Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: Dm6dO7A/S9GeGNOebG6u+Hw/H7FzjPUTFXWwmd24Dns=
Subject key identifier: BF:AD:CF:F1:C6:A4:69:0B:5F:74:EF:AB:7C:AD:76:72:D4:08:7B:E6
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 019FA786D4A824620F74C68D93EA868AE40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0EE4
Signing time: Tue 28 Jul 2026 07:00:59 +0000
Manifest this update: Tue 28 Jul 2026 07:00:59 +0000
Manifest next update: Wed 29 Jul 2026 07:00:59 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: YFGvin4KIyF6oIRbWvp8i73HL0rG6FW93z8s1L2IxMY=)
2: 9WoXYCC1VJqnbGFNUpMF4rAgukA.asa (hash: 4Zq19YZTaukYMmJEdYX0CF4BWbwlExA/FZSk3vxkg/k=)
3: C9aXP0xnVks0GG--bUI7lSn9Og4.roa (hash: 7iquRG4sj7MdDkAUl6cu4d537zzGxzoS3U6EkDKWErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:d4:a8:24:62:0f:74:c6:8d:93:ea:86:8a:e4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Jul 28 07:00:59 2026 GMT
Not After : Jul 29 07:00:59 2026 GMT
Subject: CN=bfadcff1c6a4690b5f74efab7cad7672d4087be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:0f:23:ce:eb:c8:1c:21:55:9e:e6:13:a4:
f8:68:a3:69:c0:13:0b:d0:77:5a:8b:65:f2:ab:63:
f2:56:35:ca:b5:fc:80:32:54:a8:78:eb:d3:a1:a1:
be:51:b0:6e:e8:41:6e:6d:44:f3:6c:a3:7a:91:dd:
92:e2:79:5e:5e:85:39:18:78:6b:e8:20:09:d1:02:
9a:b0:f5:8e:e5:ca:20:c7:24:07:ec:8c:9c:92:73:
8e:35:fa:f5:43:c7:0c:88:aa:f0:7e:f9:ab:1e:ad:
a5:ed:40:53:9c:aa:0c:8a:23:5f:91:06:21:b6:20:
b2:98:7f:0a:8d:cb:c1:31:b5:d4:62:68:5b:de:c0:
e1:42:36:99:f8:b5:4f:52:54:5a:00:8a:e7:8e:82:
74:39:35:79:56:88:b4:bb:41:3e:cd:f4:b3:37:87:
f8:89:f7:71:f2:8a:38:d4:15:0b:cc:84:6e:9a:6f:
f2:a2:b1:93:a8:9a:74:dc:a5:5d:13:aa:fa:f9:e9:
b5:0b:28:3e:92:57:e5:84:93:ff:0e:54:2d:78:1d:
de:68:c8:fe:fc:eb:8c:4f:c2:6b:fc:e7:d6:de:66:
b7:53:7b:c3:9b:95:ed:eb:a9:93:06:84:af:c0:b1:
77:15:7d:bb:52:82:6e:e9:f2:40:80:db:77:d5:0f:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AD:CF:F1:C6:A4:69:0B:5F:74:EF:AB:7C:AD:76:72:D4:08:7B:E6
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e8:21:96:9f:c3:2e:15:58:ac:2c:8c:48:66:67:00:a1:2b:
77:e7:50:11:be:68:a3:48:2b:6d:3b:96:44:b5:cd:1e:fb:f9:
e7:e3:73:fb:cc:f5:50:31:c2:7c:06:ea:00:f0:8d:26:0f:7a:
7a:9b:9d:1e:8d:3b:76:0d:a9:49:8c:4b:bf:9a:db:cb:b7:8b:
f8:3e:9f:ee:11:09:48:86:38:e4:13:cc:34:a7:ff:97:e0:e4:
ce:3e:0d:a2:39:7e:6b:9f:13:84:97:2b:00:10:d6:71:35:19:
55:8f:f5:83:52:94:eb:78:cb:bb:44:b3:f7:a8:7a:38:90:1d:
75:12:cb:b9:a9:db:87:c2:5b:7d:05:be:3d:51:e5:0f:20:05:
82:62:3d:5b:d1:14:60:81:95:d8:6c:f7:6b:eb:65:18:d7:4f:
50:65:41:f3:d3:87:ab:f5:33:1d:8f:58:34:c7:33:58:ae:2f:
58:17:d8:4f:5d:1e:9f:ef:eb:51:60:ae:21:aa:58:06:67:7f:
6b:3f:d2:00:b5:1c:ad:1e:49:7b:aa:83:c6:58:cd:cf:31:83:
34:2c:6f:d4:50:02:46:fa:4b:54:db:d5:1c:f0:9b:70:e3:5d:
1c:07:d2:dc:17:7d:e1:93:06:80:c7:e5:51:b5:fa:97:b8:cf:
e5:31:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:36 2026 by rpki-client