6d:b5:7a:c7:ec:90:ad:de:85:69:0e:34:30:f1:61:1d:
b9:13:27:88:d0:5e:cf:8e:3a:58:85:41:4f:43:55:96:50:95:
0e:8f:0a:47:24:cf:a8:4c:de:45:d2:80:71:16:09:10:07:88:
3c:cb:0b:34:9c:a1:b7:d0:6a:f6:87:3c:b2:19:5d:bd:44:da:
1e:74:be:cd:6b:f0:e0:97:0b:13:24:da:42:98:6f:44:1b:ec:
ec:76:59:70:64:39:75:71:31:aa:66:1f:d2:cc:e1:49:b5:48:
8b:d8:a6:ad:8b:21:be:af:0c:e1:1f:f4:f5:b4:cd:05:c0:76:
0b:ea:38:ca:3f:e3:08:77:ee:c7:87:b2:1f:56:e3:38:26:f8:
eb:93:63:8f:69:23:92:dd:4c:bd:06:c4:c7:66:1e:06:02:6d:
99:3d:a6:d6:9e:bb:1b:0c:be:77:e8:60:9d:b5:a0:82:3b:01:
dc:64:b7:ae:70:26:3e:a2:8d:f6:41:77:98:fe:bb:d9:07:30:
6d:e4:e5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:05 2026 by rpki-client