Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: T12FYlqjx5moKIldxKwdk7TlbIvXxuuCwgvq7AVNyPU=
Subject key identifier: 97:68:D5:F0:F6:A0:25:B8:A6:A6:57:C0:70:84:1F:3A:3F:54:67:3B
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 019FA9E2CB7459011B3FF7E2CDA8D57BD295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0CEE
Signing time: Tue 28 Jul 2026 18:00:40 +0000
Manifest this update: Tue 28 Jul 2026 18:00:40 +0000
Manifest next update: Wed 29 Jul 2026 18:00:40 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: uS3u/gQ55Ce1/dXfWohMrCMwz6SWpr0CQ9IPjJsuw9w=)
2: G_3AbkBvxlIP88eiGt3CS6nBjms.roa (hash: HxmAkTnKX1MXFmf40b0A8DoHMlH+AhQxL52OcvMUs9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:cb:74:59:01:1b:3f:f7:e2:cd:a8:d5:7b:d2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Jul 28 18:00:40 2026 GMT
Not After : Jul 29 18:00:40 2026 GMT
Subject: CN=9768d5f0f6a025b8a6a657c070841f3a3f54673b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:3f:bf:35:83:b4:c2:91:e4:d2:09:37:08:
ba:07:90:a7:53:9c:c8:49:ae:c9:2f:53:a7:48:e5:
ff:99:8e:4f:07:af:a0:18:a1:55:9b:8b:20:94:11:
75:57:af:f5:14:36:77:8d:a3:b1:0c:1e:95:e4:dc:
6c:02:50:4b:b1:12:ce:b9:84:77:72:bb:12:8c:56:
92:30:0c:86:a7:e6:de:9b:ee:6e:39:71:e4:c8:95:
3e:51:ef:c2:0b:b1:da:3c:88:7e:d2:bd:2d:69:67:
c8:cc:8e:db:75:f1:a8:ae:74:ce:ce:74:3b:05:5e:
b4:0c:7c:3e:06:01:f3:63:42:8d:e8:9f:ab:4c:26:
c4:1d:32:5d:66:1e:10:04:d9:b0:8d:48:28:da:22:
4c:5b:61:01:6d:53:bf:1e:c8:be:b5:84:e8:35:f6:
b3:1a:89:5d:7c:5a:e5:29:4e:f9:9c:e7:af:b7:ea:
3b:fe:c5:a3:12:08:eb:01:6d:33:64:c9:d5:df:95:
ea:85:f2:27:6e:9a:73:30:43:94:2b:9a:3f:c8:34:
7d:83:8b:9a:d2:67:03:16:8e:56:72:06:31:ce:63:
28:54:e3:29:80:c4:ba:b3:f6:41:44:28:e5:c7:88:
a2:4c:2b:ba:70:33:be:3d:a5:39:40:fe:2a:70:ce:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:68:D5:F0:F6:A0:25:B8:A6:A6:57:C0:70:84:1F:3A:3F:54:67:3B
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:71:87:f1:8e:f1:b5:64:01:a8:18:4d:33:0e:d0:f0:aa:5e:
47:d4:e6:a0:5f:44:b2:71:0f:bb:bf:99:a9:94:92:df:37:b4:
a4:64:88:15:4b:3b:c2:4e:97:28:d5:36:d4:79:58:7a:2b:c2:
f9:a8:a6:51:8c:95:7c:6b:7d:25:ff:f8:a7:00:57:6e:41:68:
4b:08:28:b5:67:c5:ee:65:a2:6e:48:3d:2e:71:bc:db:aa:d7:
c9:a7:f7:2a:be:d5:01:92:4b:96:da:4b:4d:40:d9:86:39:62:
b4:04:0e:6d:e9:c6:ea:e9:27:a0:31:2f:e1:50:80:f1:94:ef:
cb:db:c5:f1:c7:07:4a:4c:46:c3:2f:34:03:06:32:99:43:39:
5e:5d:c4:cc:ee:b8:29:d2:8f:14:8e:f2:f6:b1:d1:c1:3f:c1:
8f:28:74:b7:a8:fb:38:1d:1e:97:08:04:c3:94:75:08:ff:81:
ac:8d:3f:dc:f9:0a:ae:ff:f7:78:a5:db:3d:9e:eb:a8:e8:a5:
21:03:1c:67:c3:e1:dd:21:ce:e2:46:91:59:13:91:c5:e3:58:
05:30:b4:07:98:de:4b:fa:33:9d:a0:c9:77:22:a3:a6:00:7c:
5e:c5:e1:70:c8:d3:6c:3f:9f:fb:4f:19:c2:92:ba:4d:ee:50:
b8:d7:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:50 2026 by rpki-client