Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: 8ftKsFCSIWmzUTklQCNiFAH9VbSZjuU29UYFXLz3kGM=
Subject key identifier: D7:B7:2C:9E:BC:75:74:AF:BD:75:AC:0E:E6:05:92:F7:F8:4F:75:17
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 019FA975CE47BAAD7B2A8B823C1EDC47DA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 16:01:37 +0000
Manifest this update: Tue 28 Jul 2026 16:01:37 +0000
Manifest next update: Wed 29 Jul 2026 16:01:37 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: S5KEnhatseOC90FXCLBNRdQ3H6KMVnnPy49knxmAo2I=)
2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:ce:47:ba:ad:7b:2a:8b:82:3c:1e:dc:47:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Jul 28 16:01:37 2026 GMT
Not After : Jul 29 16:01:37 2026 GMT
Subject: CN=d7b72c9ebc7574afbd75ac0ee60592f7f84f7517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:56:04:c6:86:15:93:cd:be:37:25:fb:86:
f6:fb:c3:94:9a:5d:86:d4:4f:c6:88:4e:b9:bf:80:
4a:2f:cc:13:7c:ca:0f:08:01:00:61:dd:af:c8:fb:
69:3a:23:af:51:d5:05:34:1d:d8:0f:67:77:2c:7f:
8e:4f:b7:be:5b:f9:12:6a:30:96:fd:fd:be:7d:e3:
91:48:b8:2e:3f:af:49:b5:78:76:a7:0a:d7:05:92:
db:c7:d6:51:30:42:6b:62:73:14:53:cd:ac:7d:b7:
3e:79:a4:0d:d5:c7:ca:ee:32:55:26:7f:31:62:56:
0a:35:d1:f9:b9:f8:16:18:69:50:b4:a4:ae:00:d4:
4b:53:a6:98:33:98:1a:b1:f9:a4:84:97:c5:92:06:
37:36:1e:c2:ed:ee:43:e2:6a:5b:cc:3e:6e:58:8c:
ca:24:ad:b9:5e:eb:cf:7d:34:ad:5a:99:90:71:52:
a6:b2:b9:cb:b0:0e:fb:65:35:13:d3:3b:59:c2:00:
28:cf:29:8c:e7:66:3f:a9:8e:95:12:1d:f6:f2:0d:
18:a3:82:a6:c1:dc:0f:2d:67:43:98:65:50:eb:31:
85:00:1f:96:fb:39:1c:8d:88:f9:0a:d6:c6:2c:ce:
2f:59:56:f9:de:a6:b0:54:d6:e7:22:46:ef:4d:24:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B7:2C:9E:BC:75:74:AF:BD:75:AC:0E:E6:05:92:F7:F8:4F:75:17
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:72:69:18:38:2a:c5:c2:1e:d6:a6:e8:5f:06:43:c9:c0:09:
79:30:b0:c7:d4:74:5a:1f:a6:05:0f:26:c4:c9:dd:61:80:a3:
12:4e:f9:60:03:55:8d:65:4a:07:0b:ce:0a:cb:93:39:25:3a:
6f:14:80:ef:ba:ed:eb:5e:ff:88:39:58:24:d9:25:c5:3f:ce:
7c:a5:15:82:32:59:73:24:fb:4d:c7:56:69:03:5f:7d:ce:a4:
f8:9d:cc:7a:db:3f:49:4b:f6:91:5a:9a:cc:07:0b:52:cb:ed:
5c:a3:45:f4:c2:18:5e:4a:cd:81:fa:13:4b:90:61:7e:c9:a8:
aa:41:99:dd:4f:90:3e:a4:9f:c5:57:53:cc:4b:03:43:fa:50:
10:96:65:96:37:0a:57:af:4e:e9:83:25:21:57:49:3b:6e:b1:
9f:e6:21:4d:02:e3:cd:1d:d8:13:36:0a:f7:e6:e1:3c:ce:3e:
14:c8:a4:e2:aa:9d:af:4b:9d:4f:80:e4:a6:c8:a6:1b:12:3a:
14:32:37:58:c6:bd:89:f5:5f:f0:f5:45:84:55:ca:5c:a1:0a:
a8:b0:9b:cd:a5:bc:66:c4:74:62:0f:c4:61:2c:24:c9:c8:c1:
dd:b6:fa:b0:a4:d0:ed:31:d4:f1:d4:b5:1d:a0:72:7c:a4:a2:
0b:b1:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:08 2026 by rpki-client