Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: aBrrTbkghfnBt6iWzNAm319dJop11C+MA5tqcJkCITc=
Subject key identifier: 43:24:87:76:FA:E9:17:3D:C8:D9:95:2D:C4:9B:5B:BC:0B:02:28:E5
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019FA898FA35089DA4AC8641BD3083584085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 051E
Signing time: Tue 28 Jul 2026 12:00:25 +0000
Manifest this update: Tue 28 Jul 2026 12:00:25 +0000
Manifest next update: Wed 29 Jul 2026 12:00:25 +0000
Files and hashes: 1: 69-gm5sAHUb2zlkusSsJwnhPOtw.asa (hash: w8dP42z3PzlgsL7213s07oZP842qzAir4wVoWzTTHUs=)
2: 9CS7xyErSCJY_wQFDW0wV1rIDq0.roa (hash: e2yWbh2yduLvhGO9ZZhdKHXEB8OOHqP7OQbj14TpHIU=)
3: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: N5u6t6GwdJVAZ0ZhXYE441LhZi2ytG7KJizHDIBusMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:fa:35:08:9d:a4:ac:86:41:bd:30:83:58:40:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Jul 28 12:00:25 2026 GMT
Not After : Jul 29 12:00:25 2026 GMT
Subject: CN=43248776fae9173dc8d9952dc49b5bbc0b0228e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:da:59:37:e9:fa:c8:0d:c0:0a:e0:34:be:
4f:78:21:f7:64:dd:0d:8b:3d:85:26:e8:37:44:4d:
a5:c8:96:d9:fb:19:45:4a:ef:83:49:74:42:10:d7:
1e:19:31:0d:07:40:aa:2a:f7:7e:64:d1:c5:cb:67:
de:e4:3e:64:f6:e3:ce:55:63:eb:0c:1b:02:d2:6d:
a8:df:e0:96:c2:5a:a5:e5:db:04:0b:b3:3f:1c:b3:
8f:f6:87:90:f3:20:c4:12:f0:dd:8d:1e:64:15:69:
ba:65:53:de:d6:b9:f8:4d:cd:ba:85:ae:b1:29:93:
47:e9:06:45:9a:ed:db:55:bc:2e:6e:29:fd:d6:ea:
29:9c:2e:3e:ec:71:35:cd:cd:1c:ef:6e:59:e9:70:
5f:78:59:60:78:c7:3f:db:d5:44:27:26:35:e4:57:
02:a5:48:58:76:b3:63:44:7e:8f:56:93:c3:83:25:
5b:84:f5:20:88:e2:36:aa:82:cc:95:85:3a:a0:b6:
8b:1e:78:d1:ce:99:83:fa:00:36:2c:2c:67:e5:88:
4c:7e:e3:b5:e7:2b:85:f3:89:a7:79:13:41:ae:0e:
e2:41:0c:b3:98:72:c3:4d:10:21:88:ab:de:82:20:
31:d4:20:70:c1:5b:0c:64:f7:7d:27:34:15:b8:eb:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:87:76:FA:E9:17:3D:C8:D9:95:2D:C4:9B:5B:BC:0B:02:28:E5
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3d:2d:a5:ee:24:a1:92:31:ff:62:58:24:60:d8:91:37:91:
c2:e2:bd:94:26:99:ce:11:5f:cc:2a:b8:a1:77:fa:8e:53:dd:
f4:f3:04:51:81:48:c8:9c:f6:e9:93:30:48:7e:95:20:29:d6:
cf:10:ad:96:54:ae:19:c8:94:ae:fe:1d:68:28:52:5c:d5:89:
67:9a:ff:3c:86:b3:ea:db:41:33:4a:24:c4:4f:65:5c:2e:b3:
83:fd:93:fd:f4:59:70:b1:4f:aa:af:4a:d2:bd:28:6c:05:05:
cf:98:da:90:4b:24:45:bf:fb:fb:ec:db:7c:f6:40:57:78:7a:
f5:18:09:fa:02:4b:26:46:ab:cc:90:7e:ff:f9:b6:e1:27:d0:
a8:5b:98:6a:3e:a6:e6:72:e2:63:85:59:ea:55:f4:7d:6d:f5:
87:a8:60:45:b2:ab:37:c8:f0:c9:bf:e0:c5:ee:5f:a8:35:dc:
fb:e7:44:a0:f7:7b:9f:4e:46:29:fd:68:aa:4c:46:d6:01:5c:
2a:38:34:61:8e:90:64:d2:5c:f4:50:fc:f4:c7:a6:d2:15:a6:
86:30:ce:13:76:20:c8:9e:94:a3:19:3d:7a:b8:f9:49:aa:e0:
15:97:ed:cc:40:37:3b:8b:7f:1a:21:7c:01:50:36:1a:81:dd:
48:11:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:05 2026 by rpki-client