Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: iQj8r1XeL3w0iCSM+IX4wmGUauIReFGr1hCBuy/MbIo=
Subject key identifier: F6:E5:45:71:59:4E:33:3B:C1:C4:F0:BE:06:EA:BF:6C:C3:55:7D:8A
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019FA899A5381100F4D3003549B88C73544D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 12:01:09 +0000
Manifest this update: Tue 28 Jul 2026 12:01:09 +0000
Manifest next update: Wed 29 Jul 2026 12:01:09 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: WIIxnYCQFIgdMP62oe00BOYdzZ1xXScVuh166DLhDw4=)
2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:a5:38:11:00:f4:d3:00:35:49:b8:8c:73:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Jul 28 12:01:09 2026 GMT
Not After : Jul 29 12:01:09 2026 GMT
Subject: CN=f6e54571594e333bc1c4f0be06eabf6cc3557d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:b7:c0:1c:7a:98:6a:a9:2b:c2:48:47:09:
a0:a1:c3:73:ad:2e:01:d1:e4:8a:02:03:6b:57:b2:
f2:87:24:62:e1:e7:7c:c2:6b:db:9a:ef:f9:7f:c5:
73:dc:a5:8b:c9:b1:00:de:41:8a:c6:e0:ec:dd:c0:
15:5a:78:1b:a7:23:6c:25:cf:22:66:4e:91:99:14:
e6:a8:13:c9:2e:d2:02:9b:8a:83:e9:15:72:ef:76:
b6:53:90:60:8d:81:3f:34:a9:ce:ef:9b:e3:8e:30:
b6:96:bc:b3:49:50:58:e8:62:e1:1a:bf:c6:2f:21:
3b:ae:01:29:ec:66:88:4c:6e:37:28:5a:81:df:90:
9c:36:98:04:4a:f1:12:cd:06:d9:4e:db:07:ef:64:
e8:7a:28:09:04:3e:cf:c4:24:73:49:b8:93:8a:40:
8b:a2:2a:c3:d6:db:8c:87:c9:72:f9:4a:ae:fd:19:
5a:f8:0a:6f:08:6e:c8:65:27:a6:20:9a:e3:88:40:
2f:a8:7f:d3:07:b0:78:f0:62:68:20:08:43:81:c9:
ca:00:f5:7f:4d:b8:b4:13:a8:6d:c4:5c:43:85:62:
6b:99:bb:44:eb:29:bc:99:84:5e:43:fe:27:36:bd:
b6:cc:77:6b:c4:d3:20:3f:3f:47:aa:54:7a:c2:3a:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E5:45:71:59:4E:33:3B:C1:C4:F0:BE:06:EA:BF:6C:C3:55:7D:8A
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:77:64:7d:3f:1c:fd:65:82:74:b3:19:6b:39:c1:bd:6a:24:
dc:3b:45:60:52:4f:ce:db:28:ad:6c:3b:7e:9f:6e:c3:10:65:
dd:47:71:87:b4:9d:88:c3:d9:09:6a:1d:bf:6e:4f:73:bf:7c:
f9:c8:11:b1:c1:c7:5f:54:c1:8f:b2:d0:4a:ba:c2:51:cb:15:
e1:a0:68:1c:e3:af:1a:a3:4d:a8:71:89:43:b7:53:80:03:7c:
7a:04:07:e2:68:9d:7d:97:6f:0a:f6:32:5b:48:ce:f5:16:87:
34:6b:e2:69:16:d2:e5:15:a4:08:99:20:46:69:be:18:46:56:
d7:46:8f:0b:5b:b8:a1:ad:7a:2c:c2:30:11:71:c1:45:3e:4c:
7a:ab:55:cf:73:9f:1f:a2:1f:a1:be:12:5d:19:8e:f1:ad:1d:
74:12:7f:3a:17:6b:d4:19:04:66:c7:9c:d6:d1:7f:0a:8d:7e:
0b:37:c6:59:dd:c2:5b:9f:a2:67:eb:82:75:bc:b7:99:3a:e6:
e6:a3:96:31:c1:28:62:bf:03:3d:54:d3:80:b3:ed:ed:b9:37:
50:c7:20:f8:9c:3c:65:15:0c:86:50:5d:ab:d6:e6:1b:db:c0:
e9:f1:b7:cb:86:fa:7c:b0:bb:d8:1c:97:7b:e7:0a:0b:09:8d:
f7:35:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:01 2026 by rpki-client