Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: B1G+ecXOqAwqKXHJwG6AJia6gDMNy96TpLBeDeZWdEg=
Subject key identifier: 73:B3:57:C6:DD:7B:90:30:3E:8B:64:83:F5:AE:C0:1A:5E:1A:BF:A0
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 019FA89A1329A3C1C6573A1E2E702B39B2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 12:01:37 +0000
Manifest this update: Tue 28 Jul 2026 12:01:37 +0000
Manifest next update: Wed 29 Jul 2026 12:01:37 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: 8YkPuHLjYtLUkXuTWPXwPvtuGZJAHtLU7PgbTlQrYOE=)
2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:13:29:a3:c1:c6:57:3a:1e:2e:70:2b:39:b2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Jul 28 12:01:37 2026 GMT
Not After : Jul 29 12:01:37 2026 GMT
Subject: CN=73b357c6dd7b90303e8b6483f5aec01a5e1abfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:ec:f3:1d:cb:51:65:29:ce:27:cf:40:10:
7e:b2:62:4e:d4:8d:a7:ad:86:fc:9c:78:cf:24:b2:
ac:eb:3a:88:6b:75:e0:61:9b:34:49:67:cd:4e:9f:
c7:08:19:bd:88:0d:cb:fc:5c:94:d0:93:14:34:c9:
06:a5:cf:23:6c:32:25:10:f0:b7:08:1b:fa:65:85:
d1:89:30:0f:0b:3d:a8:06:13:07:b0:68:f9:da:25:
96:25:54:1e:3e:d0:8a:8e:af:52:f4:b9:52:22:f7:
1d:cd:95:d3:79:2b:ed:8e:59:f5:a8:57:13:9d:34:
16:38:66:0d:3b:62:b6:23:03:9a:6e:ef:65:39:11:
39:27:70:42:e9:95:2a:04:48:03:8c:2e:2e:b0:e5:
53:ad:31:52:1e:e6:bc:79:89:76:df:e5:bc:b0:ef:
79:67:69:a4:89:2a:74:fc:52:9a:fd:92:04:61:c8:
48:ea:92:eb:09:5d:3c:4b:cc:c8:1c:b8:33:56:77:
db:ef:9e:79:a9:40:c8:0f:e2:97:75:e2:82:0b:75:
0f:34:79:5d:7b:60:32:a5:b4:62:82:ee:e1:ca:da:
cb:22:94:7d:0e:ed:6a:23:ac:62:25:a5:71:af:47:
3c:e1:e0:6a:c6:19:b7:c6:2f:f8:a5:94:dd:06:4a:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:57:C6:DD:7B:90:30:3E:8B:64:83:F5:AE:C0:1A:5E:1A:BF:A0
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1b:42:0e:2a:db:06:4d:f2:3b:93:25:60:fd:ef:eb:54:31:
d3:53:39:fd:df:7d:58:a3:e6:96:ee:96:1b:18:4d:14:0d:8b:
f6:37:93:3c:49:79:f2:e5:26:6b:1e:85:f3:e9:cd:25:29:43:
ad:d0:9a:5f:60:83:05:39:03:43:8f:ee:89:00:51:40:50:28:
6c:f3:07:b3:be:02:f9:de:e8:c2:7c:97:62:bb:b2:22:25:c4:
e0:31:3e:61:2e:5a:59:25:08:20:2b:55:67:9e:6e:05:88:c1:
92:75:3d:f0:c9:1a:a3:03:97:32:68:fd:e0:9c:9e:79:60:dd:
15:5d:fe:b2:08:4f:05:35:42:e2:08:14:3c:7a:68:71:e5:98:
87:f0:85:1b:2b:2d:75:7b:3e:93:fe:ee:e1:67:04:da:40:bb:
d8:87:18:20:d2:bd:54:c5:ef:f3:2e:bf:37:8e:12:b4:77:1f:
ed:dd:01:37:a2:57:9e:31:67:9f:ef:d5:e5:0c:90:e0:be:5d:
40:5f:3a:da:4a:9c:fe:3f:33:af:15:e2:de:f2:c9:57:d6:d3:
0a:0e:ff:60:94:7e:00:02:46:8c:48:60:55:af:4b:97:da:38:
17:04:34:50:45:7c:7c:3a:5d:e3:bb:4d:2a:84:b6:20:15:04:
a9:b4:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:25:51 2026 by rpki-client