Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: aJQYuknijqvlQgWjzFUTTQE4kV65abl4L9dTX118Gk4=
Subject key identifier: F3:5E:0E:ED:40:72:0F:50:9A:B2:5D:AE:6C:8E:5A:63:1D:8F:26:0D
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019FA93DCA8C2CB938FA54249D98AE8950AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 152F
Signing time: Tue 28 Jul 2026 15:00:26 +0000
Manifest this update: Tue 28 Jul 2026 15:00:26 +0000
Manifest next update: Wed 29 Jul 2026 15:00:26 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: G2qI2jtaerQnoKVVJLm2PXqsZjsf0enNe9lmUSfis7o=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ca:8c:2c:b9:38:fa:54:24:9d:98:ae:89:50:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jul 28 15:00:26 2026 GMT
Not After : Jul 29 15:00:26 2026 GMT
Subject: CN=f35e0eed40720f509ab25dae6c8e5a631d8f260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:fb:f7:96:07:65:0d:ce:aa:2f:59:40:ea:
ae:60:17:93:1b:c8:bb:55:da:17:0b:3e:f7:90:80:
5f:8f:ee:a3:2e:6c:3f:c7:f7:d3:db:5c:54:f2:70:
91:4c:4c:4a:5e:ce:1b:c7:86:22:97:23:bd:0e:a5:
ee:fb:01:a4:26:55:5f:87:f7:0b:e5:61:b5:42:74:
8a:15:96:75:a2:ba:9c:35:71:ef:db:72:af:63:fb:
dc:5c:fd:f8:18:78:2d:2f:b6:8b:62:3f:50:e0:e0:
fb:e8:cb:8d:14:67:9a:21:48:e7:e4:46:7c:4a:a1:
74:d8:73:05:93:04:55:47:fc:d2:06:91:fb:6b:6b:
d3:d1:3d:f1:31:e6:f7:03:25:0f:6a:ea:13:8c:8c:
99:6e:d6:22:9d:9e:c3:4d:3b:69:cd:18:69:c2:d0:
d2:73:f9:36:61:a4:a5:a4:5b:5a:de:8d:33:41:c6:
14:a3:95:64:ac:ce:40:0f:fa:68:75:ea:b7:50:05:
c2:ea:77:d1:5a:d6:78:f5:da:f7:ca:a2:30:0f:21:
4c:b3:43:45:64:a4:f8:00:38:93:83:a6:a0:c8:e7:
16:46:63:20:05:61:ae:ab:da:a0:f6:81:dc:aa:21:
07:7c:71:f3:b9:a2:cc:c4:38:f5:88:b7:5c:80:b5:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:0E:ED:40:72:0F:50:9A:B2:5D:AE:6C:8E:5A:63:1D:8F:26:0D
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0b:92:74:68:6f:f3:8d:57:a9:60:43:38:a1:04:1e:73:8a:
27:9d:3f:71:f4:96:27:40:92:9a:c6:99:ca:f3:86:8a:e3:28:
87:0f:6f:ba:1b:e0:25:51:40:f9:38:67:f1:c3:b8:ce:50:b7:
96:57:b7:07:03:92:fa:e0:f4:c8:8a:0c:f8:a5:5c:94:c6:52:
29:84:c7:b3:18:39:3b:6e:7b:ed:b2:62:6d:72:ef:65:8a:b8:
e5:97:7d:0a:95:3a:d7:3e:5c:6c:7d:24:4f:4b:be:bb:a9:45:
c0:a9:a5:85:6e:b0:76:96:b4:d9:6d:a4:db:be:92:fd:ae:71:
4a:14:39:aa:f0:8f:e9:c2:45:78:37:bf:5a:5f:3c:d6:d6:84:
ee:cf:96:8f:4d:c9:76:26:f0:20:56:2f:e4:fc:84:4c:cc:65:
bc:cc:46:68:41:bb:3e:91:bb:6a:da:7e:ec:aa:68:d3:fb:ec:
7e:b4:e9:02:c6:0c:1b:d6:ce:d0:df:c1:3c:a3:5c:7c:56:72:
a5:bb:e7:14:1b:3a:e0:da:36:44:5c:f2:3a:cd:95:15:90:40:
9d:47:dc:29:d1:46:9a:ca:90:bd:83:83:77:ef:82:cf:68:81:
bf:31:1e:8b:a9:66:4f:b4:10:88:e6:f2:30:d7:4e:ba:01:39:
17:97:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:55:10 2026 by rpki-client