Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
File: 8457gT6aM4MKE7jBiDhMLcTHXJc.mft (raw, json)
Hash identifier: 9p3zJl9dt1HD3B30Bgare05VuP1JCVcJ2uT99ziJSlY=
Subject key identifier: DE:A0:15:3E:54:CE:87:F9:94:73:45:2C:CC:D9:EF:B4:D4:C3:36:72
Authority key identifier: F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
Certificate issuer: /CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Certificate serial: 019FA89A3FED023A6214DC94BFA0831A4C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:48 +0000
Manifest this update: Tue 28 Jul 2026 12:01:48 +0000
Manifest next update: Wed 29 Jul 2026 12:01:48 +0000
Files and hashes: 1: 1lHC3eEb4JgrWUhgQdZGe237xNE.roa (hash: tiibMI6HO4qP8jmiKq9SAdjkuilfWtaVHKPxHUTz4wg=)
2: 8457gT6aM4MKE7jBiDhMLcTHXJc.crl (hash: BZZeXeuKnZ66Fv9EMU7xfu7k9Q98ORzjNsBN5l6Vh1o=)
3: PYTmdV0F9SG-733WM6hd2UxmEKQ.roa (hash: C/kjeN97nB1/VJQ7m/rVNOnzP/hxeC+2PpOB/KvRfaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:3f:ed:02:3a:62:14:dc:94:bf:a0:83:1a:4c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Validity
Not Before: Jul 28 12:01:48 2026 GMT
Not After : Jul 29 12:01:48 2026 GMT
Subject: CN=dea0153e54ce87f99473452cccd9efb4d4c33672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a0:9b:86:60:b1:34:73:f5:eb:76:dc:30:dc:
7b:e9:28:7c:c1:28:e1:f6:61:1a:d1:b5:a9:6d:3a:
21:fd:df:bc:56:d6:bf:0c:5a:c0:55:5d:d7:ee:99:
d8:e1:63:41:96:2c:59:92:23:bc:9a:f3:e2:14:ce:
cf:36:7e:ce:bf:4f:5a:3f:6e:cc:05:7b:d7:9f:83:
cc:b5:c9:54:0d:de:1d:cd:b4:89:df:23:ce:7c:7b:
8a:d7:64:f6:42:44:aa:26:dc:4e:69:a4:35:82:dd:
cf:12:1c:8a:6e:12:68:b2:c5:6f:8f:74:b6:ad:ba:
89:35:68:92:79:55:01:9f:24:bd:d7:68:5a:d4:8c:
88:40:98:0a:1b:f6:2a:75:65:23:3b:cb:0c:c6:49:
1b:2b:aa:ee:10:98:8e:2c:4e:b0:e9:ec:85:37:ce:
5b:74:8d:5a:c8:ad:73:97:9c:9c:e3:82:34:b6:3b:
1f:8b:3a:ab:d3:70:17:a7:43:4e:5a:ef:55:12:f6:
97:4b:0a:d8:56:d5:f7:04:8d:40:00:e3:18:8d:bd:
8a:81:7a:b2:d2:d5:21:07:79:8a:b8:bb:db:92:ed:
c1:de:28:e8:85:1e:5b:2c:df:b7:cb:0e:66:bb:59:
d5:dd:ba:c3:5a:19:fb:29:54:b9:64:77:50:c1:4b:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:15:3E:54:CE:87:F9:94:73:45:2C:CC:D9:EF:B4:D4:C3:36:72
X509v3 Authority Key Identifier:
keyid:F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0b:a9:f0:84:36:22:35:11:9b:43:ca:e3:04:30:07:8f:cc:
5f:2f:86:34:8f:07:39:91:32:e3:27:24:57:20:5b:ba:18:26:
b2:21:43:b6:a9:9f:68:fb:c5:fe:79:95:e8:cb:c1:f5:82:f0:
1d:f0:d5:cb:10:cc:41:01:69:97:86:b2:96:be:6c:b8:1a:35:
b8:7d:2c:9e:9c:e8:33:40:12:2e:1f:09:6b:e1:8a:b2:9c:79:
ec:69:13:80:10:9c:ba:c7:86:9b:81:2c:b2:55:6d:84:6f:33:
c3:23:ae:2f:ca:4e:ba:a0:4e:9e:0b:3f:21:74:38:c5:1f:b9:
21:b2:dc:ad:f4:d5:49:53:8c:19:32:16:30:6a:21:cd:28:f6:
55:24:2a:bb:89:84:a7:21:2d:96:c1:9c:89:66:21:b2:f6:04:
38:c9:ad:dc:a1:00:bb:f0:41:e0:e3:76:b1:ea:e2:32:cc:2f:
12:ee:7f:c1:9b:b3:71:70:ec:f3:f1:b6:b8:08:0c:81:f7:83:
c6:7b:9d:65:35:bb:3a:2d:ee:de:05:c2:93:02:10:e3:08:d4:
19:a3:35:64:2a:1b:4f:e5:e5:47:e7:68:42:f6:2b:41:97:5d:
e4:a5:72:43:88:00:6e:ae:cd:7a:11:1f:a5:c6:c0:34:3e:3e:
d8:2d:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:04 2026 by rpki-client