Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: 4/MM5YKNwqlL9j+kMIWOK+DHT8vvdsJ7JaioEysIsuk=
Subject key identifier: CC:63:AC:08:57:8C:36:01:0A:BE:78:A1:53:A9:3A:88:48:C2:98:68
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 019FA906CA04E52CB0882E80967703F18058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 15BA
Signing time: Tue 28 Jul 2026 14:00:22 +0000
Manifest this update: Tue 28 Jul 2026 14:00:22 +0000
Manifest next update: Wed 29 Jul 2026 14:00:22 +0000
Files and hashes: 1: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: FbaJT38dGP+/kQWIrlXwvAS69OJ0nxcxUB5ysUslwz0=)
2: _kQ6sm_mo_p1SKdQoRItAP8rezY.roa (hash: FamL8pGq13zRSsk9bbJZ26sKBwj3qZkJI9rn7zZOeO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:ca:04:e5:2c:b0:88:2e:80:96:77:03:f1:80:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Jul 28 14:00:22 2026 GMT
Not After : Jul 29 14:00:22 2026 GMT
Subject: CN=cc63ac08578c36010abe78a153a93a8848c29868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:3a:75:c9:89:98:51:f2:5d:f8:e5:b6:a6:
1f:d1:0d:5b:5c:06:a3:12:e1:bd:fa:32:b1:1e:fe:
55:f4:d0:e8:c8:92:0a:44:d8:46:93:15:44:ae:c7:
0f:6b:40:96:3c:6b:9f:c6:7e:d8:ef:a8:cb:3b:c0:
56:2f:5b:6d:8c:79:67:8f:d6:b1:b3:9a:fa:b8:12:
34:68:1a:86:f8:49:b1:bc:9c:3b:db:48:d1:1d:54:
aa:e9:da:47:cb:fd:00:7c:fa:e4:21:47:47:b2:46:
94:c0:bd:28:58:19:3f:05:6c:12:75:ea:4d:7c:1c:
e5:35:92:67:89:47:c9:ac:66:58:89:09:dd:af:42:
1a:d3:cf:ca:dc:3e:8e:54:3b:14:ad:13:16:16:dd:
da:5d:cf:f6:f2:fd:1b:9a:95:2f:0e:05:a0:8d:f1:
5c:eb:26:22:f1:2f:47:c8:32:3c:e1:b9:a2:2f:c0:
14:98:79:aa:cc:f3:09:ce:64:cd:b5:ab:23:91:1f:
b4:b6:7e:c0:e7:e6:71:81:4f:b5:d8:9d:5a:c0:e6:
02:13:ec:53:af:ae:b8:6a:12:5e:f3:51:47:95:0a:
f8:a4:92:d8:dd:61:16:8f:5c:f1:12:7b:a7:d1:2c:
a1:fd:7d:39:d5:12:88:81:ac:0f:ab:f1:4a:d4:db:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:63:AC:08:57:8C:36:01:0A:BE:78:A1:53:A9:3A:88:48:C2:98:68
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:01:e5:30:91:4e:99:a7:d7:fb:9e:8b:ae:c6:81:09:07:67:
45:67:35:8a:97:40:91:38:dc:a4:b6:fe:94:0c:74:ba:af:84:
37:03:a9:29:8d:7c:82:7d:75:21:ed:c0:3c:e5:fe:15:80:a6:
d0:5e:d3:4d:b9:24:f0:ee:bf:ca:bc:d9:5a:b6:a7:7a:3c:00:
03:73:a4:86:47:4c:1b:67:6c:fe:f0:3d:1d:d5:6a:8a:3a:d1:
52:10:50:86:88:d8:74:0a:8b:93:b5:8f:93:46:09:09:b7:4b:
61:bd:ba:86:85:21:ba:b9:1f:02:65:cd:a1:27:ba:78:07:f1:
94:dc:1c:48:9e:2e:25:49:3e:6f:09:a6:35:15:94:94:b3:0e:
25:57:40:e3:d3:4f:e0:e8:50:c6:fe:a2:d9:33:83:20:ae:8d:
88:9a:66:5e:6d:21:7f:88:c0:58:da:82:82:40:1e:df:75:14:
cc:0a:28:54:e1:ec:2f:b7:ab:df:69:a5:0e:19:ae:f6:6e:c1:
e9:a0:88:f7:8a:e1:97:d2:d1:de:0e:ae:40:e8:03:4b:5f:5b:
71:ae:14:52:1a:b5:77:b7:d0:7c:e4:9f:e8:88:f1:51:04:31:
b3:69:05:ef:1c:6d:c1:41:f0:7a:d1:22:60:27:a3:66:31:46:
a3:13:52:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:57 2026 by rpki-client