Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: UPZAoZzM6EgcjiG6aa3yNzprKcyxlnr1KX4Ng7QXqPI=
Subject key identifier: 6C:9A:CA:3C:09:42:77:6D:0C:69:20:61:E8:A8:4F:0C:71:EA:18:94
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 019FA7F4B8EA940670BA308E5D99EF5D575D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 088D
Signing time: Tue 28 Jul 2026 09:01:00 +0000
Manifest this update: Tue 28 Jul 2026 09:01:00 +0000
Manifest next update: Wed 29 Jul 2026 09:01:00 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: U/MR5FhCoJKKoouvQnhT/7F8PlW70gWCMzndHSozkho=)
2: 6-2FD8HR51guZuZo3woN4IVR9zc.roa (hash: PJc3A8dXSGr4yP32dRfCtlI52+k/p1Mtsy/ZQcI6iOs=)
3: X7BmyTsEbGnFLW3J_leT1himypU.roa (hash: YLQzVzV/7MjHj/da8FwrBCVQuruzlxfvIrqTRIBeu1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:b8:ea:94:06:70:ba:30:8e:5d:99:ef:5d:57:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: Jul 28 09:01:00 2026 GMT
Not After : Jul 29 09:01:00 2026 GMT
Subject: CN=6c9aca3c0942776d0c692061e8a84f0c71ea1894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:80:84:ed:29:3e:6b:ea:dc:4b:e3:30:96:
b3:e7:0b:b9:8b:18:22:8f:11:75:13:81:e1:54:fe:
e5:d7:c7:29:4d:b0:74:68:7f:96:80:79:3b:ce:13:
7d:6c:e0:3c:88:62:32:8f:61:5f:51:55:20:ef:b9:
91:ca:88:b4:99:cf:7f:6a:8a:54:1a:07:7d:40:c6:
7b:11:7a:c0:82:c3:4f:e2:1b:37:41:e3:eb:0e:a5:
97:ad:22:37:a1:43:44:6d:28:51:75:ec:24:5f:08:
eb:4e:61:74:37:ca:af:f9:b0:63:86:79:7d:1d:3c:
13:0c:b6:4a:72:4e:1d:c2:5e:8c:f2:ec:d6:45:fe:
89:d4:08:c1:0c:87:56:53:0e:33:12:3d:22:1c:25:
46:c4:82:e8:77:79:ab:66:e9:f7:8c:bd:6c:be:26:
42:69:67:b5:76:d1:4d:f5:a5:b8:68:a0:fc:04:fd:
75:48:78:42:d4:bf:47:3d:e2:9e:4a:fa:49:60:e8:
85:29:a3:eb:bf:bb:8f:97:50:4f:80:86:5b:d8:88:
27:1c:08:e6:9c:23:d8:49:d9:87:60:b1:95:6b:18:
b7:b1:07:73:4e:b3:06:19:c5:86:bf:b8:a4:dc:18:
a5:19:4c:22:cf:b5:39:11:6f:93:1c:82:fb:5b:dd:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:CA:3C:09:42:77:6D:0C:69:20:61:E8:A8:4F:0C:71:EA:18:94
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f5:20:d7:50:d1:0f:f0:b9:08:98:43:db:9d:89:0e:65:04:
79:71:72:34:88:25:86:53:9a:f9:71:97:2a:17:c4:d4:66:86:
bf:c3:65:a2:a0:8d:d6:de:6c:f3:fc:12:d9:cd:7c:58:ae:5e:
72:c9:86:04:77:4d:57:5d:6a:05:46:64:7a:89:38:80:de:73:
6d:8c:7e:64:f2:8c:e8:bd:f1:cb:73:e9:a4:19:ed:05:6b:1b:
b4:4b:c5:bf:ca:83:cb:55:b5:82:a1:f5:cc:68:68:8d:9e:21:
97:ff:4e:0a:cb:ee:d5:f4:09:8a:b3:dd:8b:cc:a1:13:8f:5e:
69:a0:2c:4e:cc:62:14:dc:0e:eb:82:69:ef:28:3b:73:aa:ef:
4c:fc:37:cc:f0:01:f0:15:95:38:27:ec:69:34:f0:31:3a:39:
08:e1:2d:7d:67:6a:8c:98:12:fb:f8:86:7c:62:92:67:6f:8a:
83:ee:d9:03:8a:7f:43:05:a1:67:db:8d:05:88:02:74:d6:ad:
ec:1d:fc:be:6d:2a:0d:87:95:4a:83:d8:f1:06:7a:92:7c:0c:
3c:47:ca:c8:fd:f5:f1:0c:60:44:3c:e6:3d:04:ae:47:fb:f8:
6b:6c:0f:96:44:36:b1:51:a5:b5:d3:aa:13:72:84:7d:be:e3:
c2:9d:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:42 2026 by rpki-client