Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: zZDaFKlHc5HHtyhEKl/qQlAVd4/puuu6dove96bcrfo=
Subject key identifier: 38:9D:77:81:9E:17:23:39:18:BB:C9:E3:97:51:23:94:AA:3B:E2:CD
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 019FA9E2E4ACA95B247251C66388AD21FB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 0611
Signing time: Tue 28 Jul 2026 18:00:46 +0000
Manifest this update: Tue 28 Jul 2026 18:00:46 +0000
Manifest next update: Wed 29 Jul 2026 18:00:46 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: CfjCH885v2yCgsr3C3yUHEAwp4kl5GCJTIBxZqCKCa0=)
2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e4:ac:a9:5b:24:72:51:c6:63:88:ad:21:fb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Jul 28 18:00:46 2026 GMT
Not After : Jul 29 18:00:46 2026 GMT
Subject: CN=389d77819e17233918bbc9e397512394aa3be2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:d5:56:44:1f:8c:ff:84:01:48:e2:75:5c:
d4:c7:ea:96:ff:42:02:73:f5:94:ab:2c:c2:32:f7:
f6:24:da:bc:5f:aa:ac:c6:d6:a6:87:8b:2a:25:93:
71:c0:10:76:be:93:5d:0d:90:8e:45:01:20:1b:cc:
b6:eb:3b:9a:91:9d:20:71:8b:6d:9a:fd:42:8e:94:
d9:29:27:19:b0:50:e9:23:df:ac:72:40:0b:07:4d:
56:83:38:ad:59:f1:0d:72:48:f4:f5:a3:24:56:61:
47:73:f6:4c:11:b3:3b:86:e0:f3:26:c6:9b:56:c6:
55:1b:35:94:d4:27:62:f0:1a:eb:22:19:21:10:40:
bc:4e:b2:69:7c:cc:e7:99:d0:ae:81:ad:a8:f3:dc:
95:cf:5a:f2:5a:99:53:71:0d:89:09:35:65:19:80:
79:7d:86:59:a6:67:87:49:26:31:c5:a3:66:3f:fe:
de:9b:97:c6:09:21:b2:02:b8:b0:bb:1c:22:5b:a1:
a1:85:f5:65:51:30:57:3e:c1:69:e4:4b:29:f0:50:
09:77:39:3e:ca:3f:9e:73:de:ff:e2:4d:40:a9:03:
4f:e1:3a:3f:c7:d0:db:3d:4e:e8:d8:2f:0d:46:60:
e3:11:d2:8c:94:11:29:4a:a8:d9:47:ca:bb:96:97:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:77:81:9E:17:23:39:18:BB:C9:E3:97:51:23:94:AA:3B:E2:CD
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f8:6e:48:b6:36:76:3c:98:56:c4:4e:89:54:46:f5:e8:a2:
0c:4c:80:e6:e1:ad:bc:34:36:d5:63:7c:1b:65:20:cf:e8:34:
7a:0d:c1:fc:1a:2f:4e:5e:51:7a:1a:fd:ad:f0:c7:c2:d2:eb:
c3:b9:14:32:d4:e7:02:1e:07:f6:94:91:2b:21:61:46:c7:31:
f0:2f:e7:4c:01:93:b9:02:12:21:46:fc:6c:a5:50:bc:c2:33:
62:ee:3a:28:4e:fd:2f:d3:7a:3a:93:35:3b:6f:01:0f:c3:cc:
22:8d:8f:7f:b1:1c:e3:96:7f:4b:60:c4:46:06:e0:36:28:85:
7c:f4:24:6d:6c:f6:b7:9e:7f:3a:1e:bb:34:23:6b:91:bc:e2:
b6:c4:67:3c:38:e9:b2:92:8d:00:ca:d4:0d:27:82:be:75:6c:
b1:b2:63:d0:a1:65:bd:54:0a:2b:4a:27:44:d0:44:46:df:cb:
ed:e4:07:a6:eb:0f:df:44:26:07:21:03:13:90:3c:28:8f:9c:
92:f3:d3:75:3e:af:68:b3:83:7d:ba:e0:ee:ed:79:d4:1b:bd:
d1:63:5f:cd:3c:78:e1:b2:26:1b:d8:c4:50:fa:17:0b:7a:df:
80:6b:4c:12:e4:a0:06:cf:5d:a1:ea:97:46:2a:6d:78:5b:8b:
38:c3:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:10:49 2026 by rpki-client