Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: O+0y+wnAXk7jr9oATyXxZZltFt5w07dP9GQTnzTRljs=
Subject key identifier: 95:AB:34:56:7F:0F:99:48:BE:3C:DF:7C:19:0C:CC:04:92:EC:7A:A7
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 019FAA50F820CC15D65A464EB29D00B00EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: 0178
Signing time: Tue 28 Jul 2026 20:01:00 +0000
Manifest this update: Tue 28 Jul 2026 20:01:00 +0000
Manifest next update: Wed 29 Jul 2026 20:01:00 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: M7u14LUBWQutx9l9wP9Ww4hJ06lxqb3jWouJREx5OhE=)
2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:f8:20:cc:15:d6:5a:46:4e:b2:9d:00:b0:0e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Jul 28 20:01:00 2026 GMT
Not After : Jul 29 20:01:00 2026 GMT
Subject: CN=95ab34567f0f9948be3cdf7c190ccc0492ec7aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:17:66:c1:7c:26:37:3a:e2:74:06:11:58:
8b:a3:69:94:5d:4c:9d:c5:e9:d4:90:ff:ab:ad:62:
a3:11:5c:d9:ca:3c:49:4e:1c:9c:8f:e8:06:3b:dc:
ae:11:80:3c:31:fd:be:a1:c7:59:37:18:86:e1:97:
95:9d:86:af:19:7f:c7:ea:1e:69:ee:b1:30:f1:3d:
a3:9c:6c:22:26:d1:29:c6:0a:27:3e:18:71:52:26:
6a:6f:cf:b6:e3:4f:0c:2b:95:aa:b0:aa:73:bf:5b:
e8:9e:aa:98:cc:67:33:fc:f9:65:d8:da:b6:84:55:
9a:1d:ea:d2:d2:a3:39:1d:ea:fc:ab:5a:3b:05:f0:
30:87:22:e1:82:53:b0:60:4e:b7:4b:1c:7f:71:5a:
dd:1d:f0:76:41:c8:9d:9d:be:17:5c:78:d5:f0:82:
72:e3:bc:2f:4a:cd:ff:5c:ed:eb:72:80:09:35:46:
56:a1:66:c5:51:9d:bf:f0:d7:53:2a:61:93:36:27:
46:0a:0c:39:17:87:36:2e:5a:6e:3c:c1:f4:15:e7:
fc:b2:b2:bc:01:ac:45:45:92:43:20:e6:22:8c:ee:
1d:a3:b3:39:19:7c:2e:f0:7e:b2:da:da:8e:a6:fe:
7c:6d:2d:2e:7f:dc:d6:04:9f:3f:a5:9a:5d:87:4d:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AB:34:56:7F:0F:99:48:BE:3C:DF:7C:19:0C:CC:04:92:EC:7A:A7
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:68:83:c0:84:0d:28:8f:e2:fa:44:75:cd:2e:d0:f7:67:52:
95:15:f2:46:cb:f2:43:e1:87:c6:b7:92:a3:89:5e:62:3b:fb:
f9:01:27:1b:0e:d0:b7:6c:b0:bb:f8:c9:d5:81:9e:67:87:66:
e7:17:05:84:1f:7e:fe:6d:0d:f8:4d:88:7a:ce:82:d5:f4:74:
0c:81:a0:28:2c:16:5c:9f:3a:fb:00:8b:9f:03:ff:7d:1b:e9:
c5:dc:af:95:22:30:60:d5:95:ea:bf:df:ea:be:c4:f5:e2:30:
2a:35:d8:d0:a7:d9:55:5f:80:fc:0f:cc:fc:03:a2:a0:32:e1:
f2:cf:14:59:84:85:ee:c0:5b:77:1f:10:40:84:df:3f:11:06:
bb:76:50:a2:a9:36:f8:eb:ed:07:f4:b1:78:be:63:10:21:1c:
ca:0d:0a:26:ba:10:f7:27:9f:bd:38:88:40:63:f3:a7:59:fb:
e0:6f:0d:2b:d8:e2:d4:9f:bd:80:90:8f:ef:89:e9:05:42:96:
92:ef:b9:72:2e:4a:e7:0b:0d:c0:51:67:cd:80:74:38:6d:9f:
47:9e:a4:e3:86:aa:21:27:f3:94:a9:31:e5:c3:4c:ca:b4:4a:
f6:e9:2d:e5:37:a0:8a:1e:e3:81:e1:e9:b3:88:44:ac:b1:9d:
c6:3b:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:09:57 2026 by rpki-client