Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
File: rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft (raw, json)
Hash identifier: SStDb6pTVLj6H3h0z3xF0N6FGOY+3hYDh3UnNfJPjK4=
Subject key identifier: 4B:77:7A:F8:21:C7:63:44:03:CF:90:9B:2E:0F:52:4D:2E:A8:8D:B9
Authority key identifier: AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
Certificate issuer: /CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Certificate serial: 019FA898E698EB3740C1922F90C28A623748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:20 +0000
Manifest this update: Tue 28 Jul 2026 12:00:20 +0000
Manifest next update: Wed 29 Jul 2026 12:00:20 +0000
Files and hashes: 1: 1-ERVtGkQFVLEAe5xG0wIY6GGE34.asa (hash: mjH6RC1GOMQBGylDtGbnzG1J9xH1Inj7D3rVzqYEW3c=)
2: rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl (hash: VTOgM7/frFvwokojAJ7l7Rg2c8iWygEswvnsjESwVds=)
3: tF6OZDIuvO_4gHcUUPVxkptJ-So.roa (hash: CNMlE4sv1Wt5NYL3ambevPDyZVwmhdaYb/bTSeYfSYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:e6:98:eb:37:40:c1:92:2f:90:c2:8a:62:37:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Validity
Not Before: Jul 28 12:00:20 2026 GMT
Not After : Jul 29 12:00:20 2026 GMT
Subject: CN=4b777af821c7634403cf909b2e0f524d2ea88db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:de:33:20:8b:f0:9a:2f:a4:fa:f3:59:98:b7:
a0:63:33:5c:c6:18:33:42:c3:88:09:d9:df:67:10:
7a:c2:9f:b4:93:a9:5b:22:6b:dc:97:ac:ee:a8:fd:
af:25:7c:53:13:ee:7e:b7:24:52:6d:81:93:f0:2a:
2d:ce:8c:79:01:76:35:98:f5:3a:3f:da:9d:17:6e:
03:2b:3d:cf:05:82:df:3a:fe:a7:5b:af:a6:26:c5:
d8:a2:41:a7:29:a4:7b:32:94:7f:78:8b:e9:02:1f:
ba:af:2e:de:b6:80:d0:cf:a3:32:d9:32:fb:3f:e2:
a7:85:6a:2e:49:c0:d4:12:ae:35:fb:47:50:97:82:
40:88:2b:bd:fd:15:8f:18:19:c2:37:79:c0:f9:f9:
53:52:de:1f:7a:5f:f1:22:74:a8:c8:fc:0f:25:7a:
e7:89:c3:25:8e:da:ff:7b:1c:2a:3c:f9:a8:6c:af:
6f:47:67:de:b2:ff:41:5d:a6:c8:df:b8:bb:56:74:
47:b1:11:27:ce:85:2c:57:70:dc:b3:d0:7d:2d:9e:
37:97:e7:ec:bc:b0:a6:be:3c:3f:ec:54:9b:25:d7:
23:c4:49:c8:6f:f7:77:6a:cc:d2:22:98:f1:06:52:
66:e0:18:eb:1a:56:4f:a2:73:ef:89:61:00:7a:56:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:77:7A:F8:21:C7:63:44:03:CF:90:9B:2E:0F:52:4D:2E:A8:8D:B9
X509v3 Authority Key Identifier:
keyid:AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a9:44:0f:19:35:7a:f1:72:72:53:fc:f5:13:62:a0:31:41:
8e:9e:9d:e2:51:f4:95:ad:c9:6c:14:59:9f:c4:d2:43:a5:41:
e7:73:0e:97:d0:ad:d5:b0:f7:30:b9:08:11:f1:73:79:82:e8:
97:9c:04:51:11:81:f3:35:c7:c6:8f:0f:b2:c8:bc:aa:cd:be:
b6:25:92:d8:6e:08:3c:36:99:b1:fa:62:51:ec:41:16:cd:3c:
b1:15:2b:d2:f7:c1:64:d2:8c:bf:a2:5a:71:3b:6b:14:a0:5c:
2d:53:a8:1f:27:1b:34:d9:ca:06:4b:25:fd:3d:eb:d2:30:7e:
70:fc:99:01:93:55:04:c6:4c:bd:8e:44:57:12:73:d6:3f:ec:
39:c5:a5:c4:dc:85:b9:7e:32:9d:e5:13:7f:e3:fb:a5:72:b7:
bc:73:3b:27:51:6b:4b:b0:a2:72:67:8a:91:23:fe:15:10:0c:
eb:b6:b5:34:c5:5c:41:46:35:4d:c1:6d:81:20:25:91:7f:1c:
15:56:68:cb:7f:d8:10:13:5b:7e:c1:93:28:76:b1:0f:d7:30:
cf:92:09:03:fe:25:52:b7:9d:24:0d:73:d1:56:e5:c9:c7:45:
d1:63:f6:3f:b5:cd:9f:7e:ed:75:d0:d8:a6:3d:db:6c:25:21:
e2:d6:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:36 2026 by rpki-client