Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
File: 6RwUX3wqthPwliJW6LohEFY3nK0.mft (raw, json)
Hash identifier: tqTzBKFqU7STUmr/4G6Cv7O1qvJGk70hszeO1t4cS/I=
Subject key identifier: 43:74:94:42:A3:8A:1F:F0:88:89:05:87:0B:E7:1D:07:DA:34:A7:BB
Authority key identifier: E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD
Certificate issuer: /CN=e91c145f7c2ab613f0962256e8ba211056379cad
Certificate serial: 019FA89A5C0C2C1534C5191E1D63EA30D0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:56 +0000
Manifest this update: Tue 28 Jul 2026 12:01:56 +0000
Manifest next update: Wed 29 Jul 2026 12:01:56 +0000
Files and hashes: 1: 1Lgu1-zB9ylsTLQ_zJFV2x5QBtc.roa (hash: 9Mjx66ZRNBzOgezobspQ/N2rC12olhMnxONbq/i+6C8=)
2: 6RwUX3wqthPwliJW6LohEFY3nK0.crl (hash: qBoFJE6h/opHhigkl8ao5G6GguFfCGeDJEqR8DYTz3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:5c:0c:2c:15:34:c5:19:1e:1d:63:ea:30:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91c145f7c2ab613f0962256e8ba211056379cad
Validity
Not Before: Jul 28 12:01:56 2026 GMT
Not After : Jul 29 12:01:56 2026 GMT
Subject: CN=43749442a38a1ff0888905870be71d07da34a7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e9:a7:3f:ed:42:34:c8:93:97:4b:ac:12:ee:
27:8a:4d:13:c9:9e:c5:a3:2e:55:2b:5b:e6:c9:a1:
8f:28:51:8d:06:71:17:b5:60:95:88:06:e6:44:bc:
09:09:fe:a5:d2:04:ce:00:bd:9a:02:1b:20:26:f7:
28:31:6a:59:99:9e:41:bf:c2:96:37:a4:1b:bd:ca:
79:d4:47:54:7e:50:d2:96:73:58:be:a0:0b:81:2e:
e2:63:6e:76:1b:48:07:85:3c:22:14:5e:b8:62:22:
8f:29:29:f9:2c:92:6d:e0:1f:f7:50:ca:e8:85:67:
c9:d1:e1:86:df:60:b8:b0:6b:0c:18:53:fc:5e:a0:
b4:38:8e:97:e9:cd:9a:d5:da:f0:f5:76:69:0c:74:
b6:7f:d7:74:69:ba:9d:8f:f8:d4:a5:1f:67:55:94:
29:e5:0a:bf:fa:0f:32:a4:69:c2:e8:c6:93:41:71:
2d:07:50:f1:79:da:55:c9:3c:89:12:bd:f8:ee:a7:
b1:bf:c5:1c:59:ee:b1:91:35:6b:04:29:5c:20:73:
c2:34:1e:96:93:2e:de:ed:a3:4d:74:1e:ba:49:92:
ed:10:79:9e:a2:43:7a:51:52:9b:45:df:bc:73:ee:
06:cd:ff:70:66:d5:9a:ee:b5:dd:58:ed:b1:20:ef:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:74:94:42:A3:8A:1F:F0:88:89:05:87:0B:E7:1D:07:DA:34:A7:BB
X509v3 Authority Key Identifier:
keyid:E9:1C:14:5F:7C:2A:B6:13:F0:96:22:56:E8:BA:21:10:56:37:9C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RwUX3wqthPwliJW6LohEFY3nK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/6RwUX3wqthPwliJW6LohEFY3nK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:9c:a0:1e:5d:0a:96:e1:4a:7c:17:0b:32:64:db:19:32:
29:b3:73:63:e3:ac:80:f2:6c:c7:0a:ef:d0:2b:95:eb:82:7f:
e2:e4:1b:25:e8:02:0d:e2:e6:39:c3:66:92:f3:7d:d3:78:22:
22:2e:07:ab:0b:b6:a7:b8:c1:24:bc:e1:40:2a:11:e9:78:27:
33:bc:92:7a:e4:1e:df:ee:54:f1:82:01:6c:d9:d1:9d:2b:eb:
c3:f8:48:29:ed:d1:a1:1d:f8:82:f1:34:7f:67:f8:33:02:a2:
8e:30:0b:0e:8c:41:af:f2:45:b2:da:1b:3c:fe:72:d4:dd:2e:
8d:17:79:76:15:dc:b5:9f:28:95:1e:8e:2e:d3:7d:c0:2b:5b:
89:17:cc:11:33:25:08:71:2c:61:41:36:77:77:cd:52:07:40:
fe:f1:cf:58:9a:a9:dd:47:0e:9c:38:f1:98:12:aa:ce:a7:d7:
3e:e4:f2:9c:3f:a2:0a:59:93:ad:56:25:2f:28:99:61:83:32:
54:ea:0d:89:5b:ed:4b:d6:ed:90:43:dc:b0:a5:5e:8d:52:86:
7c:75:f4:18:da:d7:86:c4:a6:9c:c3:b6:a7:91:aa:1b:53:f8:
1a:ce:88:d7:12:d2:bf:a5:f4:d0:7e:38:80:4d:81:10:e3:c1:
f4:eb:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:44 2026 by rpki-client