Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: cE69SqK40W1QI9yB0njxEf//fsnrZ6Xyg0pWADB9JnM=
Subject key identifier: 16:60:82:77:44:E1:4D:E5:EB:E3:65:D2:29:C4:87:91:8D:49:61:57
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019FA906D31D8EEA71C08D30225F3CF60189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 10A3
Signing time: Tue 28 Jul 2026 14:00:24 +0000
Manifest this update: Tue 28 Jul 2026 14:00:24 +0000
Manifest next update: Wed 29 Jul 2026 14:00:24 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: A5rEgjWuu7heOseJnRW3M0SPpwSF4880dNWg2goLWUQ=)
2: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (hash: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:d3:1d:8e:ea:71:c0:8d:30:22:5f:3c:f6:01:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Jul 28 14:00:24 2026 GMT
Not After : Jul 29 14:00:24 2026 GMT
Subject: CN=1660827744e14de5ebe365d229c487918d496157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:ac:cd:fe:25:66:6d:8c:63:d3:9b:6f:59:
1b:73:d2:2e:d9:93:62:01:bb:e1:f1:04:b6:01:0f:
5c:e9:38:04:15:5d:9a:04:5f:92:62:73:d1:76:b6:
f1:07:35:14:f9:d5:e8:8e:4f:a0:bf:8a:8e:2b:d5:
82:74:ee:b0:19:27:b6:9c:6f:77:11:d2:49:09:6d:
ac:b1:7e:5e:e0:b8:c2:a3:37:85:a0:10:cb:14:70:
aa:83:18:d3:5c:16:dc:ff:e2:b2:12:75:41:24:91:
2a:62:2c:1a:18:d9:45:02:d0:34:00:58:71:3b:76:
23:f3:88:2c:2d:69:d0:8c:3c:0b:18:38:90:44:2f:
75:24:78:c3:ee:16:2b:d3:8c:51:99:7d:1d:ce:43:
20:fb:4a:a0:81:1d:ab:f6:6f:b3:83:ed:b3:76:4c:
d2:1b:d9:90:7b:e8:78:44:40:97:51:9c:9b:1f:68:
cf:d8:4f:b9:54:00:34:95:99:d9:3b:f8:31:ce:0e:
97:98:3a:e8:49:57:cf:e9:c7:3a:10:42:fd:fd:49:
93:69:9a:bc:04:6e:19:e8:11:ef:64:a6:33:62:86:
aa:2a:2a:4c:7c:94:44:0a:b2:34:50:85:98:5a:1f:
fd:00:65:89:e1:a3:d9:a8:2d:a1:51:55:4e:91:66:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:60:82:77:44:E1:4D:E5:EB:E3:65:D2:29:C4:87:91:8D:49:61:57
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:18:57:31:fb:a6:59:5a:d5:e1:c8:c6:54:5b:1f:0d:cf:d8:
32:63:05:39:26:54:06:d4:50:49:76:d2:12:79:23:a4:e4:2e:
0d:74:e7:fd:d4:33:22:e4:bd:b9:50:13:84:ae:9e:46:3f:cb:
60:65:ff:a1:92:d6:8f:88:11:e6:59:ae:30:07:07:2f:82:ce:
60:77:74:3c:f6:4b:55:e9:a4:78:d6:e3:94:b9:d7:d0:3e:0e:
21:d8:c2:fc:96:bd:fc:00:96:cd:0a:f0:ae:06:b4:69:c6:4f:
22:22:a4:32:09:33:ba:e1:84:8f:2c:a0:ad:e1:36:10:99:1c:
5a:2a:12:5d:e0:99:5e:e0:50:f8:f1:27:cc:58:46:cf:74:12:
99:34:0e:9f:3f:29:ca:23:7e:55:04:8b:b3:68:fa:a2:2f:8b:
4e:fd:ed:e3:71:07:c9:23:cf:63:04:90:f1:eb:0e:01:a0:73:
ff:ea:4a:81:a9:ed:e4:e6:3c:18:83:3d:c8:6b:9b:b0:20:92:
2a:59:ae:c7:df:2d:64:d8:d3:ee:6f:7c:76:0c:4d:24:a5:5c:
bf:58:f4:47:b2:c0:07:a4:a5:0c:ee:3a:a8:b0:15:15:47:ad:
7b:d1:70:a6:f0:71:9d:93:4c:88:15:30:69:43:a1:ef:46:bd:
b8:32:5a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:21 2026 by rpki-client