Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
File: 4XxkApvUiWrwp2rY2jPWtDTRDvs.mft (raw, json)
Hash identifier: 6L4kv1tDwMExlgZiwt4KrzXl7T9nI3tim0SZqdkHQZE=
Subject key identifier: D2:8A:9C:32:21:1F:31:B7:06:31:F4:DB:E8:D0:56:23:2C:D8:C2:50
Authority key identifier: E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB
Certificate issuer: /CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
Certificate serial: 019FAC08D961D477C659F79C2C6E34583DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 04:01:28 +0000
Manifest this update: Wed 29 Jul 2026 04:01:28 +0000
Manifest next update: Thu 30 Jul 2026 04:01:28 +0000
Files and hashes: 1: 4XxkApvUiWrwp2rY2jPWtDTRDvs.crl (hash: Qw2kRNIJOH4HYWaKIPss8J0P94A9AiE62lTascGZFEU=)
2: FSSe1tEDCP5eij1O2L6qukAQDhc.roa (hash: xQCqNXwk7J8ALgUJnGIQA4t2bApXYtk3W+6tyFVQHYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:d9:61:d4:77:c6:59:f7:9c:2c:6e:34:58:3d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
Validity
Not Before: Jul 29 04:01:28 2026 GMT
Not After : Jul 30 04:01:28 2026 GMT
Subject: CN=d28a9c32211f31b70631f4dbe8d056232cd8c250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:17:5a:af:39:43:38:3b:63:b8:d1:f0:14:
06:a5:1b:67:ca:88:aa:ff:96:5a:c7:00:2a:2f:67:
6f:78:c9:bc:42:79:5f:0d:2a:6c:bd:52:3b:d4:ed:
59:3d:b7:c8:2f:0b:5d:8c:7d:9b:4e:8f:b6:dd:8c:
8a:41:79:f2:a3:10:51:bd:65:3c:3c:d0:5e:99:83:
1b:76:ef:14:44:5e:31:5b:a0:99:44:b6:d1:ee:5c:
62:f8:da:ec:a1:c5:5c:dd:c6:f7:0b:1b:48:68:03:
c3:e9:78:95:3c:58:66:bd:eb:0f:cd:10:15:71:61:
ec:62:35:0f:d9:f4:12:9a:7b:f3:d2:b3:8c:92:09:
91:a7:db:d1:b5:17:96:50:78:a5:25:61:0c:bc:cf:
c6:bd:c7:52:47:40:7f:62:9a:58:fc:10:8f:fd:ff:
49:50:96:db:70:5a:f9:9b:22:69:04:61:20:47:6e:
47:1f:b8:12:86:b4:8b:c3:83:68:66:12:1a:a1:5e:
39:d7:84:99:b2:e2:4c:de:5b:b1:db:fa:fe:1f:53:
0c:72:19:4e:89:88:79:c4:95:05:e2:09:19:2a:af:
a5:6f:11:01:14:a8:3a:c8:80:98:35:7a:cd:cf:b0:
7e:9e:1a:dc:9a:c3:91:57:3f:7d:d7:13:a7:6e:fe:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8A:9C:32:21:1F:31:B7:06:31:F4:DB:E8:D0:56:23:2C:D8:C2:50
X509v3 Authority Key Identifier:
keyid:E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:42:81:ce:ad:dd:21:bc:c2:57:41:33:41:a0:1b:21:fb:b6:
c2:30:78:64:64:63:3d:40:e9:fe:1d:b8:80:b1:2e:80:3a:49:
57:fe:2a:50:6c:8e:f9:aa:a6:60:dd:bb:82:22:cc:f3:7d:43:
04:46:a3:3c:79:ab:05:a4:1c:c3:62:94:fe:35:07:7e:54:29:
d5:5c:e7:b0:fc:2e:9b:78:53:16:e9:5f:25:8f:91:b4:23:47:
f2:bf:5e:b1:18:a5:14:2a:72:8c:77:e7:22:b1:b8:55:f9:1c:
c4:6e:6f:c9:f9:f5:4c:d5:05:d1:3a:46:77:f5:63:e4:7f:60:
fb:9e:2d:01:01:09:d6:e7:03:d4:69:6d:8c:8d:d1:4f:00:d5:
78:c7:50:c1:82:df:bc:3c:8b:ff:a9:4b:10:15:a6:76:fb:91:
0b:46:51:ce:bf:2b:0b:4b:91:f3:f2:fe:9c:a4:8e:ac:8f:7e:
73:da:18:6d:3c:4f:61:9a:07:75:d8:29:76:14:32:b7:2c:1c:
dd:f1:c1:59:88:35:d4:60:c0:3e:9c:26:aa:7c:5f:5f:27:d3:
55:16:e2:ba:9a:fb:5c:67:c9:a1:e6:2e:47:55:53:04:a1:20:
48:a1:02:1e:92:f9:25:fd:21:8b:4e:67:84:cc:5d:6e:95:5d:
c7:9d:41:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:30 2026 by rpki-client