Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: LMtW11bZvrkGVUAlB2DbXXUAAoYQkzpeGZGjYYVUKXw=
Subject key identifier: D0:AD:C3:3B:88:DE:6F:41:BE:6B:BD:8F:42:7A:2C:6E:4B:41:02:47
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 019FA8620C7A3D203659814520792F72FD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 0FD7
Signing time: Tue 28 Jul 2026 11:00:25 +0000
Manifest this update: Tue 28 Jul 2026 11:00:25 +0000
Manifest next update: Wed 29 Jul 2026 11:00:25 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: 0jR65Tn48CkmDLO2CprzgFTxp5w8PxgSraAP54guKHY=)
2: fqd_p4Wrb6OXddN1aeuYEJC8YH4.asa (hash: jmbRwKrDPkjso/zUasnqP+cDaGWkVpbGq+nQ2VGiSLw=)
3: mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa (hash: 05RPu7PASUup4/F6w6O5WKp82l03RTgAZ/jZKw8NCyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:0c:7a:3d:20:36:59:81:45:20:79:2f:72:fd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Jul 28 11:00:25 2026 GMT
Not After : Jul 29 11:00:25 2026 GMT
Subject: CN=d0adc33b88de6f41be6bbd8f427a2c6e4b410247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:ac:31:88:08:27:06:c8:1e:2c:0d:60:1d:
83:10:57:e9:6a:d4:a7:23:b5:10:60:6a:63:2d:75:
90:a4:90:4d:a4:7f:c3:58:01:2a:fb:9e:87:9c:e8:
19:37:c7:05:e7:e6:d2:70:4f:85:da:0f:1f:ce:ab:
67:64:0e:83:0e:1e:1a:86:87:3f:93:1c:7d:8c:57:
7d:57:2c:cd:90:6e:b0:b9:dd:d7:07:26:0b:9e:41:
bb:02:29:5c:df:37:0e:85:62:e8:48:00:d3:ac:24:
5d:25:95:b5:53:e4:04:fd:5a:f6:1a:a4:0f:f1:f3:
41:86:b1:03:5c:38:73:56:61:b1:4d:29:af:c2:42:
44:71:8e:14:60:80:d4:6a:87:35:3b:f8:21:57:19:
15:00:fe:95:89:89:6b:5a:d5:ca:78:8e:96:8b:95:
17:ca:2b:93:81:98:f5:bb:1c:1c:dd:af:d5:cc:fb:
ab:39:8f:e0:ed:69:bd:0d:8d:fe:1b:b4:85:46:78:
7c:e2:ea:dd:3d:a7:75:6b:6b:8a:08:97:8d:3e:af:
61:1a:bc:75:a7:ec:ea:39:f1:14:a8:db:3b:08:75:
9e:b5:6e:61:a8:6e:f8:14:f6:22:b1:2a:a4:b9:08:
29:d7:27:bd:ae:00:d8:b4:d6:0d:44:60:b7:90:50:
24:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AD:C3:3B:88:DE:6F:41:BE:6B:BD:8F:42:7A:2C:6E:4B:41:02:47
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:89:70:d4:13:af:86:c1:d6:ac:e7:95:50:37:ff:ab:bf:fd:
fc:4d:41:4a:2f:38:42:46:6f:09:c7:d5:a8:d3:71:b2:82:67:
a5:37:78:9b:1d:25:b5:c2:83:d6:bb:f3:d8:ff:f0:f6:b2:0f:
66:98:e0:26:c3:55:2d:ec:d5:b1:b4:a3:70:70:f1:15:7a:86:
7a:89:47:9a:6c:b8:29:ec:36:54:ac:d2:63:87:9a:57:b9:89:
c0:bc:db:ab:16:47:7f:a5:cc:2a:e1:41:62:57:81:81:5d:0d:
22:99:22:15:cd:87:f0:f7:08:83:76:c3:b6:ea:cd:7b:f7:09:
8d:99:4c:4c:13:81:e1:1f:e6:47:70:34:a6:4d:74:f3:e1:e5:
0d:cc:7c:97:78:f5:8a:dd:d9:c3:f5:a7:02:49:26:f1:20:54:
33:75:87:e3:53:bf:9f:dd:ce:ef:2d:74:9d:70:f6:42:e8:d7:
e4:3c:6c:b0:ba:9a:8d:f1:03:0c:53:96:92:87:23:c4:61:bf:
4e:4e:3d:43:66:0e:9d:b3:54:7e:b7:ac:16:e9:70:78:fb:c7:
fc:16:d1:75:76:59:e6:14:15:cb:b0:62:70:b9:d4:21:aa:87:
fc:a2:67:85:81:d1:2f:2b:92:a3:0e:3f:cc:c4:11:c2:02:c9:
03:58:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:15 2026 by rpki-client