Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
File: tEH8gb4caZv_xFKL3JyTMwElo20.mft (raw, json)
Hash identifier: wV6xS68WQyN0DwNPRj4Zg1nkIC7BrUW4Zj0qXOTL7P8=
Subject key identifier: 92:15:A3:33:77:64:47:95:8E:7D:B5:57:5F:B5:3C:76:E6:26:62:85
Authority key identifier: B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
Certificate issuer: /CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Certificate serial: 019FAC75D8A464F42BFB4059963646098689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:31 +0000
Manifest this update: Wed 29 Jul 2026 06:00:31 +0000
Manifest next update: Thu 30 Jul 2026 06:00:31 +0000
Files and hashes: 1: tEH8gb4caZv_xFKL3JyTMwElo20.crl (hash: K3EHBX31EQq3j6EdbDst6a2c6KTqD6GpJbvi+XC/2pU=)
2: yyonxWMV91Z2Iy_izhRbZlfmQz8.roa (hash: U35LAOz/goOJLZMkOqSlfS1X+wiK+fXvB4Ca7DHTgOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:d8:a4:64:f4:2b:fb:40:59:96:36:46:09:86:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Validity
Not Before: Jul 29 06:00:31 2026 GMT
Not After : Jul 30 06:00:31 2026 GMT
Subject: CN=9215a333776447958e7db5575fb53c76e6266285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:6a:c8:f9:a6:c0:0f:0c:c2:64:a0:ad:7a:
80:7d:cb:be:17:3e:57:d2:c6:33:9c:ed:82:7b:c5:
e3:e6:a6:e5:c1:6c:9c:5e:e3:f8:f2:74:ef:4d:58:
e2:3e:1c:7f:a8:25:38:04:5b:fc:ed:38:c0:c5:26:
32:b7:a6:b2:1f:61:92:52:9a:6d:48:14:09:d0:7b:
87:cc:64:46:35:e3:43:a1:6e:8d:84:68:fd:ca:4e:
c4:c5:12:27:90:0f:10:b0:e9:6b:02:6c:4f:93:cf:
d6:36:33:0a:22:bc:15:4c:1e:11:b9:93:6b:d2:32:
f3:6d:20:25:31:43:a9:80:66:7f:b4:83:db:f0:75:
0d:6d:c3:61:e6:2e:f1:1c:2a:f0:5e:fe:86:5f:08:
21:37:9b:95:b0:c1:39:27:48:28:e0:03:90:08:73:
26:ed:bc:bb:44:95:a2:83:02:5a:e3:fe:f9:f3:38:
81:c5:18:ce:11:f2:63:4e:a3:ac:65:61:61:36:d7:
bf:28:16:08:ec:02:29:8d:eb:4d:3c:1b:3a:4e:7e:
0b:24:31:25:26:9d:bc:30:2b:d4:2b:76:58:4c:cc:
22:26:36:3c:32:e9:d5:40:2b:ca:33:72:a6:06:5b:
7f:fa:6f:a4:be:b5:f5:23:29:04:c0:0b:1e:33:01:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:15:A3:33:77:64:47:95:8E:7D:B5:57:5F:B5:3C:76:E6:26:62:85
X509v3 Authority Key Identifier:
keyid:B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:5d:b5:c8:4f:26:a4:46:8e:81:4b:31:58:8a:74:d5:15:
38:56:f3:32:c8:a6:03:aa:50:ae:44:b6:00:ab:68:c7:b9:96:
17:d7:fa:61:6f:5f:df:bb:d8:68:a5:f0:ea:a5:93:45:4b:8c:
fa:88:04:54:7d:b8:c3:fd:f5:db:64:4b:a8:ae:82:14:2f:12:
a6:17:94:63:f0:d3:9a:d2:3d:e3:a1:fa:5c:ae:e7:65:2d:6b:
91:88:84:9e:47:1c:25:07:ae:b2:29:ed:40:bf:5e:80:b8:3c:
22:ca:27:ef:ea:a9:0e:2e:a2:74:20:6a:a8:be:c8:f0:16:2b:
17:f6:57:37:cb:44:09:70:ec:a3:94:e1:5b:b6:2b:0c:dc:7e:
0f:6c:47:a8:d9:2c:5b:16:2f:b6:58:6a:26:2c:52:23:3c:a5:
35:e3:26:14:17:7d:08:38:f0:a9:10:76:17:d6:c3:14:01:65:
aa:81:26:51:b5:b4:0c:04:75:a2:48:e2:cb:8e:71:54:18:97:
b4:86:bc:d4:ff:c5:ca:53:bc:a3:1d:82:cc:7d:75:78:e5:cd:
67:59:dd:0e:d2:4a:eb:25:c0:03:15:55:21:74:a7:7c:b2:d6:
b5:aa:a2:db:c7:04:79:04:16:2f:03:94:8a:ed:df:6d:03:80:
24:72:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:49 2026 by rpki-client