Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: VilMdmoMYaHPB6ad7CmsWoszCG9sIdbExsuZ1u+9n1g=
Subject key identifier: 68:19:92:63:E5:CF:D4:41:72:BC:C7:F2:EC:90:69:83:91:7E:3F:FC
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019FA97517A8BB815E65C785842E1A60CC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 108B
Signing time: Tue 28 Jul 2026 16:00:50 +0000
Manifest this update: Tue 28 Jul 2026 16:00:50 +0000
Manifest next update: Wed 29 Jul 2026 16:00:50 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: /U7cn59NEG5ajT6bQdObVQyZ0Fd1LFhI8QXjoazHYHM=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:17:a8:bb:81:5e:65:c7:85:84:2e:1a:60:cc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Jul 28 16:00:50 2026 GMT
Not After : Jul 29 16:00:50 2026 GMT
Subject: CN=68199263e5cfd44172bcc7f2ec906983917e3ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:cb:65:91:32:9f:c9:b2:39:a6:99:d8:3f:
88:57:8f:3d:63:7b:f3:3c:bb:a0:1e:98:97:40:a6:
a4:00:3e:2a:2b:bb:f7:ab:54:b1:df:d1:9a:41:2c:
74:39:f9:09:65:67:50:6c:ce:73:de:13:5d:bf:a0:
6d:49:d5:7a:20:ee:b1:a3:5a:c4:0d:9f:8c:11:67:
de:b7:30:6b:43:8c:be:7b:81:b1:f2:8a:f7:fe:97:
81:3e:2c:cd:f0:be:48:74:77:5d:c9:5f:ae:32:3a:
56:74:a4:69:d3:e5:73:70:9f:95:5e:8d:69:87:2e:
1e:df:74:df:88:c1:17:90:23:f9:f9:09:39:9b:c4:
74:7f:8e:c0:d1:90:fc:3e:86:c7:89:26:9a:c5:91:
cf:88:e1:a1:94:5e:aa:f8:50:0b:ee:82:88:40:c3:
70:f3:c1:0e:c9:c2:1b:32:76:3c:20:66:81:86:79:
91:5b:51:dc:9a:64:57:02:64:6c:04:54:9c:39:92:
25:9b:c1:0a:36:2f:f0:bd:9a:97:69:e9:1c:f6:94:
3a:a9:3b:86:f2:3b:48:80:94:8b:d7:c1:c7:f2:5b:
ed:50:63:0f:c5:7a:b7:58:77:2c:2a:8a:57:7b:68:
3c:d3:cd:4a:15:f0:c0:84:bf:98:18:4e:30:a3:4a:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:92:63:E5:CF:D4:41:72:BC:C7:F2:EC:90:69:83:91:7E:3F:FC
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:af:f6:69:28:f7:cd:df:4c:f0:9a:80:40:71:56:4d:fb:96:
1d:25:c2:3d:de:fd:ba:7b:53:28:55:44:fe:e9:32:aa:ba:f9:
75:f8:e6:48:19:cb:75:db:90:11:8e:7f:b9:50:a9:81:a4:1b:
c0:61:71:07:b3:60:fa:63:7f:61:87:5e:2c:23:af:c4:cf:03:
b8:ea:92:78:4c:7f:a0:27:c6:60:f6:15:9b:dc:92:cb:66:70:
a3:7d:cc:9b:bb:b4:68:77:e0:6c:a9:be:5a:a1:5b:fb:66:00:
4f:eb:5e:bb:04:3f:95:04:39:05:33:ab:bb:11:f8:26:4a:1c:
e9:0c:fd:0e:3b:a8:74:b8:21:c8:50:91:7b:b1:b1:8d:98:17:
92:2b:f8:60:17:0a:f3:89:f0:a3:54:67:0d:fb:88:ae:ff:36:
4e:af:ae:8c:fb:3a:d0:11:7e:7d:b6:0f:2c:d3:ef:0e:ed:92:
7d:f8:6f:de:de:00:c8:a3:30:dc:55:e1:10:ee:9f:42:ba:74:
be:5d:93:94:7e:00:96:03:cd:1d:b2:d6:5e:ad:c2:89:11:b1:
40:25:64:1e:65:81:22:0f:ee:b7:f4:f3:71:1f:84:14:e2:2e:
a4:78:e8:ee:d4:d9:2a:cc:b8:4b:f7:7c:df:8c:fe:08:77:20:
1c:cb:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:15 2026 by rpki-client