Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier: y4N2S33UjJ1ggVuqvoEHdYyOg/aYOEGb1KKuiudrQuY=
Subject key identifier: 1C:64:23:82:23:5A:56:7E:CF:A5:F8:00:BE:80:4B:94:9C:CD:46:1D
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial: 019FA7BDD49337B088CE44F0BAC0F38C723B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number: 02C3
Signing time: Tue 28 Jul 2026 08:01:03 +0000
Manifest this update: Tue 28 Jul 2026 08:01:03 +0000
Manifest next update: Wed 29 Jul 2026 08:01:03 +0000
Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: 7/L7f5zyabL302oCBu+soScG9kqgTOgsE0ddjlilepE=)
2: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
3: sSUeiTuTscB37GhFxmHCikkgWjE.asa (hash: Kd5QYpqifnyO+2uyl3rYd5x9cU744aPeXurfnyMHjoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:d4:93:37:b0:88:ce:44:f0:ba:c0:f3:8c:72:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Validity
Not Before: Jul 28 08:01:03 2026 GMT
Not After : Jul 29 08:01:03 2026 GMT
Subject: CN=1c642382235a567ecfa5f800be804b949ccd461d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:d5:df:ab:a4:3a:80:b7:98:07:0f:34:75:
59:ea:5f:d4:55:21:1f:98:f3:df:66:88:b8:c1:c5:
10:9d:11:35:04:ca:e4:64:21:e6:cf:1b:4c:ae:96:
3d:8e:67:cb:27:d6:fe:ed:96:2a:60:24:24:ad:4c:
9b:22:d3:24:d6:3e:a3:1e:65:8e:f7:94:8e:9c:25:
3f:7a:5b:fe:10:c5:09:e0:dc:84:49:b7:7c:7c:7c:
a7:0a:a2:c6:19:0f:f6:46:59:be:0d:2b:15:2e:b3:
ce:a7:28:02:da:19:c5:4d:01:22:d2:ab:55:09:dc:
3c:cc:c1:f8:cf:05:b0:7a:e4:5e:2f:d7:27:96:2b:
ee:7c:d6:fe:81:e2:6e:71:63:2f:81:52:42:ad:ff:
8c:29:88:69:41:45:36:f0:06:77:b1:af:24:72:30:
4e:f0:5f:d5:19:b6:d9:3d:45:f9:2d:f7:49:f9:3f:
a9:c3:1f:52:95:e6:b2:b5:de:c2:7d:21:44:a8:11:
ab:ab:39:a0:34:7e:76:15:05:03:f6:fa:1a:f6:5a:
c9:01:67:97:81:34:b4:a1:12:e6:1a:88:2c:6b:95:
21:18:34:a5:bd:76:1e:12:86:b7:50:5e:c0:e9:4d:
0a:a7:dd:cd:85:e3:76:1f:03:14:c0:5d:04:83:cb:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:64:23:82:23:5A:56:7E:CF:A5:F8:00:BE:80:4B:94:9C:CD:46:1D
X509v3 Authority Key Identifier:
keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8d:cf:06:a2:72:53:4b:ac:fb:d4:60:78:cb:b7:ce:bd:1d:
ea:b6:54:18:e0:52:75:0e:32:fb:a0:7b:f7:d3:5f:3c:f9:09:
c3:99:c1:58:f6:11:73:54:a7:b8:1d:24:e0:00:8a:11:d3:62:
01:df:77:59:45:a9:cb:7c:4e:eb:5e:86:87:07:48:f9:44:0e:
56:71:00:67:98:0e:58:a8:fc:2c:d0:09:5c:a9:b0:47:c8:fb:
2e:2a:18:e0:ce:b0:d7:fc:1a:da:a2:58:bd:d2:16:eb:f8:43:
f2:29:d0:30:60:92:60:41:d2:7a:72:bb:58:6c:e5:bc:3c:89:
26:8e:76:25:b8:93:13:3f:43:be:80:0a:06:80:a2:df:7f:6a:
d8:0a:a6:9f:24:76:f6:1a:2a:fd:33:f3:ee:d8:fc:31:93:aa:
61:59:d2:72:bd:5d:95:86:9e:e1:e8:7f:c8:1c:98:18:fe:cd:
90:dc:3e:80:5c:0d:98:59:71:00:ea:62:f7:5f:83:11:23:a4:
5d:00:df:bb:30:1f:20:c9:fe:c6:32:38:62:c2:d1:50:37:4f:
b0:53:eb:5f:7d:d5:c2:63:0c:59:f4:6c:e8:1b:06:5d:dc:75:
22:7b:e5:80:f2:f1:e0:3c:3d:7d:a2:01:3e:70:dd:0c:34:ba:
c2:c0:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:15 2026 by rpki-client