Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: HHGr8Tk5Sp2HwC3c6am4y26SQBOgFVrg5M7+Y8fKo+0=
Subject key identifier: 34:04:1C:1F:94:8E:91:EC:61:46:43:70:BB:F9:36:9C:92:E1:7F:45
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019FA9ABE8350579CE8EC98C809C139922B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 17E3
Signing time: Tue 28 Jul 2026 17:00:43 +0000
Manifest this update: Tue 28 Jul 2026 17:00:43 +0000
Manifest next update: Wed 29 Jul 2026 17:00:43 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: NOkgu3tQvMUpZJoQPV2lwGnHYvGo6zBMUGFUs4NVuS8=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:e8:35:05:79:ce:8e:c9:8c:80:9c:13:99:22:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Jul 28 17:00:43 2026 GMT
Not After : Jul 29 17:00:43 2026 GMT
Subject: CN=34041c1f948e91ec61464370bbf9369c92e17f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:d4:67:53:a7:a5:a6:87:b6:61:55:e9:2d:
5a:46:b6:4e:c9:16:58:27:f2:34:ab:20:c3:c1:76:
f2:70:f6:64:6f:4d:c7:31:9c:1d:f2:a5:cd:5e:4d:
12:9b:86:d9:27:12:1c:e4:a7:6e:a1:7b:60:24:e7:
24:98:d7:f9:72:bd:84:ac:f4:4c:1a:d2:ec:e6:cf:
5a:50:77:18:a2:13:34:fa:4d:f3:6d:45:a9:09:49:
2b:0f:62:60:02:7c:b6:8f:d1:77:f2:1d:5a:a6:47:
5f:2d:fa:a6:73:49:ff:66:26:b0:72:af:74:b9:ce:
19:78:ca:45:ad:ee:87:e9:86:b6:87:0e:53:67:ad:
91:e3:94:20:57:5f:62:13:50:15:3e:98:5b:32:3c:
98:3c:68:5f:12:c1:33:97:d0:3c:d4:18:19:04:34:
18:0c:be:53:ff:04:c9:28:62:e0:12:32:73:67:62:
c4:f7:ad:89:0f:b6:31:7b:cb:38:e9:d8:f3:d9:a9:
5b:3b:b0:68:a4:74:45:70:fe:0e:65:04:a4:26:5d:
cb:29:92:da:ad:39:e9:0e:34:b5:ea:1a:1f:47:53:
a4:28:99:df:52:db:35:a0:56:23:ed:f3:1c:56:d0:
41:3e:8c:5b:88:4f:ae:f1:fa:47:1f:b6:88:a1:c1:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:04:1C:1F:94:8E:91:EC:61:46:43:70:BB:F9:36:9C:92:E1:7F:45
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:29:64:8d:dc:48:48:ac:4c:99:c8:5c:1c:2e:c5:33:cd:1b:
3d:83:89:78:72:c8:21:29:52:2a:1b:7f:c6:fc:5a:8f:8e:31:
fa:2e:aa:88:aa:df:37:c3:d0:71:4f:2d:5e:4d:3d:98:1d:16:
b2:88:8d:f8:82:74:33:4b:86:59:c6:70:4a:a4:3c:11:d6:08:
53:8d:f5:03:00:72:48:ed:b3:8b:6f:61:61:c4:5c:33:9c:03:
66:2a:c7:46:aa:7f:b9:f9:25:0f:48:d8:6c:ef:1c:51:20:5c:
85:87:17:21:79:ce:e6:94:5a:38:ce:01:ef:fc:1d:13:50:31:
b4:7a:bd:e9:13:41:60:5d:44:e8:82:da:c1:da:9c:23:d9:15:
e9:00:84:5d:82:ee:43:67:49:c7:be:4a:0d:2a:a9:e0:91:43:
cc:48:ed:e4:d4:3a:a0:9f:5d:42:0c:9d:b7:a5:d8:81:ee:6a:
f4:f8:85:74:04:37:24:d7:5e:0e:71:1b:f8:16:39:b6:3d:a3:
d3:11:8f:dd:4c:76:9c:5d:2c:08:6d:b7:1b:5a:3d:98:e4:ba:
82:c6:0f:13:04:fa:b4:f9:b9:1e:68:0d:3f:d3:37:cb:91:62:
e5:4e:4e:3b:f3:d6:e2:27:14:37:42:ac:74:f6:c7:80:00:c1:
41:b4:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:59 2026 by rpki-client