Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: D0Kua4XKIcMM05r6V+1KPYTzL6RJAZqW3yF4likC2go=
Subject key identifier: 34:CF:11:A2:44:26:BF:38:C6:78:78:01:2B:5D:26:CC:8F:1D:C8:6F
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 019FA9E2A3AC14F168908856007FE4A73255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 1965
Signing time: Tue 28 Jul 2026 18:00:30 +0000
Manifest this update: Tue 28 Jul 2026 18:00:30 +0000
Manifest next update: Wed 29 Jul 2026 18:00:30 +0000
Files and hashes: 1: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (hash: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y=)
2: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: tvZ3nQcMrX7kOS/MvVbl3L/vJ+0Gt6vX69QIpRoSZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a3:ac:14:f1:68:90:88:56:00:7f:e4:a7:32:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Jul 28 18:00:30 2026 GMT
Not After : Jul 29 18:00:30 2026 GMT
Subject: CN=34cf11a24426bf38c67878012b5d26cc8f1dc86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:87:a3:a7:f2:ca:71:76:d0:ce:40:5e:ec:
f1:db:2e:31:2e:12:6b:09:92:8a:7b:0f:ad:28:5d:
8f:09:63:01:c0:ef:9b:e5:7f:8c:82:bc:87:52:dd:
a3:2b:a5:f4:78:21:03:b0:fd:63:ec:32:ce:38:c6:
b3:fc:ef:b2:a9:3b:8c:e4:d4:b2:fd:74:4b:b8:d0:
f6:53:7c:ea:a1:a4:44:8c:ff:3b:f9:10:56:af:8c:
e9:8c:04:fd:2a:01:31:3b:b5:8a:2c:06:df:e0:08:
18:11:41:58:57:97:67:60:16:8e:6c:a0:16:61:70:
b5:73:0b:4c:28:b1:20:7c:e6:91:de:00:91:b9:d2:
bd:aa:33:55:17:e9:fb:b2:b2:50:82:b3:40:6b:80:
06:d5:03:10:0d:fa:0e:b3:40:06:dd:05:bc:4a:18:
f8:ad:08:74:06:aa:0a:0b:53:dc:ca:45:be:d5:b2:
90:11:c3:b0:3c:09:73:33:fa:f9:9a:d1:26:fe:43:
5d:89:4e:4e:95:8d:d8:10:1b:3d:92:4b:fd:4b:40:
45:15:bc:d5:89:8f:4c:ce:9d:7a:ce:90:93:0b:0a:
f9:4a:77:41:b3:36:cd:bd:47:f7:1f:0b:4e:44:bf:
0d:8e:8d:71:3b:05:ed:9c:58:b3:2a:4d:ac:8e:3f:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:11:A2:44:26:BF:38:C6:78:78:01:2B:5D:26:CC:8F:1D:C8:6F
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:74:0e:71:46:fc:eb:b6:7c:4f:d7:ad:ae:f0:48:0c:6c:66:
70:5e:73:a1:05:d8:26:8a:72:0a:b6:3b:3f:d5:d4:58:41:0a:
3b:a7:cd:13:44:c4:2e:2e:f3:c5:9f:18:b3:ec:2f:65:7c:c7:
b5:21:23:66:33:a9:78:34:d5:12:e5:7a:87:6e:60:af:2d:f5:
1a:e6:7b:69:68:84:43:1d:43:45:01:89:c6:2a:d1:43:d0:8c:
68:05:46:77:3e:62:8a:6b:f5:56:88:ba:9c:6c:64:df:73:8e:
37:23:eb:5f:81:a2:53:04:c5:f8:42:f3:90:0c:3d:f5:ff:c4:
b4:e9:ac:6f:d7:77:b9:a1:f9:6a:d7:66:f3:8b:d5:44:a2:2f:
1e:16:e4:ee:2c:84:e7:96:79:83:6a:15:14:51:8c:4d:48:c1:
ae:60:53:76:f1:1f:cf:4e:71:a6:c0:d5:ee:ec:1b:44:15:c1:
d2:48:82:47:a5:1a:14:61:fb:3f:f0:c6:fe:b3:5e:24:17:62:
2d:14:09:60:10:c6:e0:76:0b:a9:3f:83:79:39:a4:34:4f:e6:
40:a0:75:a8:6a:3f:c6:69:2f:9e:95:1e:04:27:78:02:84:b8:
af:50:cc:ea:47:34:35:28:c6:20:be:69:44:64:55:80:1c:d4:
b3:9e:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:10 2026 by rpki-client