
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
File: 4chbPfGRu7SHTyElY_U2-CPqQzI.mft (raw, json)
Hash identifier: oZsUU22FBidDGQyb3pxHef8fO6HDXpgMEhaYoAy92eU=
Subject key identifier: BA:DA:3B:B8:B5:84:44:A9:7F:6D:AA:A0:78:67:82:A1:45:9A:A4:5F
Authority key identifier: E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
Certificate issuer: /CN=e1c85b3df191bbb4874f212563f536f823ea4332
Certificate serial: 019FA82B010693E3B1307DAA6B9133710062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
Manifest number: 0140
Signing time: Tue 28 Jul 2026 10:00:18 +0000
Manifest this update: Tue 28 Jul 2026 10:00:18 +0000
Manifest next update: Wed 29 Jul 2026 10:00:18 +0000
Files and hashes: 1: 4chbPfGRu7SHTyElY_U2-CPqQzI.crl (hash: I/973WuC+LukWhJYphOXJSaBLoG9EFC3O5JRbHN+ASo=)
2: HGJATmPx_lb-up56PA9sws4LXzM.roa (hash: rP4ippAFPKo3N/gSznr5pBHOOcDkPGB3VJz0DMBiGGk=)
3: ZKlPGz4kI_uOgsyApeExYa33cEk.asa (hash: gHtpE0/vy2kYs9vRGqmcozAsLFQTnGOPyUQhZ0q23wc=)
4: vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa (hash: jMzlWmBuharjGRH2L1aGRJN/4ce3UkOwdCSnIziX6x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:01:06:93:e3:b1:30:7d:aa:6b:91:33:71:00:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c85b3df191bbb4874f212563f536f823ea4332
Validity
Not Before: Jul 28 10:00:18 2026 GMT
Not After : Jul 29 10:00:18 2026 GMT
Subject: CN=bada3bb8b58444a97f6daaa0786782a1459aa45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:8f:8d:5b:a9:2e:01:f9:60:d4:8b:10:f4:
22:4e:0b:1e:a4:f0:2f:3a:78:a4:86:09:09:cf:c6:
75:61:bb:a3:ce:39:aa:2d:7e:56:d0:53:9f:6a:25:
bc:0b:91:e3:80:86:03:89:76:aa:2f:b2:c5:6f:18:
dc:69:67:bf:64:57:b4:2a:9b:8e:c6:48:4c:f2:07:
9b:36:f9:9b:fe:c8:e1:b2:09:d6:d5:6e:2c:38:b2:
43:4a:c4:88:9d:17:9c:c5:a2:ad:28:62:79:7a:b9:
27:0a:ed:01:56:5c:a2:98:be:2e:fc:6f:62:23:5b:
d6:2f:88:09:ff:50:a0:84:c1:7b:b8:1c:35:74:55:
e8:81:8f:5a:a6:33:22:41:4c:f1:9f:45:e0:4c:55:
fb:1f:ec:8e:c4:ec:65:72:23:69:22:12:c0:f8:7a:
40:b0:99:d8:e5:59:81:b4:d2:18:bc:3c:4c:9e:26:
89:48:aa:b6:5b:54:12:69:ce:bd:ed:5d:18:09:cc:
fa:bc:39:eb:a1:47:39:2c:79:16:69:e6:f1:2f:7d:
fa:95:4b:93:a5:fc:c0:4c:10:28:e3:31:f0:28:34:
dc:56:df:07:66:d1:7b:9c:24:55:7b:65:fd:35:49:
75:a9:34:41:d6:6c:4d:4b:37:11:6e:a5:4e:97:4b:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DA:3B:B8:B5:84:44:A9:7F:6D:AA:A0:78:67:82:A1:45:9A:A4:5F
X509v3 Authority Key Identifier:
keyid:E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c7:38:30:e3:ec:82:19:60:15:82:81:e2:d6:ad:da:96:cf:
ef:75:68:0e:5c:29:09:f5:4f:1d:eb:ec:66:2d:ae:03:cc:c3:
d0:7a:50:35:22:4e:95:07:80:ed:10:97:85:39:dc:b2:ab:c3:
1e:8b:91:4f:66:ff:88:b0:16:d3:aa:37:92:9a:09:91:f5:1f:
bd:ef:b2:ce:49:6f:43:58:18:b9:c0:16:30:44:ec:06:86:5b:
7b:90:34:6c:27:48:82:18:63:63:57:67:74:26:10:59:ce:e9:
0d:d9:15:54:f0:30:39:ce:39:df:ad:45:f2:6b:fe:73:18:83:
ac:61:5d:3d:76:a7:a7:d7:b0:f6:11:a3:93:3d:39:eb:66:ec:
48:65:b0:01:5f:31:dd:22:c4:e7:5a:65:12:2f:dc:89:d6:f4:
65:17:1f:50:04:a7:74:47:3e:13:05:63:62:b8:0b:50:ce:ec:
01:d5:05:79:69:12:0e:e1:2f:5a:0c:df:14:da:e0:b3:23:6a:
b6:ec:f0:5b:c6:a4:d3:08:4b:d9:0a:31:14:ec:df:ff:dc:ac:
80:03:55:6e:c9:ca:fb:b5:c0:ba:a5:36:0e:a7:b9:ce:06:77:
17:5c:2a:e3:01:01:e0:cf:be:94:81:7c:4d:6d:4a:22:11:3f:
7e:8f:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:51:19 2026 by rpki-client