Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: oJnlczrJDSclpTR/goeJsoS5kVcjePxHkMczVHxsNiI=
Subject key identifier: 14:82:DC:42:38:D3:AA:15:31:29:09:49:99:B1:99:2D:DF:45:ED:E1
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 019FA8D05CF01271E64CB44DA4FC4947D33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 13:00:55 +0000
Manifest this update: Tue 28 Jul 2026 13:00:55 +0000
Manifest next update: Wed 29 Jul 2026 13:00:55 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: aK4tgQ1R2DJTg/5Jjl0lRuoQ0zRKr96AELwPkfQQIFE=)
2: D3RzDDZgPLG3UCsxVx6Q8ZzLm1I.roa (hash: kVx9KqwTwAznM+coaQfniQbA9ErAhmA+cdao1OKFFKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:5c:f0:12:71:e6:4c:b4:4d:a4:fc:49:47:d3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Jul 28 13:00:55 2026 GMT
Not After : Jul 29 13:00:55 2026 GMT
Subject: CN=1482dc4238d3aa153129094999b1992ddf45ede1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:fd:c0:3f:6e:97:b1:2d:07:c1:d7:95:6d:
0a:1e:36:8d:0e:d7:a0:be:80:cd:ec:14:c3:de:7e:
7a:95:5c:29:b0:3d:c1:fc:d2:0b:15:07:85:25:67:
6e:f2:50:77:12:06:63:ce:b0:54:84:9a:3e:72:e1:
63:ac:42:a1:42:a1:61:04:1e:08:f0:c4:b4:6a:c5:
c0:ed:38:10:85:74:b1:c0:69:50:18:8b:ef:6b:bc:
84:03:08:b1:3c:3c:b6:fb:b5:f6:89:ec:cb:b1:4f:
a6:51:8c:9d:34:fb:7f:ef:e2:3c:7d:3f:8d:8f:8b:
bb:01:27:78:99:f3:d2:b0:2d:ab:f3:d7:73:fe:8f:
e7:fd:ac:5b:1a:e8:44:4b:49:1d:14:99:74:a7:9a:
89:b2:00:eb:19:36:5d:ef:65:9d:fc:20:ae:fc:5d:
8b:90:72:39:3c:73:b7:cf:66:16:26:69:5b:5b:91:
3e:40:5d:7b:3b:b3:03:45:dd:8c:76:1f:ca:53:b9:
5d:ed:cb:d3:4e:4b:8e:99:39:8f:c3:4d:24:c9:67:
00:90:00:4e:4e:cd:34:c1:f0:22:28:f3:3e:a4:cd:
f3:67:70:2d:3c:7f:28:6b:8c:41:6f:9c:24:19:99:
31:2f:b2:3a:9e:5f:b5:f1:1f:dd:44:51:67:18:34:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:82:DC:42:38:D3:AA:15:31:29:09:49:99:B1:99:2D:DF:45:ED:E1
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:02:c9:0c:9c:15:36:21:cb:13:45:0c:53:ef:c3:3b:bd:f4:
64:c3:f7:3a:ef:7b:b6:16:86:0e:7a:11:8f:c4:b0:f1:51:05:
9d:d3:b5:79:6f:32:84:9a:17:87:31:bd:af:fd:88:86:10:63:
bc:16:37:f1:3a:8f:e1:39:b8:43:a1:f0:7d:b5:57:5d:e9:f1:
52:7a:7b:17:b4:9c:8d:f0:87:74:61:dd:eb:5c:82:b0:d2:b7:
89:59:cd:5e:6e:1f:1d:9e:9b:29:75:ea:76:12:95:ea:23:36:
e6:43:7d:c4:d0:14:b3:52:e7:0e:d3:bb:f2:46:58:a1:bc:79:
23:87:3b:0f:4f:6e:7c:73:25:07:07:03:2b:4d:8e:42:a5:1a:
86:35:e8:c2:0f:53:f1:f0:c6:48:39:4e:7e:64:d0:35:3a:87:
60:eb:3b:a0:33:95:a5:a4:3f:48:17:1f:79:10:26:cb:4a:0f:
ae:0b:12:a7:9e:31:5b:68:70:b5:73:be:d9:b5:0d:67:64:ad:
9a:99:91:af:7a:de:46:f6:74:13:69:18:fe:32:13:8f:2f:a8:
bf:f4:1e:df:6d:8a:e3:31:90:68:bb:18:c6:6b:7a:5c:94:81:
31:70:dd:f6:29:4e:ef:11:97:cc:23:9e:03:b4:b3:78:05:f0:
a4:70:49:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:55 2026 by rpki-client