Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: vSsnd2TjzB2O41tevFZoAAHu1Xc4OJgAlOJRNwzf5Sw=
Subject key identifier: 3B:E4:8D:5B:0E:4C:DF:1F:0F:88:F1:18:12:0D:74:91:E2:C6:DA:9F
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 019FA8994455EB2CB2D02DE7B26606E09DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 12:00:44 +0000
Manifest this update: Tue 28 Jul 2026 12:00:44 +0000
Manifest next update: Wed 29 Jul 2026 12:00:44 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: c9TE8tmFl/kYUErqlRZV4IijMpcGU6DgtJxCtLQ7gsc=)
2: GD22NDKlkAh5bp67GRvvW84yHsU.roa (hash: LtP9pMPZerVqZeqzrIl5QfQhM+bLwsaU/FGis7xu4Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:44:55:eb:2c:b2:d0:2d:e7:b2:66:06:e0:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Jul 28 12:00:44 2026 GMT
Not After : Jul 29 12:00:44 2026 GMT
Subject: CN=3be48d5b0e4cdf1f0f88f118120d7491e2c6da9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:86:29:a0:31:f4:c1:68:de:b3:90:cf:1b:
b7:15:89:6c:af:18:71:03:1f:86:dd:b3:26:9a:cc:
cf:dd:c0:d7:48:a1:be:de:78:17:49:b4:55:ae:ef:
7a:72:df:88:86:fb:d3:46:34:68:b3:d9:e4:24:04:
46:c6:6f:25:0c:1a:b5:8e:31:44:91:74:55:35:14:
19:c3:11:1b:26:e7:98:31:d8:64:0b:3e:d8:f9:38:
6a:93:43:15:26:4d:ad:ec:af:31:ed:7b:37:9c:aa:
b0:8c:1b:b8:94:c2:5f:c0:3b:ed:ce:1b:8a:64:a3:
e3:b4:45:e5:7d:a5:98:32:0e:ee:16:e3:9b:43:21:
05:fc:b8:9d:52:9f:27:c0:fe:4a:33:e2:5d:b7:51:
b9:a1:f5:a8:43:31:0a:26:ec:23:08:55:90:86:80:
da:0b:63:28:29:66:dc:76:88:ef:78:91:2b:27:a2:
a0:1c:8f:be:9d:01:10:11:b1:e7:1f:c5:67:89:a0:
1b:76:b5:03:39:c7:01:08:60:61:64:12:2e:36:71:
ea:10:63:1a:47:82:88:d1:6e:dc:91:97:1c:bc:ed:
f2:05:20:5b:e9:72:22:6f:1a:f0:2c:cd:ba:4a:fc:
f5:28:b5:b4:3f:6c:ea:d4:23:ae:fa:93:99:9e:b4:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E4:8D:5B:0E:4C:DF:1F:0F:88:F1:18:12:0D:74:91:E2:C6:DA:9F
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:04:34:9f:fd:91:38:1a:93:bb:72:2a:42:6d:d8:7b:be:86:
ec:48:00:cc:fa:3b:63:4e:91:1c:64:ec:58:ab:f5:f0:b6:03:
8b:bf:a0:e5:aa:93:0e:5e:87:15:6d:dc:32:e1:c2:12:86:2b:
0b:48:5f:d0:bc:e0:93:67:f0:e3:86:93:16:8c:0d:aa:8f:57:
a6:3f:3c:c8:e2:6b:bb:b9:ed:d7:10:2d:02:d8:51:5e:e6:1e:
6c:1d:35:6b:15:7f:98:c9:89:1f:8e:6d:29:1e:d6:02:cb:c4:
63:5c:36:21:06:cb:77:d9:90:cc:e0:e6:b0:b8:6e:2b:fd:77:
83:a2:50:62:a0:a5:3d:41:f8:17:2c:ff:6e:f9:c5:c4:99:2f:
a6:fe:97:2e:78:55:d8:a6:62:e1:92:53:a6:5d:bf:f9:ef:1a:
0f:b6:3a:0a:5a:92:3e:3f:49:59:58:66:c4:cf:00:31:1c:c6:
10:5f:d3:a0:84:e2:d1:58:19:bb:09:5a:77:64:94:57:73:5a:
c2:1e:a8:1e:c5:3a:09:ef:e9:9e:3a:b8:b7:85:8f:6b:75:ac:
0a:9b:69:6a:28:5c:15:7f:71:ea:5e:ef:f5:db:c2:44:e4:a3:
4c:f4:90:17:a2:9d:c1:4d:52:f3:fe:b0:9d:fe:56:e1:50:d9:
6a:f2:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:34 2026 by rpki-client