Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: 7gwVPGGUVm/KeUGAhasn+i/B/DX/a1GT36+o9ynWHNU=
Subject key identifier: 61:20:F7:DE:2C:E8:D6:58:81:F2:72:B6:18:B9:0C:49:AF:78:C6:00
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 019FA90750239DBCC2A5A87D5CDADEE3DD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 14:00:56 +0000
Manifest this update: Tue 28 Jul 2026 14:00:56 +0000
Manifest next update: Wed 29 Jul 2026 14:00:56 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: n4oAFq6IPHKGH08R/ylK1Gs7R5iwjDsk3lVUyH5cgDQ=)
2: HQvqu0FyNTgLxOCtIkfc5EdcDj0.roa (hash: 130FHhBXUMCrMDc50ZJnqMVOCj69/WSdEuG7otm6jac=)
3: JDb5A2keqNNHHn7egHMcEGsac60.roa (hash: ArdL/hAkNPkcLPWJJnXPFWGPHSAOP/P5AYcbgtu+Yug=)
4: MbiryQPvDhyE4fWE2RUNJytt6AY.roa (hash: OrXM+BXuK0a9EBtLr+v3zOe94bGU/tMcOd4waL7ij94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:50:23:9d:bc:c2:a5:a8:7d:5c:da:de:e3:dd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Jul 28 14:00:56 2026 GMT
Not After : Jul 29 14:00:56 2026 GMT
Subject: CN=6120f7de2ce8d65881f272b618b90c49af78c600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:9c:e6:88:af:1d:6a:9d:f4:b8:aa:02:6d:
30:47:b3:73:75:c9:ac:1e:40:6a:ab:da:c6:56:a9:
42:6e:8b:7c:06:14:93:dc:71:9c:3a:d0:8f:2e:a7:
d9:48:d7:75:7c:29:a9:f4:61:35:06:da:19:e6:65:
64:66:7c:5d:b3:ce:7e:57:09:ef:eb:7a:83:4a:0e:
c1:0d:49:5f:96:31:6d:5f:65:87:13:28:1e:0b:ba:
40:44:82:c9:a8:27:ba:41:e1:da:41:44:ac:35:41:
16:a2:a5:f6:a6:9c:ac:48:77:25:68:3e:e6:75:e8:
1f:49:04:f4:fd:15:23:d4:7e:ae:2e:79:39:ff:2c:
be:9e:06:1f:eb:f4:bb:f1:8f:dd:f9:de:0e:21:78:
91:4f:eb:af:01:33:c0:fd:37:f7:06:2c:0a:94:25:
01:15:cc:34:8d:52:b0:b5:75:98:e6:5e:76:00:18:
e3:f3:6f:2f:16:86:9f:0c:b5:c1:21:e9:ec:29:30:
50:5c:c4:61:43:a5:c1:92:a4:8d:fd:b3:6a:66:9d:
cf:02:4d:f5:7c:10:ea:f7:06:f4:f1:2a:1b:e2:a2:
5d:ee:19:81:ce:e9:0b:7e:b5:b7:aa:cc:37:b0:0f:
77:a3:ef:87:5d:a8:05:8d:d4:2f:9f:6f:2e:b0:99:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:F7:DE:2C:E8:D6:58:81:F2:72:B6:18:B9:0C:49:AF:78:C6:00
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:eb:20:fa:61:bb:a9:c9:1b:99:9d:b7:96:d6:2e:b0:96:f5:
77:c0:cb:9d:9a:a6:cd:17:1b:c3:68:0a:10:6c:23:14:28:d3:
fa:9d:99:33:76:0e:05:62:32:31:30:f8:00:eb:aa:ad:fd:da:
2e:3e:86:41:8b:31:68:ba:1c:3b:2c:95:0b:27:54:54:b1:84:
c6:3b:d7:48:f1:87:f3:d5:f4:a9:4e:5f:0a:e1:46:4d:bb:64:
c1:75:7f:7f:b7:12:8a:0a:56:8c:e3:d4:1a:77:45:92:53:84:
f8:03:3f:e7:98:fa:e0:60:10:03:81:cc:a6:b4:79:4d:e2:8a:
d2:2f:7d:dc:0d:7e:56:53:5d:f2:1d:4b:18:f4:79:89:8b:5d:
bf:3c:8e:85:84:0a:29:21:de:0d:14:83:12:54:6b:5a:40:df:
4e:4f:3e:89:24:ff:7c:99:ac:26:b9:9d:3e:39:a3:e0:81:46:
10:03:d9:5f:df:ae:50:f5:43:88:a0:79:c1:5e:e8:fe:e2:48:
b2:41:eb:80:18:f8:5d:96:24:63:d7:99:e5:70:9b:27:9e:a8:
21:f2:4a:87:9a:d0:43:f1:6d:d8:4e:53:f0:7b:ff:63:8a:83:
9a:be:61:06:91:f0:1a:c2:de:1e:1f:af:40:ce:69:6f:66:82:
a1:3a:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:31 2026 by rpki-client