Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: m5IcCYbv6my9IuVB2CsEBh8EX6Qe3BRxs2UuMvjdq1M=
Subject key identifier: 60:BA:7C:70:54:A9:36:C6:A0:F4:3D:E2:16:09:17:06:37:69:4B:1A
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019FA9E2FD94AAB43F19E54563B1A4016CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 18:00:53 +0000
Manifest this update: Tue 28 Jul 2026 18:00:53 +0000
Manifest next update: Wed 29 Jul 2026 18:00:53 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: xKCDUurTp2Vlt50it/c8BMK+WV4QY37Uc3YJBh1p7Qg=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:fd:94:aa:b4:3f:19:e5:45:63:b1:a4:01:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Jul 28 18:00:53 2026 GMT
Not After : Jul 29 18:00:53 2026 GMT
Subject: CN=60ba7c7054a936c6a0f43de21609170637694b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:83:99:17:9c:12:f7:a2:b9:85:fc:c5:06:
bd:02:ae:18:3f:4c:90:4c:3f:bf:6f:e0:22:45:e5:
59:e0:1a:6b:a1:d9:63:3a:db:61:fc:64:1f:06:50:
a4:a6:1b:b4:ff:30:46:08:ab:3e:8f:83:d9:b7:ca:
4e:5c:68:5e:d4:7e:e3:ab:a6:0b:40:d2:2c:88:10:
34:97:99:1f:67:18:27:fc:40:52:65:49:e0:c6:5b:
e7:b3:5c:d3:04:66:7b:83:1a:01:5a:b2:be:48:7d:
9b:0c:f7:81:7a:76:23:9c:8e:20:77:fb:2e:83:52:
b8:92:e1:21:6c:a2:60:cc:e7:7f:84:c6:8e:48:87:
0c:27:16:9f:5b:09:2e:7c:dc:dd:2e:e0:5d:1d:9b:
af:a7:26:f5:0c:30:a3:0e:19:bb:3f:d4:a0:92:0e:
b2:2f:c9:94:a2:da:6e:64:30:51:7c:36:bb:1f:13:
61:dc:19:81:c1:a8:5d:20:84:16:b8:7e:29:65:86:
c4:c5:89:fa:9f:6b:06:db:9d:4e:b0:a3:95:dd:e5:
8e:29:0e:4b:e5:43:ba:c6:65:3e:66:9d:64:3e:0b:
b2:85:2a:94:d8:cf:17:bd:9a:30:c6:7a:ab:af:93:
b0:a8:f3:56:a8:55:7d:10:94:a4:de:8a:fe:90:e0:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BA:7C:70:54:A9:36:C6:A0:F4:3D:E2:16:09:17:06:37:69:4B:1A
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d0:cf:9b:8d:a4:0a:d7:10:04:61:28:cd:55:d4:45:84:9e:
7c:b8:70:90:00:f0:fc:95:a1:cd:32:ba:c1:91:d6:0e:a2:5d:
6e:e8:6e:0f:82:3d:08:4a:9a:f3:7b:c3:1a:ef:bd:44:08:a4:
89:3e:d7:6e:52:a2:18:b4:bf:22:2c:6e:11:ee:4b:c4:e8:5b:
2d:f4:66:d1:b0:92:b4:ae:ad:d0:be:ba:de:c0:b1:6a:72:0c:
13:f0:9e:c1:9a:a7:83:c1:38:b8:33:8d:19:eb:0a:c1:1a:0a:
c8:95:f7:48:88:30:fb:37:3a:d7:c2:1b:3c:d0:4d:41:2c:18:
80:7b:17:07:bd:16:c9:d2:87:1e:ff:b3:21:b3:01:5e:bb:fa:
e1:2d:bc:87:66:42:b5:e2:31:e9:90:a3:92:fc:08:3c:11:91:
3c:fb:e7:6f:7f:23:04:53:c7:6f:21:99:98:e4:84:8e:81:a7:
1b:b8:81:3d:1f:db:58:dc:d6:cb:26:e6:12:3f:57:d0:7e:65:
eb:66:f7:83:94:44:dd:52:1e:ad:a8:9b:6b:8a:c8:10:43:fc:
02:e7:01:0f:93:fd:1a:94:62:fa:5e:14:b6:61:d5:6b:42:df:
e2:94:cc:43:87:dc:42:f0:2c:02:15:db:83:3d:6f:d3:23:82:
3b:73:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:26:20 2026 by rpki-client