Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: sZYfx2SPuWVzHOahC3f9Nr4UbYEhtdUD2Q/Tok5h3dg=
Subject key identifier: 6E:1A:BC:B0:B0:3B:80:F9:40:73:71:2F:0F:28:A5:06:36:9C:DD:53
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 019FA9AC625CD4432BA016BCC7CD388FA4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0D2E
Signing time: Tue 28 Jul 2026 17:01:14 +0000
Manifest this update: Tue 28 Jul 2026 17:01:14 +0000
Manifest next update: Wed 29 Jul 2026 17:01:14 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: 221lKPbcFNFa+6ZCcbcMnYohu22OvPb5MP7Byz66m6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:62:5c:d4:43:2b:a0:16:bc:c7:cd:38:8f:a4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Jul 28 17:01:14 2026 GMT
Not After : Jul 29 17:01:14 2026 GMT
Subject: CN=6e1abcb0b03b80f94073712f0f28a506369cdd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:e6:16:93:38:7a:ee:53:b6:9c:cf:b5:0a:
cb:df:97:74:13:63:a7:e0:7c:ce:90:fa:df:48:ad:
19:6a:cc:d4:86:4f:4a:3e:94:b2:0b:03:fe:15:6f:
fa:75:16:74:42:24:4a:dd:16:a3:32:95:7d:c6:53:
23:0a:8e:9c:f0:ba:d3:19:be:0e:4d:4d:7e:e2:05:
ec:c8:e9:d2:64:e0:73:5b:7a:e0:d4:fa:7c:66:65:
c2:22:5a:d4:96:da:63:81:16:3c:5f:6e:71:98:94:
76:37:4e:b8:fc:51:a2:fe:4c:94:c3:a3:92:32:6c:
fb:ef:20:97:23:ce:94:89:8c:0c:87:81:91:8d:4f:
f7:b7:72:98:4d:55:2e:cf:0b:cc:71:25:51:2a:64:
1e:c1:e7:23:1b:c0:61:bf:06:c0:02:3e:5a:1b:f0:
cc:68:a6:91:7c:fb:14:66:2e:fd:3c:13:36:f7:42:
95:72:ef:81:b5:03:fc:64:32:81:64:9a:bf:ed:93:
40:78:af:06:2e:d0:3f:ae:3b:c0:04:be:ab:91:33:
a8:59:1a:1a:04:5c:e2:97:ed:a8:fc:52:f5:2d:39:
20:89:dd:2f:a8:22:0b:21:69:80:0c:05:8c:97:c3:
97:f8:6a:b1:96:4a:83:23:8b:6b:59:aa:f2:95:6b:
9b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:BC:B0:B0:3B:80:F9:40:73:71:2F:0F:28:A5:06:36:9C:DD:53
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7b:a7:67:e2:c6:8f:d9:e4:ec:66:f5:48:bd:d3:c4:10:ff:
19:67:21:9c:74:91:ff:b4:49:4f:30:95:0d:44:ea:a1:be:0c:
19:6e:7f:3a:52:1d:c4:76:a2:de:91:99:15:26:46:8a:8b:35:
c6:ed:98:c9:fd:0c:ae:71:ba:c2:c9:05:74:44:10:04:7b:fa:
01:6d:eb:b5:f3:67:b4:7f:4b:15:27:4d:10:d2:0a:fe:8d:93:
67:ab:40:d3:0c:5e:f1:72:f2:2d:5b:13:57:c3:0c:0e:2a:a3:
10:81:b6:9c:71:d7:8c:5c:75:db:2c:96:33:d5:69:44:ff:53:
38:a3:ad:8d:ba:26:94:e1:cd:42:84:36:e4:18:1d:30:75:ba:
25:54:2e:57:7e:e9:01:9f:fb:fa:74:e4:dd:13:d3:e2:b2:da:
31:67:e7:89:86:91:f8:6c:76:7c:1d:58:94:c1:88:d2:13:8e:
76:93:b1:d2:53:bb:09:f5:45:3e:9e:dd:2a:70:7e:23:04:2e:
f8:8f:9d:f0:b1:35:05:71:05:b2:05:ee:50:43:3d:25:36:19:
88:77:61:6b:c5:29:d9:fe:65:87:a8:25:6d:e3:b1:16:06:61:
08:55:8a:00:b2:22:67:1b:a0:73:86:9c:bd:7f:6a:6e:ea:1e:
e6:94:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:42 2026 by rpki-client