Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
File: P1oa6clM3jczsUz3HS5FAjYCG-c.mft (raw, json)
Hash identifier: Bf6zQhBnieGTyXNUzCr8WfQi+RbdZ7NoO34S5aLU3Ls=
Subject key identifier: 5D:2D:55:F5:46:25:60:18:98:26:00:C0:B7:75:9F:5A:59:B3:8D:87
Authority key identifier: 3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
Certificate issuer: /CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Certificate serial: 019FA89A23AF362907AC1394ADA2F8BD17F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:41 +0000
Manifest this update: Tue 28 Jul 2026 12:01:41 +0000
Manifest next update: Wed 29 Jul 2026 12:01:41 +0000
Files and hashes: 1: 5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa (hash: oPbe4w173UuB1VDOYJqEbd8iNWC/h8MGEf5qvBqUZd0=)
2: P1oa6clM3jczsUz3HS5FAjYCG-c.crl (hash: XHyULO93VTbK3rdxlsgk8vA1ZQdPagC0nnUZae/iFWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:23:af:36:29:07:ac:13:94:ad:a2:f8:bd:17:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Validity
Not Before: Jul 28 12:01:41 2026 GMT
Not After : Jul 29 12:01:41 2026 GMT
Subject: CN=5d2d55f546256018982600c0b7759f5a59b38d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:a5:b2:50:6e:8f:50:e1:d6:9b:7e:7c:c7:
9b:42:93:44:71:17:d5:b5:27:e0:70:73:ca:0b:3e:
62:6d:58:7a:a9:53:f0:ca:fa:48:f9:e3:78:3e:f7:
ca:84:37:66:69:41:fe:0a:05:77:12:2b:1f:56:b8:
47:e7:80:ae:f9:44:f6:b8:62:66:ea:62:2d:7f:81:
6f:71:7e:2a:30:b1:8b:b9:c9:c5:22:af:18:7b:89:
53:7b:16:f9:a2:8c:6a:c2:08:54:4f:bf:64:f6:0f:
9a:d3:f5:82:c2:24:ff:b2:ca:46:0f:af:04:0d:a8:
e5:ec:52:aa:7d:bf:c4:ec:ce:9e:f8:32:96:a3:6a:
32:f7:b4:33:63:23:9e:bb:c1:86:b1:70:68:14:c5:
7d:ee:ba:b1:83:de:61:04:98:8a:67:d2:c0:12:19:
f5:e0:89:e8:89:d0:fb:91:34:f0:32:fb:63:90:4d:
c0:8a:12:2b:d0:23:c4:ad:4c:af:68:19:f0:a6:9a:
5a:a5:ba:cb:01:a4:0c:1e:a5:c4:1d:a2:63:87:1b:
40:60:d8:63:47:0b:5a:e1:89:73:77:a5:e1:26:36:
e2:d9:26:9e:71:b5:74:68:75:9d:f7:81:94:6a:2e:
ac:4d:a5:7d:92:78:48:19:3e:08:7c:77:02:6c:b9:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:55:F5:46:25:60:18:98:26:00:C0:B7:75:9F:5A:59:B3:8D:87
X509v3 Authority Key Identifier:
keyid:3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:42:f8:1c:3b:c6:61:34:fe:ea:4f:97:20:4a:75:a1:24:6d:
cd:71:0b:93:8c:89:15:7d:d9:27:5d:ec:b9:7b:c2:42:48:2f:
e8:29:91:4d:83:25:da:24:65:e9:a0:bc:e7:c3:dc:f2:e4:a1:
22:0f:b0:f3:b4:ab:53:25:e1:03:0c:fb:13:bd:1c:d4:48:d9:
c6:1b:a7:1a:66:da:ba:aa:49:20:d2:89:12:e0:12:3f:ab:8a:
60:95:32:3f:e3:d0:05:ca:70:22:4b:66:c9:52:b2:fc:d8:04:
7d:db:4e:8e:67:1b:aa:22:65:0e:eb:b2:aa:56:82:d2:92:de:
57:e6:a9:36:2d:9b:e4:dc:8d:f0:fd:fe:3b:72:3b:78:9a:86:
bb:fa:9a:6d:a8:bb:6e:79:d0:f9:83:b4:2a:2b:e3:63:5c:62:
80:83:b0:1f:71:c4:11:bf:e7:0d:b2:80:42:bc:16:3f:c4:21:
88:b9:18:ea:12:88:96:cc:3b:e8:6b:9b:a6:48:82:a0:94:85:
4c:a3:18:b8:59:2d:bf:ba:95:24:4e:8d:bc:d5:a7:33:0b:f6:
77:fc:ab:dd:a0:bb:25:e1:a8:05:69:b8:a5:53:13:1b:3a:75:
84:b3:d3:cd:13:5d:f7:10:2e:f0:e9:c8:6c:3b:38:7e:25:56:
60:2b:c6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:01 2026 by rpki-client