Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
File: tK_MhnJK4o7jZE0b6ehSCj7zia0.mft (raw, json)
Hash identifier: uvHalIOUwrD/kJ/ledvY1P/OQ1mFmqjNb7ustGUFHFM=
Subject key identifier: 20:96:37:F0:A5:1F:D7:EF:FD:FD:50:C6:18:89:47:38:23:29:EF:C8
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Certificate issuer: /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial: 019FAC75FBFCECEA322E6D4C3D60038B69CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:40 +0000
Manifest this update: Wed 29 Jul 2026 06:00:40 +0000
Manifest next update: Thu 30 Jul 2026 06:00:40 +0000
Files and hashes: 1: tK_MhnJK4o7jZE0b6ehSCj7zia0.crl (hash: e9lTEbyrlNA3qdREuE+FtnRp9fYhsCpXfPTg2JgMUxw=)
2: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (hash: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:fb:fc:ec:ea:32:2e:6d:4c:3d:60:03:8b:69:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Validity
Not Before: Jul 29 06:00:40 2026 GMT
Not After : Jul 30 06:00:40 2026 GMT
Subject: CN=209637f0a51fd7effdfd50c6188947382329efc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:81:e1:19:c8:9b:3c:43:ec:83:e0:ff:6e:
14:f5:e0:92:e5:2b:68:c2:8e:1d:a9:0d:0c:4a:d8:
c7:ce:c5:a2:54:d9:06:ae:e5:24:d9:65:ee:6b:fe:
40:b6:96:6b:72:51:11:8c:4d:89:d9:fd:bc:3b:1e:
73:39:f5:65:63:34:95:d3:dc:f1:92:46:07:bb:c2:
64:f6:cf:e1:1e:ac:4e:48:2f:b4:ff:d1:33:50:83:
b9:19:37:3c:37:9f:1b:3c:4a:fa:43:a9:9e:ca:d4:
70:c1:4b:cd:03:35:84:ed:49:fb:a8:5a:f6:5e:89:
1e:8a:0e:f6:7f:fb:af:6d:80:cf:ff:da:e4:a6:99:
3c:c3:51:96:4b:0c:45:7b:ac:55:1a:88:3f:9b:33:
42:23:15:71:ae:3f:0b:72:e4:2c:d7:d3:82:6e:69:
4e:76:e8:07:dc:23:2b:37:b5:ed:0f:94:e8:7a:31:
35:af:89:a9:06:05:c9:1a:fe:0a:46:42:ae:9c:33:
e7:5b:a7:a5:e8:29:78:0e:26:11:b2:c8:bb:97:f6:
3d:30:13:6a:cf:91:f1:71:18:e1:1a:76:6e:78:8e:
9d:7d:bf:94:f7:e8:75:e9:82:86:a7:1f:a8:12:42:
d5:0f:16:cf:d8:cd:00:6f:4b:08:cf:b5:cd:ce:50:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:96:37:F0:A5:1F:D7:EF:FD:FD:50:C6:18:89:47:38:23:29:EF:C8
X509v3 Authority Key Identifier:
keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4a:fc:e6:e4:bb:48:dd:d4:a0:a9:02:0e:9c:5f:51:4e:47:
a6:a8:e4:52:97:47:18:0a:5e:b7:cb:94:59:56:92:c2:69:31:
ee:68:0b:1e:0d:61:5b:f6:cb:1a:04:54:28:10:8d:66:16:f5:
59:7b:41:4d:a2:36:4f:45:81:1a:83:da:88:dc:34:b4:ad:9f:
34:00:44:47:a6:e8:97:73:e2:35:78:64:aa:37:8c:f2:ff:be:
d9:15:fa:f4:6e:e9:2b:ba:0c:9c:d7:7e:18:1d:42:3a:5e:d6:
7d:e6:4f:5b:d8:e6:6b:6c:25:c3:1a:1d:6e:1b:a4:31:a6:0f:
cd:34:94:eb:6f:d9:0b:5c:d7:38:3e:19:1c:9a:68:47:a8:00:
cc:67:7e:42:ce:ac:17:84:b1:0b:53:f5:f6:7e:5f:74:f4:a9:
ca:27:5d:e9:87:8a:91:f8:2d:46:a8:30:70:5b:42:99:79:12:
fe:58:28:34:5f:3c:b8:36:3c:66:34:7f:b3:22:f7:50:17:f4:
94:e9:f0:97:55:e1:93:96:76:5a:f1:51:ee:e5:f2:b4:2f:42:
ea:de:04:43:8d:14:54:fb:9f:e7:f9:c1:b1:ff:7c:d3:af:8a:
23:41:85:fb:ed:f7:88:41:9c:74:b7:82:a9:b0:58:c7:12:0e:
f8:be:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:08 2026 by rpki-client