Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: GANA/JEJzFR7TQ7Y3jtkGS9vAzrp4V6ojVU8fDMd2d4=
Subject key identifier: A5:3F:C5:39:BA:2F:10:16:27:B4:E7:8F:6F:07:6C:D9:1E:40:C5:21
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019FA97537E2B7A8F67E315D8233044FD6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0D0B
Signing time: Tue 28 Jul 2026 16:00:59 +0000
Manifest this update: Tue 28 Jul 2026 16:00:59 +0000
Manifest next update: Wed 29 Jul 2026 16:00:59 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: NyWj9ohpwXXakJ3miYKVHoKaUJurtvwhW2oIMRzPr9I=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:37:e2:b7:a8:f6:7e:31:5d:82:33:04:4f:d6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Jul 28 16:00:59 2026 GMT
Not After : Jul 29 16:00:59 2026 GMT
Subject: CN=a53fc539ba2f101627b4e78f6f076cd91e40c521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:aa:cd:cb:5a:fb:b8:3a:8a:af:8e:d6:0d:09:
a0:ca:f3:fc:2b:8e:67:7e:07:6b:0f:7f:24:a4:9f:
03:8d:0c:45:2f:63:52:cc:28:ed:b0:03:b3:84:dc:
64:fa:f4:44:03:f6:81:bb:0b:a9:5e:28:22:59:14:
40:7a:0b:44:03:98:11:63:8e:0a:76:62:b1:02:97:
35:1e:33:d3:3b:c2:75:0c:eb:83:d5:3b:5c:6b:1e:
66:fc:cc:7b:51:67:e1:16:d2:d0:c7:7c:c9:45:f2:
21:3e:ae:ba:3f:58:57:47:4c:d3:25:30:80:9e:49:
37:24:d6:66:8d:66:66:26:e4:f0:88:b0:50:92:a0:
ef:30:a8:d8:36:45:36:ff:c1:43:40:5e:e0:f1:7a:
d2:2e:ce:41:99:10:0a:92:cc:00:b1:3a:be:1d:d8:
98:91:5b:ed:68:bc:c1:e8:26:94:7d:bb:02:33:61:
b7:b3:ac:bf:f9:3d:a1:99:1e:1e:62:d1:7e:dc:3b:
95:07:65:b3:b1:d7:c5:6e:b2:7e:c2:63:1a:1a:cd:
47:69:35:95:d9:7d:fa:03:5d:88:96:c0:13:56:2f:
22:51:26:bd:37:f5:95:96:6e:43:82:59:45:a8:c5:
98:c4:01:aa:f4:86:38:a1:37:5a:5b:d6:6f:ad:05:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3F:C5:39:BA:2F:10:16:27:B4:E7:8F:6F:07:6C:D9:1E:40:C5:21
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d7:56:a7:5f:bd:0e:15:4c:c2:9b:2a:2d:6a:2d:9d:42:2b:
7c:5a:c6:70:2e:d0:65:1f:d5:6b:e1:25:80:b5:33:e2:72:dd:
57:89:5a:0a:b3:78:73:4d:98:71:22:63:0a:f6:3e:f5:d1:90:
43:5c:50:c5:84:9c:e2:ed:d6:cf:b1:67:4a:57:67:2a:39:81:
6b:ab:cb:0c:ac:9c:62:44:f5:fb:e8:7f:01:05:ba:a2:e0:a4:
a8:6b:12:72:05:d1:f8:9e:4e:57:1e:75:8d:11:9f:94:c4:ab:
d3:54:9d:aa:79:39:e9:e8:1c:8d:2a:08:24:48:1a:91:35:c6:
46:d2:0a:a9:67:69:c2:92:81:bc:23:62:ed:0c:3c:49:b9:fa:
4b:ac:0a:65:d3:b4:9b:93:dc:b9:92:d0:0e:dd:b9:45:94:87:
6e:7a:2b:21:03:48:55:a3:83:df:d4:43:d2:41:55:9c:af:29:
e9:51:04:7e:e3:24:11:aa:a4:02:de:85:70:4d:d5:55:97:a2:
b8:d5:9f:cb:60:25:42:5a:c0:90:44:53:65:da:9c:d3:8a:98:
01:19:20:65:97:b6:37:ba:20:48:c1:da:03:3a:a5:2a:b1:20:
41:32:df:86:3e:d7:37:64:84:ee:68:41:9e:1a:ef:cb:ce:75:
2a:48:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:13 2026 by rpki-client