Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: H3rW8nXuM2y87ETilDqLRTgRgRiHAi2+OcBO+BNCzNU=
Subject key identifier: 38:87:55:1D:77:D5:2E:58:A3:66:39:94:C4:D7:6D:C9:CC:8C:A1:6C
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 019FA8CFE4C57CAE216CF8FF0BC335B6CE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: 01A3
Signing time: Tue 28 Jul 2026 13:00:24 +0000
Manifest this update: Tue 28 Jul 2026 13:00:24 +0000
Manifest next update: Wed 29 Jul 2026 13:00:24 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: nRa2M68Cu9XzGbFwPfmmUc00lFuuz1BCY2BU/krl220=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:e4:c5:7c:ae:21:6c:f8:ff:0b:c3:35:b6:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Jul 28 13:00:24 2026 GMT
Not After : Jul 29 13:00:24 2026 GMT
Subject: CN=3887551d77d52e58a3663994c4d76dc9cc8ca16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:4a:46:88:e0:47:93:9c:cf:da:e0:0e:f2:
88:16:1a:5a:1b:84:62:56:a6:c4:46:79:1f:41:a1:
e7:80:e7:e0:32:a7:c4:b1:ce:b2:07:f9:a8:1e:c1:
ff:00:4c:5d:15:23:b5:3b:3a:9b:db:07:99:e0:48:
e3:74:fb:ef:5b:0a:1b:90:0c:b8:99:ac:c8:38:45:
d7:a6:4a:bb:73:01:e7:ec:e4:de:b1:6e:d7:4a:1b:
b9:34:6b:45:8b:db:35:74:cc:db:52:6c:cd:75:0e:
1d:a9:11:a3:6b:ab:4d:b7:d1:9f:6d:f5:4b:d7:6b:
ad:98:df:db:2a:83:ba:ce:98:3e:9f:ae:b2:35:f3:
e5:75:6d:6d:12:bc:f7:36:1d:08:10:df:34:74:df:
be:f0:58:7a:b4:df:ce:b8:53:0e:32:fb:2d:63:7a:
ee:91:3c:ac:58:33:9e:7a:5f:04:5d:ad:0b:65:71:
cf:5c:21:6c:67:bb:9d:20:b1:06:5b:33:65:0d:14:
34:7f:14:78:c9:53:2a:47:8f:ef:ec:71:4e:cf:3a:
4d:c0:55:19:2a:e0:35:e8:89:2b:95:0e:8b:65:a5:
dc:d7:ff:ab:90:9a:27:13:38:2d:d9:d7:8f:b6:2b:
7d:10:d4:fb:9f:dc:82:7e:26:10:01:36:8b:79:6e:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:87:55:1D:77:D5:2E:58:A3:66:39:94:C4:D7:6D:C9:CC:8C:A1:6C
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9c:e7:2f:f1:e2:72:93:6f:57:58:77:e7:26:fb:27:28:2c:
0b:14:d7:fd:81:64:5c:4e:ce:5a:e5:e3:51:4b:53:15:d2:40:
a5:fc:b9:c8:28:2a:ca:11:a5:7b:1d:7d:17:6b:56:cb:07:5b:
aa:f1:b7:de:17:30:82:eb:ae:98:45:d2:56:2d:c2:eb:d9:38:
8f:97:3f:b6:69:ec:29:ae:10:2c:01:e3:35:8e:68:22:ad:7b:
89:a8:f1:87:4b:50:2f:af:a1:fd:97:15:64:41:49:55:96:97:
ce:5f:28:79:8f:09:98:2a:5d:a6:ff:cd:4c:c8:46:25:56:e9:
6c:a5:2f:43:25:87:fb:04:33:2c:65:3d:cf:a1:70:c7:90:7d:
57:c7:ed:28:a6:c3:2e:db:05:c0:ac:e1:3a:75:60:e6:fc:13:
38:be:65:1e:c3:9f:52:d4:cc:9f:51:2e:f7:cb:af:ce:7b:c5:
e1:2f:9e:5f:42:0e:e2:4f:33:34:35:4f:fd:fa:db:85:58:ca:
a7:64:af:54:f2:40:ba:71:44:e1:b2:d6:ed:63:db:38:33:f0:
9b:a3:43:7f:9e:9f:fa:dd:f7:aa:f5:b2:1b:6d:d5:fe:c2:e9:
e5:d7:cb:73:a5:94:2a:bd:d3:b7:9f:e2:95:73:be:67:54:a9:
b4:e1:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:21 2026 by rpki-client