Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
File: 4nHbgOZwKYw5jUhSzsWPhcZw77A.mft (raw, json)
Hash identifier: BDXfwHSGCfB0mursw7JZyieToQ9B6Bk7QbGEyEVnsds=
Subject key identifier: 3F:71:BD:B3:BB:E4:8F:BC:81:D4:3A:56:71:8A:70:15:C9:85:DE:15
Authority key identifier: E2:71:DB:80:E6:70:29:8C:39:8D:48:52:CE:C5:8F:85:C6:70:EF:B0
Certificate issuer: /CN=e271db80e670298c398d4852cec58f85c670efb0
Certificate serial: 019FAA8737F49F6763BB4347FAF9222D7C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:16 +0000
Manifest this update: Tue 28 Jul 2026 21:00:16 +0000
Manifest next update: Wed 29 Jul 2026 21:00:16 +0000
Files and hashes: 1: 4nHbgOZwKYw5jUhSzsWPhcZw77A.crl (hash: 8BcXMOChQHOE67iBaEE8Dqknse7cRtFZSYjEEFZG/NA=)
2: ZM__6ZrfQ4R-HkxAG3J8qUNVltU.roa (hash: liqMP4aaz7aIvcCZqU393aEcnVlxYIM+DKJpFlpZRtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:37:f4:9f:67:63:bb:43:47:fa:f9:22:2d:7c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e271db80e670298c398d4852cec58f85c670efb0
Validity
Not Before: Jul 28 21:00:16 2026 GMT
Not After : Jul 29 21:00:16 2026 GMT
Subject: CN=3f71bdb3bbe48fbc81d43a56718a7015c985de15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:ea:91:6f:4c:00:1a:22:ee:ea:a1:89:9d:
e8:40:c3:4a:42:fe:ae:f6:aa:11:52:db:fe:f8:cf:
33:77:71:1b:75:7e:6e:b3:f7:81:1b:46:ea:7c:4a:
cf:b3:e7:86:ca:13:2d:45:c4:8c:36:9c:41:93:51:
7c:2e:1d:52:f7:1f:e0:4a:e5:16:33:1f:fb:73:9b:
03:d1:33:fd:6c:08:50:31:c4:c3:9f:6b:02:5a:78:
fa:46:6f:51:e0:f8:11:25:a1:7c:19:a3:8f:3a:87:
1a:f9:5d:01:50:c1:f9:06:a1:72:67:89:2a:83:f0:
f6:19:6d:72:08:ef:19:11:d8:ba:9a:8a:4f:e6:7a:
b3:a2:7c:89:b8:91:0c:ad:74:16:65:76:77:16:44:
b3:ad:5f:43:ab:d9:79:8c:52:36:fb:1a:29:24:32:
22:0f:5f:13:24:0e:81:cc:e6:51:e9:11:26:bc:1f:
13:4f:f1:7f:c1:64:a8:2b:8e:be:00:f5:2d:df:27:
c9:ab:9a:95:32:e2:20:27:a3:43:46:70:75:73:a8:
d0:a9:cd:da:bf:f2:27:c1:e1:05:cb:1f:a8:de:03:
0f:72:c9:b7:91:4c:01:81:e0:32:23:3e:10:2e:e4:
47:96:21:07:11:7b:c5:63:d7:0b:78:81:3e:0b:39:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:71:BD:B3:BB:E4:8F:BC:81:D4:3A:56:71:8A:70:15:C9:85:DE:15
X509v3 Authority Key Identifier:
keyid:E2:71:DB:80:E6:70:29:8C:39:8D:48:52:CE:C5:8F:85:C6:70:EF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:69:8f:bb:0a:09:f5:22:b3:79:fb:6c:0e:02:07:74:c7:55:
36:0e:5d:a0:86:2d:33:e6:5c:4e:08:51:b8:9d:70:8a:d4:18:
44:ea:46:63:a4:b5:2d:fa:ff:1a:80:2e:ad:e3:3a:96:8a:28:
a3:8e:e7:05:f4:4e:88:1a:5b:10:88:e4:0a:64:20:e1:9f:95:
a8:65:cc:8b:4e:60:69:9e:6c:49:07:8d:ba:7d:fe:7b:44:8f:
7b:e0:8d:7f:97:d1:89:3a:9a:4c:d9:71:04:3b:e1:65:06:27:
00:c8:be:e7:ef:26:12:0b:d8:8c:02:16:f2:32:d7:2e:d9:0a:
32:5f:ff:d1:40:e7:f1:fd:90:71:f6:ef:2d:9c:e5:94:7a:f1:
e9:a0:3f:e9:3c:3c:fe:28:63:8f:59:78:63:ee:e8:59:23:79:
07:bf:5d:d1:9d:30:3e:74:d7:e2:cd:72:88:f8:87:84:ca:57:
92:af:a1:9c:4f:a4:e5:0f:75:97:e2:e8:bb:c0:13:48:0f:a7:
f0:c7:0e:61:9b:91:f0:4c:d1:df:c2:45:d0:e7:e8:7e:43:8b:
48:bc:8f:d1:24:cf:bc:04:87:7f:19:98:78:c2:6c:27:13:b7:
58:a7:c2:56:eb:9d:8e:88:b3:fb:b6:66:50:83:5a:03:83:1c:
89:4e:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:37:47 2026 by rpki-client