Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: muhvFTr2qIHB7P6assP3jwHsx2WdLdtZUx3fUmw/fog=
Subject key identifier: 9C:EB:86:20:65:18:12:C4:47:C0:F0:AA:98:54:79:25:BF:34:AA:72
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019FA7BDA60BA9BF036E493E891483262BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0D4A
Signing time: Tue 28 Jul 2026 08:00:51 +0000
Manifest this update: Tue 28 Jul 2026 08:00:51 +0000
Manifest next update: Wed 29 Jul 2026 08:00:51 +0000
Files and hashes: 1: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: 9HoB0iyyL8xudOk6oWAyG8//Y7F4+RHp9/sFfEcEcP4=)
2: Lb4QYGzxLdlZHywuLvkaZr8MbV8.asa (hash: djJmDLE7dgkUswvUuZUlXxmQuuCob6by6G/MEdD7z7s=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:a6:0b:a9:bf:03:6e:49:3e:89:14:83:26:2b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Jul 28 08:00:51 2026 GMT
Not After : Jul 29 08:00:51 2026 GMT
Subject: CN=9ceb8620651812c447c0f0aa98547925bf34aa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:60:f4:ff:f5:9d:96:ec:97:17:63:a2:73:
94:a5:0c:91:a5:be:da:c5:b0:6b:f5:8c:f4:95:58:
86:68:02:1e:be:a6:67:b2:aa:c0:4e:b1:2c:2a:bd:
33:71:02:2a:f3:cd:33:17:77:7b:41:bf:54:28:80:
d9:09:61:0a:a6:c8:e4:df:92:fa:e7:e9:83:69:0f:
d4:2d:4b:3d:5f:86:f1:9b:33:d5:89:c3:fb:67:91:
5e:07:11:91:b0:e9:82:a4:10:78:e5:ed:47:af:b7:
3c:58:ae:89:c7:fc:a5:27:2b:7c:90:08:f5:74:81:
8f:03:c1:58:51:be:f7:02:15:1b:2d:77:36:ac:59:
9f:a8:d8:db:52:46:a9:17:2e:06:2e:0a:d5:56:b0:
76:e6:48:73:ab:2b:70:cd:5d:90:f4:6b:a7:68:fa:
5f:3f:bf:ca:f5:fb:83:f0:28:a6:2f:a9:d8:2e:7e:
c6:ae:1f:6a:60:7b:44:5b:30:eb:56:80:e4:21:34:
40:b4:1c:c3:2a:d6:d8:2d:67:f4:71:e1:ad:8d:e3:
ef:00:43:a0:13:04:08:25:d0:51:4f:8f:07:69:15:
83:a0:15:56:b4:70:78:35:fd:1c:2c:dc:de:17:37:
ea:46:fb:2f:da:be:04:00:3e:9b:80:5b:1c:d4:40:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EB:86:20:65:18:12:C4:47:C0:F0:AA:98:54:79:25:BF:34:AA:72
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:84:11:51:8d:c4:83:c8:0d:e8:5a:df:40:67:1a:1a:4f:2d:
d2:24:8c:57:cb:7b:ae:5a:c2:45:3b:a1:ca:2f:5c:3c:01:38:
71:45:24:02:e2:62:d0:63:6f:0e:4c:ab:8a:b7:92:f5:b8:59:
ba:4f:b3:6b:17:9f:ed:ee:c7:eb:5f:06:6f:45:cc:4e:fb:8e:
c5:d5:69:e0:bb:9f:f0:26:1a:ce:85:b3:1f:f8:1e:03:b3:ed:
82:f2:fd:32:75:39:e4:5c:8a:41:eb:6d:b4:ea:b4:66:6c:ee:
41:4c:46:1f:9f:70:68:c8:88:8c:ed:11:43:a6:7c:fe:4a:ce:
81:01:b9:e4:d7:f7:7b:b6:ef:2b:03:d0:9d:e6:46:12:95:78:
1c:3c:4e:ab:61:a7:bb:48:f7:d4:17:f8:f6:ba:af:0b:7a:3d:
4d:96:be:d8:b7:cc:16:c2:b0:26:8e:93:23:f8:47:da:51:9a:
91:56:c5:8e:73:f8:a4:9a:02:d4:3d:79:90:d0:89:ce:40:c1:
10:85:e2:64:e0:14:34:e8:24:98:f6:20:a2:4e:d5:7f:ac:8f:
a2:8f:8c:cc:6e:8c:bd:fe:9f:e6:71:e3:12:6c:1e:f3:41:78:
0d:36:e8:07:08:ce:58:5b:16:bf:42:34:4b:82:f9:bb:a6:c9:
e7:ec:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:35:41 2026 by rpki-client