Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: 7+3KIywkFvZkuMhbr65OHJ6kUlqccVubv9aeOMrxess=
Subject key identifier: 43:D3:F1:FB:84:F6:33:9A:78:45:1F:03:E4:C5:82:BE:F8:72:8D:C1
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019FAB2C2D59641EC5C694BD85E3D9B2FC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 0A9A
Signing time: Wed 29 Jul 2026 00:00:26 +0000
Manifest this update: Wed 29 Jul 2026 00:00:26 +0000
Manifest next update: Thu 30 Jul 2026 00:00:26 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: mkg2nq202xy651NRCjSTC5e3F0CXwh3kAehykk0xpyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:2d:59:64:1e:c5:c6:94:bd:85:e3:d9:b2:fc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Jul 29 00:00:26 2026 GMT
Not After : Jul 30 00:00:26 2026 GMT
Subject: CN=43d3f1fb84f6339a78451f03e4c582bef8728dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:2a:fa:c4:c1:b0:8f:02:6e:7e:3b:95:ae:
6d:67:f7:94:12:42:eb:a1:64:11:ac:55:53:08:85:
4a:3c:b2:3c:1c:f1:65:d7:40:3e:10:7c:a4:c3:e9:
c4:df:02:bc:a5:94:33:12:d5:30:58:7e:e5:ce:9c:
a1:62:06:46:9b:2b:ef:ce:25:8c:dd:77:30:4b:a3:
03:92:2d:6b:0b:1d:ac:52:61:93:08:f2:fa:4f:ee:
7a:4f:b4:fd:ba:3b:1d:df:43:10:89:f8:7c:e4:14:
a5:a1:e0:61:94:0c:f3:ae:5a:aa:45:f4:fd:4e:30:
e4:c9:e1:81:0b:96:e5:95:70:8d:76:10:fa:90:57:
5f:ef:2d:bd:fd:d8:27:f5:e7:6f:eb:50:78:d5:0a:
b2:54:a2:65:29:8c:6c:53:44:46:b0:0e:01:32:46:
5f:bd:db:20:e7:3e:52:17:1f:c4:47:41:84:cf:de:
27:9d:1e:fc:bf:36:7a:f0:5f:2e:ec:ed:81:21:7a:
5b:9d:a4:cc:cd:30:56:6a:b4:24:87:e6:c7:6c:c2:
19:82:a3:da:cf:4e:e3:5d:ac:91:9b:03:02:ab:c5:
b0:84:e9:75:f6:80:6e:0d:85:1b:b1:85:2f:95:cc:
4a:80:de:bd:80:d3:47:ca:4b:30:9b:2c:d6:50:2f:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D3:F1:FB:84:F6:33:9A:78:45:1F:03:E4:C5:82:BE:F8:72:8D:C1
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fe:ce:63:99:7a:c3:22:e4:20:16:04:5b:6b:6f:02:6c:28:
7b:14:70:a1:d4:0c:45:ba:96:db:a2:92:4d:84:01:b6:f6:d5:
a9:c5:42:8c:d2:25:88:f0:19:af:8e:ec:f4:b6:f3:08:17:7c:
07:57:ae:a8:52:0f:68:20:50:fd:e1:df:a1:12:cb:30:97:47:
54:f5:d5:56:fc:d9:5a:e6:42:e9:4b:0b:7c:7b:46:d4:16:f8:
c6:7b:85:18:ae:63:c4:bc:a9:8f:16:c4:de:da:6b:c0:bb:00:
5d:5b:6d:84:df:d1:b5:e6:03:69:a9:6e:fc:11:0f:e4:f4:01:
7c:b5:1d:18:f7:63:da:f2:c0:85:a1:75:6c:24:e2:60:fa:b3:
a8:ae:5c:77:a9:1e:ed:b9:80:2a:0e:5a:7a:02:8b:aa:9f:2a:
1c:17:83:fa:f2:98:a8:78:24:61:02:ba:e3:ba:df:c1:91:f8:
4f:cf:ad:8e:97:40:c4:71:98:2e:05:22:70:3e:ae:70:70:c5:
1f:d4:25:d5:c2:9e:31:fa:19:02:97:08:ec:8f:8e:29:b4:86:
06:fa:96:f0:49:7a:3a:64:b9:48:c5:57:68:b7:dc:c4:0d:30:
d1:97:37:e2:9b:15:8c:45:f6:12:3e:df:6d:6f:2c:da:07:d0:
3b:6f:51:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:46 2026 by rpki-client