Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
File: R4urL0xbYpNYFZNPSoH1YNLXMsg.mft (raw, json)
Hash identifier: 2xgPA6Uj811e4lfeOfwCxrD7qvUWb6zGTeXnNvdJasA=
Subject key identifier: 6F:AB:CB:BF:9D:8B:B1:FE:6A:E0:61:D4:1E:67:0E:3A:25:72:11:FB
Authority key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Certificate issuer: /CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Certificate serial: 019FA9E2B6307B179BCEDCA21FDEB9E2E49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
Manifest number: A2
Signing time: Tue 28 Jul 2026 18:00:35 +0000
Manifest this update: Tue 28 Jul 2026 18:00:35 +0000
Manifest next update: Wed 29 Jul 2026 18:00:35 +0000
Files and hashes: 1: OP4GnLmThCBFy87U3IPXWaJdkGA.roa (hash: CzHuhJNSL0fmMbMPkWZNZ3g6rBvAOQunuRNzTNwmsOk=)
2: R4urL0xbYpNYFZNPSoH1YNLXMsg.crl (hash: kCg9NzfTed5N98KwyXf6fGgcZG9B28EklPVdja5WUkc=)
3: w9hMpn22nS31hORs4FbfAZ4nCN8.roa (hash: R5QWnTCvV96e97UtI23G1RgAIOStBivXSgOB+MvPMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:b6:30:7b:17:9b:ce:dc:a2:1f:de:b9:e2:e4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Validity
Not Before: Jul 28 18:00:35 2026 GMT
Not After : Jul 29 18:00:35 2026 GMT
Subject: CN=6fabcbbf9d8bb1fe6ae061d41e670e3a257211fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:c5:80:27:6f:4f:e2:37:b9:07:47:0b:59:
c5:1e:d1:59:5b:5f:53:04:8e:e8:5f:6d:11:f2:82:
52:1a:d0:81:9b:62:ba:b3:16:89:25:bb:bf:d7:19:
a8:d8:e3:d3:d0:c3:90:22:6e:c6:99:91:30:d7:2a:
5d:e3:de:6b:1d:ae:cc:d9:64:2d:7c:b7:c6:65:32:
bc:fb:b9:d5:4d:29:c0:7f:98:7c:14:61:db:09:5d:
f7:2b:bc:18:10:a4:c5:31:fd:96:b0:7e:6f:5d:bf:
84:f8:27:33:bd:84:06:65:28:17:6d:2e:de:dc:84:
de:00:8c:df:21:6e:06:e8:49:33:65:c7:bc:59:f3:
95:95:d8:94:09:2d:bd:da:26:48:25:54:84:fd:7d:
b9:41:d1:c3:44:0b:83:a7:c6:a8:65:0e:0d:75:8d:
4b:6f:6c:be:c8:cc:54:14:33:6b:c5:19:c3:e8:54:
1d:bd:00:70:95:92:56:2e:76:72:66:9f:94:05:64:
d4:b9:9f:5f:33:c9:d2:a3:71:f3:e8:35:5e:4d:e1:
18:dc:dd:e7:1f:00:ca:be:eb:48:6b:e7:e2:85:2e:
45:04:f7:a0:60:b5:be:8a:b2:9f:06:16:a9:8d:7f:
33:9c:e8:1f:2b:6a:7c:2e:cf:5c:49:81:d1:f2:bf:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AB:CB:BF:9D:8B:B1:FE:6A:E0:61:D4:1E:67:0E:3A:25:72:11:FB
X509v3 Authority Key Identifier:
keyid:47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7a:80:7e:12:c5:f2:ef:4f:ad:c8:25:a5:ad:81:98:a3:92:
55:85:93:b9:b1:fd:b8:96:e1:c8:25:31:53:9a:9b:0d:69:ad:
ef:49:8f:0e:74:fa:6a:de:35:38:ea:02:2a:8f:c9:e7:3b:6e:
a6:af:ec:0e:e1:b4:37:19:8a:a2:30:6b:df:1b:d2:9c:53:1d:
1b:cd:0a:4c:fd:ec:f9:cd:b7:26:e6:8d:a1:0c:f5:7a:71:ca:
0f:b2:a7:79:97:5a:a9:ef:f0:41:f3:39:d5:df:da:9c:fb:33:
55:02:a2:9d:b2:96:e5:19:6a:ea:b8:63:fd:5f:d3:e8:1d:a8:
df:da:66:02:98:24:f0:42:b3:53:e7:20:20:48:e2:77:77:2a:
d2:96:ca:7d:9e:bd:07:4f:6f:b9:78:14:ea:6d:f5:e2:a7:0d:
dd:d9:7a:a1:d5:11:0f:05:b3:ac:03:c4:8a:42:4e:94:00:58:
f4:11:f5:98:e0:92:6f:52:21:05:cd:91:bb:14:40:45:a7:70:
0b:45:99:ff:7e:14:30:6e:ac:bd:69:5e:c1:6f:70:ae:c9:e9:
f0:4c:fa:c6:aa:cd:92:a2:d0:57:87:48:55:e9:0a:e1:98:fb:
38:5b:9e:ef:87:31:99:76:0d:11:67:ca:38:b3:e0:11:9d:a6:
f5:29:3b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:17 2026 by rpki-client