Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
File: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft (raw, json)
Hash identifier: 6jSLZXjjfdN36a1IL7WFiYeKdi5vq37XuAPNUHiTjxE=
Subject key identifier: 00:D9:35:AA:FB:59:7A:05:0E:4E:DA:DE:ED:69:E7:77:84:BF:9B:0F
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Certificate issuer: /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial: 019FA74F9A0A4D5F398C5A276990AA446C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 06:00:39 +0000
Manifest this update: Tue 28 Jul 2026 06:00:39 +0000
Manifest next update: Wed 29 Jul 2026 06:00:39 +0000
Files and hashes: 1: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl (hash: jUGg2ZnT2JprBjxs6VwXasTPlplrPW5P8RLhwstUxQI=)
2: IcOnjr-4gR9WTPCT4pZwTUDGeEY.asa (hash: tub1Ik2wRN8xHgbk6v42CqaDh13KKYgCWxQMPgag7TY=)
3: R8Y7NwZ0Su2ei_m0GxBRPUQ-Dys.roa (hash: zenFNShckmIAOaun4ZoUOs7+2YwOPciW4C0Re8niBMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:4f:9a:0a:4d:5f:39:8c:5a:27:69:90:aa:44:6c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Validity
Not Before: Jul 28 06:00:39 2026 GMT
Not After : Jul 29 06:00:39 2026 GMT
Subject: CN=00d935aafb597a050e4edadeed69e77784bf9b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:23:39:28:dd:52:d8:6c:06:58:80:ba:2e:
52:6f:07:7f:a7:73:07:fe:7c:35:8f:bf:cc:e0:07:
9e:b7:ba:94:5a:86:77:71:ae:35:f5:ac:9a:f5:3c:
66:92:0a:fc:2d:0b:6e:80:99:12:66:04:a1:1f:2d:
0f:88:6a:b0:7a:3e:d8:f6:a6:b9:f9:12:90:3c:37:
1f:c9:e3:51:89:ba:78:91:29:27:19:52:e1:e1:4e:
e4:1d:0b:4d:4c:87:1a:ca:d4:b2:e2:ee:d9:97:23:
3e:5e:72:7e:13:d6:e0:20:2a:5f:49:32:5f:c5:12:
b6:07:56:9b:00:04:24:dc:c2:f9:c9:7e:d0:e9:66:
e8:cb:9b:df:5f:16:96:7f:9b:1e:04:31:ab:fc:71:
c7:c9:78:9b:58:b1:f2:61:a1:40:3e:63:f8:33:8f:
fe:bd:cc:33:a7:e6:d8:ad:92:a8:fc:7e:e3:5c:1a:
c2:72:a7:7d:f6:05:b2:74:14:d8:95:5a:8e:ca:e9:
a1:1c:5f:09:dd:ac:cf:6a:7e:3a:ae:91:25:a3:ae:
ca:1f:d4:f2:95:aa:ec:79:b8:d7:11:e8:e4:34:fe:
27:cc:22:bf:8e:5d:91:fb:26:66:c7:90:54:a9:b5:
fc:42:c8:bc:2f:d7:ed:93:c3:f0:ad:35:90:35:a1:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D9:35:AA:FB:59:7A:05:0E:4E:DA:DE:ED:69:E7:77:84:BF:9B:0F
X509v3 Authority Key Identifier:
keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:b0:91:55:9f:a2:8a:3c:9e:87:07:79:56:62:80:34:94:
46:f5:47:cf:ec:ab:e2:6d:64:ce:b4:64:de:e5:21:5f:96:2e:
55:a9:84:e1:29:a7:29:2b:5a:18:da:dc:f7:59:61:b7:47:1e:
63:28:42:5a:76:e8:98:ec:e0:14:39:1c:af:77:27:d3:6a:da:
71:47:9a:1e:7d:8f:41:c4:46:f0:3b:5e:1a:24:7d:3e:bf:84:
68:41:ac:25:16:4c:23:9a:bc:2f:fa:42:d7:8b:6f:7b:32:ad:
dc:8e:51:6a:fe:bb:4c:0c:fa:d6:35:8d:47:87:a2:7c:b5:f1:
f2:56:eb:ae:e6:69:f3:da:bd:d1:cf:1a:4f:f2:04:17:82:32:
2f:6b:1c:ec:43:e6:c7:50:69:3b:17:b9:2d:01:3e:34:c6:c3:
65:87:b4:0f:ed:42:3a:6d:00:a6:4e:a8:67:0b:04:f3:d1:80:
74:55:82:5b:14:40:9e:d1:08:fe:82:d5:5c:eb:f8:e7:19:74:
4d:b3:d7:b2:81:9b:6b:96:cc:bc:2e:28:2c:66:65:6d:0b:34:
79:e9:23:b6:14:a1:fa:7b:af:94:8a:73:dd:ea:35:85:11:06:
d3:1e:88:67:41:a1:22:48:83:5e:ea:fd:fb:a7:c4:c6:8d:2c:
90:2c:f2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:48 2026 by rpki-client