Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: XSw/vNk5YYD+ds2ldaeFvM5iWpuYcQ29ZVByrRgcYqE=
Subject key identifier: E6:6B:DF:7D:DF:FA:83:6A:24:AB:10:F8:BB:EB:52:75:5A:4A:79:68
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019FA9E34D2D622120738F12AA27F127B5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 123B
Signing time: Tue 28 Jul 2026 18:01:13 +0000
Manifest this update: Tue 28 Jul 2026 18:01:13 +0000
Manifest next update: Wed 29 Jul 2026 18:01:13 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: 3Q2kI6Q0miRZPmwkAbV1kfIqnLj7fZaO1aQSR8mpobU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:4d:2d:62:21:20:73:8f:12:aa:27:f1:27:b5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Jul 28 18:01:13 2026 GMT
Not After : Jul 29 18:01:13 2026 GMT
Subject: CN=e66bdf7ddffa836a24ab10f8bbeb52755a4a7968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:74:08:7d:f8:f5:a9:78:4a:2a:01:f0:e4:
87:52:2d:4c:26:63:7c:16:07:c1:5e:3d:48:a2:48:
0d:17:29:67:25:65:d6:32:97:b6:9e:cc:ad:10:01:
5d:e4:c0:5a:de:5a:d4:66:67:a4:08:49:94:bb:0e:
a1:bb:21:c7:0b:48:71:74:e5:5f:21:fd:d0:75:3d:
e1:ae:03:eb:ea:13:69:94:dc:39:6a:1c:d2:ee:d4:
57:35:1b:30:9d:6a:dc:a1:96:fd:b4:49:60:54:79:
2a:dc:43:25:36:1e:c1:47:27:75:20:0e:9e:52:ca:
cc:4a:92:26:ce:a0:8d:24:be:20:6c:67:77:2f:31:
64:49:0a:db:54:5b:3e:ac:d0:46:2c:d7:84:ab:b3:
32:d3:4d:bd:f4:77:9e:c5:fb:7c:2d:51:8f:83:c9:
12:a7:2f:b0:f9:f6:12:6c:2c:86:86:e3:13:af:f0:
2d:ae:81:da:de:a0:61:1d:78:d6:a3:6a:5d:08:aa:
27:9c:31:19:d7:d0:36:b5:04:78:d5:71:ba:e2:2c:
d6:e2:0b:70:aa:cb:e2:db:f3:cf:fd:97:25:7d:68:
53:67:70:58:00:ae:d8:bf:68:60:4a:e8:f3:c7:aa:
ef:6f:0e:51:63:7d:1a:f1:11:ea:69:be:22:88:38:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:DF:7D:DF:FA:83:6A:24:AB:10:F8:BB:EB:52:75:5A:4A:79:68
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4a:4a:b1:59:e4:55:1d:34:f9:ae:aa:f6:d0:ef:d4:8a:a3:
40:53:63:11:c0:9a:2f:b1:4e:7b:6b:2d:75:25:fc:e9:0e:cc:
35:9d:06:3d:05:ac:ea:5e:d2:60:15:b5:ff:47:68:60:a1:c0:
98:70:a0:88:92:ef:0c:f6:fc:1f:b3:34:06:80:6f:0f:02:15:
eb:e0:04:97:1f:ff:a0:6b:98:c6:10:9d:72:f9:22:cb:8d:64:
7c:fa:84:e1:51:4e:5b:2c:d6:17:d7:23:c6:c0:20:d5:ed:90:
4f:cc:71:8f:96:2e:53:cc:b1:98:7d:ca:c7:7d:78:f8:fe:2b:
44:74:e1:a0:3e:4e:b6:c8:24:3c:53:fb:cb:34:a8:f3:ab:39:
8e:3c:83:2f:ad:da:92:f1:4c:ef:54:6e:da:ab:27:8f:fe:9c:
3f:8f:aa:9d:40:9a:d1:75:6e:da:59:1a:a4:9a:24:8b:e7:dc:
80:4d:f1:76:b4:0c:66:d8:a2:27:6e:83:08:67:38:2c:65:0f:
1e:f1:8e:db:ce:ce:df:69:98:65:4e:4d:7f:56:15:d7:29:c5:
64:a9:b6:ff:5a:7f:6f:72:a7:79:f5:81:5d:99:be:6c:ce:9a:
51:ee:a2:58:87:0f:fd:3d:3e:c4:d9:82:71:49:c4:1e:13:70:
bb:69:68:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:40 2026 by rpki-client