Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: Hm7svjOc4tNG6GGEYXfGmx8uk4fPJB6qhoDfU2cfiWM=
Subject key identifier: FA:8F:B9:5D:00:3E:4A:CD:7E:F7:0F:0F:51:B1:1E:4E:D0:05:2F:D9
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 019FA97576E3A67E7E07C84A15E6429D8E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 19A6
Signing time: Tue 28 Jul 2026 16:01:15 +0000
Manifest this update: Tue 28 Jul 2026 16:01:15 +0000
Manifest next update: Wed 29 Jul 2026 16:01:15 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: SdnyEu9EDs8oBEZN0ESD32oxLJeVmB70bBjTAurT2rY=)
2: bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa (hash: z7weft+bC6v8Gp+CtsE+ZYXb+kZuusFeVfZLKQMSX24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:76:e3:a6:7e:7e:07:c8:4a:15:e6:42:9d:8e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Jul 28 16:01:15 2026 GMT
Not After : Jul 29 16:01:15 2026 GMT
Subject: CN=fa8fb95d003e4acd7ef70f0f51b11e4ed0052fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:40:ce:27:a4:cd:b7:4a:f1:f3:de:95:d9:
0a:22:f9:69:66:4b:e5:df:00:41:c5:be:fc:9b:e9:
19:01:5b:73:57:57:de:80:e4:f0:15:34:e9:e2:8a:
a0:14:35:28:d5:28:7d:1a:c2:88:a4:c1:88:47:6d:
97:8a:7d:d6:6d:9c:fd:6e:d1:b5:7c:a9:11:b3:21:
c6:9d:ae:ba:a9:73:04:17:c9:05:d7:09:c5:99:e6:
74:3b:cb:ba:f7:9e:19:0c:79:f4:9d:4a:eb:2b:80:
11:6d:9d:8e:fd:a6:e6:00:8a:78:d3:53:df:20:c4:
16:47:1a:8a:db:3b:44:96:7b:fe:a9:89:6c:09:30:
00:72:5d:03:1f:12:5d:dc:8b:97:97:3c:65:fd:54:
7b:2e:f9:84:4c:43:84:80:ec:94:fa:d5:2f:bb:89:
c8:ac:6b:a8:5a:ce:6a:27:ea:f4:36:c6:29:bf:70:
96:4c:78:62:dd:72:1d:7d:76:f9:d8:27:ca:0d:fb:
cb:21:de:6c:05:cc:9a:26:80:69:ef:11:d9:d8:b3:
1c:b3:26:83:02:35:3d:da:95:5d:3a:cc:7f:be:0f:
35:5c:06:d7:65:e7:eb:13:f3:de:45:76:ca:ec:f8:
ab:ef:9d:f2:c4:de:28:5d:c4:76:c4:9d:64:36:51:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:B9:5D:00:3E:4A:CD:7E:F7:0F:0F:51:B1:1E:4E:D0:05:2F:D9
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:56:92:17:f9:00:41:6b:71:8f:3b:00:e7:a0:42:9e:33:10:
be:c5:fd:4f:ec:92:f1:6a:f4:01:e1:bb:5d:7e:65:7e:2f:58:
74:3a:76:e3:1d:4e:b3:02:72:b0:f4:47:36:df:58:a4:12:ea:
7b:06:97:64:60:33:79:52:4f:5a:36:d5:49:3b:43:f6:ca:84:
d2:ff:64:4d:93:dd:69:3a:04:3d:c4:dd:30:2e:68:6a:fe:4c:
21:e5:89:0e:ed:1e:85:e8:0a:87:57:82:68:9c:da:03:1e:d4:
86:bc:65:3d:21:b7:32:53:ca:1e:bd:b2:9a:68:70:38:e4:76:
65:a2:23:7c:90:2f:2a:f7:11:c7:ae:74:07:29:bd:cf:99:de:
cf:5f:f0:da:9c:1b:68:f8:ba:d2:33:eb:43:ba:87:eb:a7:a4:
99:7c:3e:96:1a:6f:8e:49:db:2e:d1:72:8d:65:6a:8a:49:ee:
8f:7c:09:35:e7:8e:33:5c:7d:2b:cd:a4:fa:c8:cf:4c:59:bd:
6f:c3:5e:d7:67:2f:99:1c:28:ad:8a:95:23:1e:f5:6f:ce:f0:
60:36:a7:f5:bf:ba:e9:e5:07:ab:db:65:a4:a5:53:ee:e0:e5:
0e:f0:e5:64:d5:53:ee:52:68:e4:82:34:7e:98:3a:58:7e:29:
f7:14:e6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:13:45 2026 by rpki-client