Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
File: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft (raw, json)
Hash identifier: 34AfpP97gHywBAV9gmej7lc6WoQIKfSb6MUy1RnsoBQ=
Subject key identifier: E6:EA:E7:9F:75:AF:A3:F8:83:A9:57:27:60:8B:E2:32:12:3C:CF:B5
Authority key identifier: 2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
Certificate issuer: /CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Certificate serial: 019FA89966913B1832E40D7CEE41AF3F5AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:53 +0000
Manifest this update: Tue 28 Jul 2026 12:00:53 +0000
Manifest next update: Wed 29 Jul 2026 12:00:53 +0000
Files and hashes: 1: 2bqMh3zh3RMelkk-rBQrB41LTWE.roa (hash: blAJOiksKE/Qdij1yqoH9hI9PosYnUGMXIxTtQT9ffw=)
2: Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl (hash: fTsxqDEWt1x4KXoquBCnI7wkLPGvmzTBzZL5Qo2SdhA=)
3: TAe0Trf53yP7E6TAGcnMACwmHuU.roa (hash: qnT8hns4uHFEqM28Gh5Es6r6jtqUh7SObO4jiLKYp54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:66:91:3b:18:32:e4:0d:7c:ee:41:af:3f:5a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebe12f46b5e6b960c5ce8131b1d3e532f05a8ad
Validity
Not Before: Jul 28 12:00:53 2026 GMT
Not After : Jul 29 12:00:53 2026 GMT
Subject: CN=e6eae79f75afa3f883a95727608be232123ccfb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:1f:70:8c:b1:41:23:81:ab:73:8c:89:ee:
3d:d2:10:6f:bb:17:ec:60:74:f3:db:d7:c7:df:52:
a9:5b:42:45:ed:c2:59:0c:d3:2e:fc:4a:26:e2:79:
6d:e5:b8:25:d9:eb:9d:5d:5f:19:08:07:13:eb:7e:
60:3f:cd:54:60:c8:5e:d2:b8:17:d2:c9:85:e5:db:
b3:df:dc:5d:d9:85:17:b9:a8:87:e4:bc:28:ac:58:
eb:b9:61:34:fc:a5:63:84:1f:0c:65:95:ed:3d:86:
ab:a3:4f:31:84:fc:a9:69:e9:7d:61:ef:57:fb:12:
ac:fe:40:6d:4d:eb:93:af:01:7b:af:5e:18:59:7a:
c8:80:f4:97:cb:62:47:72:8d:23:4d:1e:62:50:06:
fa:be:4c:0d:85:cc:10:c6:f6:7a:cd:15:a8:37:1b:
7d:6d:91:bd:8d:ac:34:8e:69:0a:f9:9d:a8:52:1d:
58:7e:a9:c2:a6:83:18:69:c8:91:a1:bf:c7:75:fe:
60:b7:e7:0b:16:86:37:f2:07:9b:ca:bd:c7:23:41:
e5:7f:4e:78:e3:d9:8a:b7:39:3b:68:1d:ea:7b:49:
3d:1d:2f:8d:cb:15:3b:e5:47:64:49:87:88:d6:ad:
1e:5f:67:29:65:99:c2:67:7c:69:40:2b:68:45:9b:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EA:E7:9F:75:AF:A3:F8:83:A9:57:27:60:8B:E2:32:12:3C:CF:B5
X509v3 Authority Key Identifier:
keyid:2E:BE:12:F4:6B:5E:6B:96:0C:5C:E8:13:1B:1D:3E:53:2F:05:A8:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Lr4S9Gtea5YMXOgTGx0-Uy8FqK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:58:1a:06:bd:36:8e:4b:6a:9e:7f:9d:8e:e6:f4:1f:f9:
88:a0:2e:a4:91:6b:56:9f:64:c1:41:7f:7e:7c:01:15:4c:7e:
b6:19:f0:89:7e:9a:81:b4:4a:0c:0c:13:0f:63:5f:c0:fc:66:
0c:54:77:e3:e7:a7:af:88:fa:d0:68:70:d6:a8:a8:46:88:36:
3b:65:6f:ee:8a:fc:0b:00:96:6c:6b:20:5e:f9:34:92:55:1e:
08:fe:27:4c:de:80:ef:91:df:5e:7b:08:e6:ef:1d:ff:a7:d1:
38:76:7f:cc:91:b8:63:d1:79:3d:38:41:8e:77:93:49:0e:2e:
3b:7e:1d:95:b4:6a:18:fd:34:e7:fc:4e:e3:87:77:01:aa:4e:
1d:ad:fe:85:30:81:5c:5a:ea:89:1c:06:7e:6e:9d:81:80:58:
b1:f3:60:5f:c6:48:22:2f:c0:66:6b:f2:06:9e:d2:6a:79:3d:
58:69:9a:7c:ed:6f:22:98:2e:c9:0e:13:ca:73:c6:22:d9:e8:
14:ea:12:ec:85:85:75:60:49:eb:d1:93:da:fe:f7:c9:18:b3:
3a:34:67:a1:db:70:df:7d:b5:e6:3f:7b:a6:d8:8a:5c:e9:20:
ae:ab:de:43:bd:33:30:4b:a7:57:a8:89:b7:eb:0a:03:a8:c2:
bf:c9:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:52 2026 by rpki-client