Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: bqCgaGpTZvAaaARmdMum3u0ynv+EJZAPmknwQBCkGaU=
Subject key identifier: 61:5D:C1:A8:48:49:BC:50:A7:88:11:5F:2B:23:87:7F:A1:70:FC:EC
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019FA899EF97238F457AB0B820B67ADC1463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 1391
Signing time: Tue 28 Jul 2026 12:01:28 +0000
Manifest this update: Tue 28 Jul 2026 12:01:28 +0000
Manifest next update: Wed 29 Jul 2026 12:01:28 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: wnErCEYTBzg21hCWv9713rIuwJa2excmzdRf826CjjI=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:ef:97:23:8f:45:7a:b0:b8:20:b6:7a:dc:14:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Jul 28 12:01:28 2026 GMT
Not After : Jul 29 12:01:28 2026 GMT
Subject: CN=615dc1a84849bc50a788115f2b23877fa170fcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:24:53:cc:2f:9a:29:b5:af:8f:b4:28:2c:
ce:c1:e7:fa:5b:eb:62:19:0f:8e:79:9d:4b:b8:d8:
7e:db:4f:c2:26:e9:69:aa:0c:b3:0a:d4:78:60:7f:
08:b2:c3:7f:de:cc:49:a8:95:d5:e3:f4:fd:96:40:
fe:d3:1c:02:40:ce:a6:cf:37:1a:32:98:86:f4:63:
30:ba:db:0e:df:fc:06:b6:68:1d:5a:02:d2:51:cd:
29:ca:23:ea:e4:bc:b8:98:af:1f:05:0d:9a:ed:01:
a4:56:0d:ed:69:f4:1d:d3:6f:9c:0b:14:07:e3:ec:
a6:52:29:0e:87:73:30:61:3f:07:60:cc:f5:79:ba:
77:ca:e3:ae:2c:10:ce:80:57:f2:ef:fe:63:79:26:
74:7b:91:84:45:e3:da:5d:cc:f6:42:34:db:df:a7:
21:45:66:c8:4c:f1:f7:1a:67:86:ef:e1:52:55:e2:
e0:ed:be:b5:ee:a7:34:52:12:fe:a3:1a:67:5b:0d:
e2:d5:b6:bc:22:61:36:d9:42:43:ea:cc:59:34:73:
04:00:fe:96:85:b4:26:28:9c:99:bf:87:74:f2:da:
0a:f2:aa:2a:57:40:af:5e:40:ff:40:eb:36:f1:4c:
af:9f:77:c9:14:de:3b:5e:bb:93:83:0e:14:12:d1:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:C1:A8:48:49:BC:50:A7:88:11:5F:2B:23:87:7F:A1:70:FC:EC
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a3:81:d0:8b:78:6b:29:f4:b9:f2:c7:ab:74:ea:3b:80:69:
93:f1:26:b5:0d:6b:82:24:df:d1:8c:95:9c:bb:3f:0e:c4:47:
bf:dd:d0:b4:de:15:c4:00:e4:62:5c:1e:9a:5c:0c:ee:e7:0d:
c3:2e:46:02:34:9d:86:6e:13:fe:54:53:ed:1b:e0:56:a0:cf:
f5:e5:5e:71:88:9b:b1:3c:93:78:d5:fd:ce:75:15:d2:8e:2c:
d1:c4:0c:e1:1e:b9:5e:3a:90:2d:b1:67:06:18:9c:8b:bc:47:
52:2e:8c:1a:0b:4b:23:37:30:da:2c:b5:51:6e:25:3a:29:bd:
aa:7a:3e:ba:8b:aa:ad:30:37:e3:10:24:d3:66:66:f2:da:f8:
89:c2:2f:79:cb:a7:59:97:7d:3a:e5:2b:d8:66:b0:e9:1b:ff:
ba:aa:a2:76:92:f9:88:d8:6d:9d:ea:6c:e1:2c:83:d7:e8:89:
1d:bf:4a:82:9f:62:49:bc:b2:13:bf:20:87:7d:2e:9a:1a:67:
76:9f:a1:64:a7:13:9f:bd:40:72:f7:26:e8:46:45:56:f7:79:
6e:d9:9d:5f:9d:f5:1b:a8:92:b1:b8:fd:c8:5e:05:b2:bd:2e:
cf:cb:91:bc:b2:a3:95:0e:bc:c4:2a:56:85:7a:66:c4:ec:17:
96:2a:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:55:44 2026 by rpki-client