Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: umAknmpSt2MlqC29HZPXIpsO2TWvKdwIG5RUsONdaC4=
Subject key identifier: 06:91:1C:B5:00:46:48:07:6F:14:FE:A5:42:81:C6:B7:66:DE:E3:79
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019FAC76076156EA9D8E70A76377D5FA7437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 1727
Signing time: Wed 29 Jul 2026 06:00:44 +0000
Manifest this update: Wed 29 Jul 2026 06:00:44 +0000
Manifest next update: Thu 30 Jul 2026 06:00:44 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: 9FxoKcW21kiylHfSibCEywfB/nOv6xBHz2oL1Y9dWE8=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:07:61:56:ea:9d:8e:70:a7:63:77:d5:fa:74:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jul 29 06:00:44 2026 GMT
Not After : Jul 30 06:00:44 2026 GMT
Subject: CN=06911cb5004648076f14fea54281c6b766dee379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:86:40:4b:52:a5:18:42:09:f1:3a:73:b3:
db:82:71:68:b0:ab:09:5f:02:01:12:fe:d0:17:cf:
92:3e:46:6c:5b:39:84:23:0c:aa:c3:5a:8f:2b:f3:
f7:90:03:b0:6a:44:5a:f8:d6:ac:56:a0:60:a2:e1:
25:83:ba:e3:ea:f4:8f:3c:47:6e:ec:42:f6:df:2b:
3c:bd:a9:37:c9:ae:a3:e9:44:2d:3d:34:70:18:9c:
d6:c9:8f:d6:70:1f:ec:69:19:35:80:1c:a0:11:b7:
38:8c:26:88:af:ab:f3:2c:5b:7a:86:c8:f8:3a:86:
87:0d:d8:3a:df:7f:6a:db:2d:73:1f:21:84:81:ea:
82:b1:84:77:15:1c:a0:e4:70:f5:bf:5d:0c:be:c6:
d6:3b:07:9b:2e:7b:09:df:7e:20:f6:31:01:72:22:
04:e7:da:fd:77:28:7d:ab:d0:57:5d:ee:4b:94:ff:
ee:48:ac:b2:21:9e:07:7a:b9:c7:da:d5:f4:94:17:
37:17:ff:38:49:76:d4:d2:5f:39:47:27:0e:ee:60:
d7:db:62:29:9f:5e:f6:ab:9c:5a:e1:f8:aa:c1:d7:
20:aa:12:71:35:01:6c:00:e7:b6:f8:86:f7:1e:ee:
eb:0d:7b:7f:b3:49:a6:f5:02:26:79:80:b5:4b:60:
8a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:1C:B5:00:46:48:07:6F:14:FE:A5:42:81:C6:B7:66:DE:E3:79
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:1d:6b:54:66:06:fd:b8:db:3f:21:5d:a3:3b:4c:e7:98:a1:
c2:4c:f5:d8:b3:1d:c8:33:e0:d3:8d:a0:b3:d2:c3:fb:59:af:
ea:a4:b6:3c:dd:f3:bc:51:15:81:00:73:d4:72:c7:da:a6:02:
65:07:fa:48:5b:19:cb:03:c1:75:c5:b0:27:be:92:bd:4b:95:
2f:36:ec:fa:5f:6b:d5:f2:cd:28:36:6e:08:e6:c2:64:59:5f:
1b:b7:d3:ab:69:a5:e6:f5:1e:b2:58:ab:fc:fd:fa:a1:0e:e5:
48:55:15:88:24:75:d4:a0:be:cf:1f:e2:bb:02:18:84:22:cf:
f9:58:f6:b2:5d:99:13:b8:d4:d1:f1:86:93:8c:d6:e6:8b:65:
57:12:07:e9:26:5f:f0:8d:1c:e3:f9:e4:3e:99:11:51:c8:72:
fa:6a:5f:4f:7f:f1:5a:aa:d0:4c:7d:2c:fb:1d:4c:d0:ac:17:
2e:ef:1f:99:e8:86:6e:86:2c:54:f9:8d:7d:45:2f:90:55:87:
41:fd:d4:e9:8d:bf:19:a6:69:c7:1e:a9:2f:a2:7c:bb:0b:54:
37:48:43:78:5f:72:f0:f0:5b:81:25:65:ef:d6:11:f0:c2:85:
73:86:d9:2a:39:47:21:6a:02:2b:e7:c9:7a:bf:46:3b:f4:6c:
d5:19:98:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:33:12 2026 by rpki-client