Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: b9poZUMvhbXBYfZKSC5ks5xbO5bu5d35tySrKw4p1mY=
Subject key identifier: 4D:F5:C1:2D:0B:BE:D2:53:D9:EF:EB:C8:20:73:89:99:1A:A2:7D:50
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019FAA88766ED5260D2ED1F06C7109D6BD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 1076
Signing time: Tue 28 Jul 2026 21:01:37 +0000
Manifest this update: Tue 28 Jul 2026 21:01:37 +0000
Manifest next update: Wed 29 Jul 2026 21:01:37 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: hH8hDqSCjcU8eqHmvD6YbxRicGuzay2UVyH1uuYFTsQ=)
2: NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa (hash: ZH+Uro3cwYk0dMiNqpHPXKzrQiE4Q5ScW3QXng4UDdQ=)
3: szELXMMZDl10r61Z-sPdEgawXsM.roa (hash: tZdz9tbK5EcrYgaSOLiWdcaYZFFpvCka0dgVAUXxuEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:76:6e:d5:26:0d:2e:d1:f0:6c:71:09:d6:bd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Jul 28 21:01:37 2026 GMT
Not After : Jul 29 21:01:37 2026 GMT
Subject: CN=4df5c12d0bbed253d9efebc8207389991aa27d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:f7:21:fc:bb:55:15:c1:b1:3d:d5:a2:21:
58:1d:d8:fd:9b:a1:d0:77:d1:17:cf:7a:9b:48:13:
de:d8:79:f1:b1:20:30:6f:8b:2b:28:49:29:23:81:
ff:ea:0b:70:ea:7a:b6:f8:c5:b9:3e:30:91:eb:a9:
99:62:0f:bd:04:cb:8e:b8:d9:9b:e7:74:24:b1:86:
8c:c9:86:be:28:4b:28:f9:fe:9f:9b:e9:c1:cf:7b:
b8:f5:5d:3d:8a:55:92:c7:1f:b5:c9:94:0c:08:cc:
62:63:05:0c:db:a7:79:3f:07:5a:fd:54:8b:66:d9:
cf:99:4c:8f:a0:d2:17:0c:d2:80:2f:39:63:de:6b:
75:b9:cc:0d:d9:ce:62:6f:9b:65:32:db:89:ae:f7:
fd:b5:1f:2a:74:4b:f3:9c:6b:a1:67:c6:e2:95:16:
b3:b1:b1:2d:74:69:ea:b0:59:2a:6a:0e:ea:0f:ec:
af:d5:5f:41:20:37:88:71:f4:d3:92:c9:02:7f:ac:
53:18:6f:e2:5d:d2:85:da:16:45:d6:b9:76:50:bb:
64:73:6a:7b:19:28:d3:9c:69:51:e9:c5:fe:cc:28:
b2:2d:9c:17:fa:f6:80:26:53:d9:8a:67:a9:48:bb:
94:7e:2c:75:e3:d8:cf:8d:26:57:a3:99:8d:3b:23:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F5:C1:2D:0B:BE:D2:53:D9:EF:EB:C8:20:73:89:99:1A:A2:7D:50
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b8:f7:45:90:f5:56:1d:f8:43:78:ec:6e:22:2d:cd:a5:3f:
13:51:b4:5a:0f:5a:c7:de:c9:25:7f:af:66:41:b8:b3:de:73:
39:34:9b:d2:7d:77:17:bb:d0:ab:d1:72:0c:42:bc:dd:cf:6b:
c6:12:34:4e:53:18:59:0c:8f:ad:fe:39:39:0f:a7:49:61:9f:
8a:61:11:15:31:24:5d:aa:33:96:0f:b1:26:53:35:f2:b3:70:
7a:31:f6:22:39:62:54:de:ef:31:8d:fe:67:67:e2:3e:e3:ab:
1f:4f:51:e1:47:07:f1:eb:df:47:29:95:0b:56:c7:bc:1e:77:
a2:6d:25:f8:60:26:13:f2:8b:eb:59:35:f4:b4:13:4c:24:63:
84:35:25:55:24:2a:ef:86:07:c3:5c:ba:f3:d4:70:bd:62:9f:
d9:a9:bd:ba:b2:67:4d:90:b0:e1:c1:0b:7b:d4:50:7e:a2:36:
e4:fa:de:0a:e3:de:34:00:ac:f6:c2:77:e6:ef:2e:fc:79:b0:
96:01:62:b5:af:52:9f:1f:53:73:55:40:4c:df:ad:c0:3c:7d:
40:a1:5b:87:c7:fe:83:0b:64:f3:19:13:a6:fa:ea:8e:52:f9:
75:e7:ab:da:0b:1c:79:b1:de:7a:6b:6d:a3:dc:d4:a8:fe:fc:
ab:05:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:03 2026 by rpki-client