Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
File: c1S29BRaevUNxcEVUDt9KN4bDEQ.mft (raw, json)
Hash identifier: YBf2ul5przRzjR6hVVjuoeB2KH54UxisKPehQS5Vu5A=
Subject key identifier: 04:7B:37:03:1A:3C:07:BB:87:34:B9:6A:D8:1D:15:48:26:DB:F6:F8
Authority key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Certificate issuer: /CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Certificate serial: 019FAA879F07763F95BD9AAE97E1DA7F4B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:42 +0000
Manifest this update: Tue 28 Jul 2026 21:00:42 +0000
Manifest next update: Wed 29 Jul 2026 21:00:42 +0000
Files and hashes: 1: 8HAXP0NYuNkh6EyoveYUGpIkxSg.roa (hash: GuE049OXvSIVDUXmahqcqeUvOGnhrhD008vD02DXH2w=)
2: bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa (hash: j8p23HgX1oogIyuG7LGwU6L54UU4xkd1XEgueDGOrRs=)
3: c1S29BRaevUNxcEVUDt9KN4bDEQ.crl (hash: 8mR5jMfHq/qzjT0noac9EsLVyQMMo29+/LO2BY527KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:9f:07:76:3f:95:bd:9a:ae:97:e1:da:7f:4b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Validity
Not Before: Jul 28 21:00:42 2026 GMT
Not After : Jul 29 21:00:42 2026 GMT
Subject: CN=047b37031a3c07bb8734b96ad81d154826dbf6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:62:9a:71:e1:fb:28:cc:27:29:db:ac:f6:
34:f2:12:54:35:ed:32:9e:7b:2a:f2:98:85:6b:4c:
b1:59:bb:14:7e:f3:c5:ed:d4:d1:c2:13:de:d0:ae:
ae:f8:95:5c:63:31:62:71:10:bb:e8:41:2e:fd:8f:
b8:a6:76:2e:b7:0f:54:21:b0:e8:16:20:f2:d8:13:
0e:0a:9b:0b:06:71:77:db:de:97:1e:13:9a:b2:29:
ad:75:6d:24:66:95:dc:eb:91:9e:1d:01:a6:cc:32:
d2:fe:9f:48:6b:70:c1:b9:1d:45:4f:ea:f9:4d:fc:
2f:a6:22:46:71:1e:eb:2c:8a:ca:c2:83:fb:83:7e:
7b:f4:de:e2:ea:af:92:cf:63:15:fc:57:dc:85:fe:
3f:bf:58:97:57:5e:b2:02:02:28:ba:2c:cd:18:76:
da:18:ac:bd:44:1e:df:17:0e:af:8b:09:ef:5e:80:
5e:5e:57:6e:19:84:4e:fb:8b:83:ab:a1:d4:48:2a:
2f:fe:d9:b7:30:53:e5:d0:b9:51:3b:68:67:4e:e3:
49:01:e4:87:ad:4b:f5:d4:85:97:3f:bf:3f:19:32:
4f:e3:bc:00:a7:cf:01:f8:27:f8:89:52:51:13:35:
4f:6c:71:4f:92:31:d8:97:45:f7:16:72:eb:7e:46:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7B:37:03:1A:3C:07:BB:87:34:B9:6A:D8:1D:15:48:26:DB:F6:F8
X509v3 Authority Key Identifier:
keyid:73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:93:e8:67:2e:9a:75:d8:74:22:7c:e4:06:76:80:71:a3:42:
1c:0a:9d:50:c4:c7:24:cd:e6:73:0d:82:d8:e5:31:1d:a4:47:
e3:69:17:e5:1f:f1:7e:f7:d7:14:1e:7d:d8:7b:51:e4:20:08:
98:18:2e:49:2c:94:80:26:dd:86:da:d5:12:9f:b5:b6:90:a5:
11:9b:96:81:bc:b7:a1:c9:49:91:09:79:92:52:28:f8:6a:ef:
ba:4a:38:50:a9:9d:88:96:ba:44:ff:bb:0b:9e:ea:4d:ba:9f:
6b:fa:de:9e:33:18:3c:e2:74:7f:81:e5:55:5d:10:41:a9:dd:
68:db:5b:40:e9:35:aa:0f:69:45:08:8a:b2:20:27:2a:6c:f9:
44:72:bf:8a:a6:72:f7:0c:6c:33:2e:39:59:a3:8d:e6:f0:a3:
37:eb:97:29:1a:d6:ed:cb:3d:25:48:70:2e:da:f9:b9:aa:f8:
67:af:3b:e7:83:88:8d:53:23:9b:36:02:93:50:5a:23:10:90:
bc:e8:4a:4c:35:ef:c3:a2:1d:2d:98:38:db:cd:f8:49:75:1e:
7b:4a:12:38:f2:a8:c7:3a:3d:c7:88:bb:08:4c:72:e9:ff:79:
e7:75:a4:f2:7f:ca:9b:6a:f7:9c:e3:08:eb:5b:41:a8:3e:af:
4c:87:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:35 2026 by rpki-client