Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: 9i7R2CCPTa7L2dNxsz1HZjvxteLAhNfJ2DNydTFPXZo=
Subject key identifier: 11:F4:86:AF:D4:71:A2:EA:77:B0:A1:74:F2:A8:3B:C5:EA:05:FC:A8
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 019FAAF5FED2AA217BA6597709D710B6335B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 1436
Signing time: Tue 28 Jul 2026 23:01:15 +0000
Manifest this update: Tue 28 Jul 2026 23:01:15 +0000
Manifest next update: Wed 29 Jul 2026 23:01:15 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: FHTDHq4+yP+hQihrC+i1jvEd5iqeX0s/WMlplYavuSw=)
2: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (hash: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:fe:d2:aa:21:7b:a6:59:77:09:d7:10:b6:33:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Jul 28 23:01:15 2026 GMT
Not After : Jul 29 23:01:15 2026 GMT
Subject: CN=11f486afd471a2ea77b0a174f2a83bc5ea05fca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:5a:ac:07:fb:ff:02:bd:de:7d:07:80:27:
97:cd:74:5a:8d:5c:ae:38:44:cb:a5:79:21:bb:5f:
cb:d1:63:a3:f3:65:4e:71:3c:75:e8:39:e0:f3:39:
50:5f:7b:aa:ee:14:7a:ac:c2:f5:3c:6d:a9:26:98:
c1:6a:d5:ba:56:6a:07:86:4a:6d:35:e5:14:73:93:
8f:e9:2a:80:b7:fe:c4:a2:c2:c4:92:72:9e:27:9a:
f8:5a:19:23:1c:2b:1f:31:a7:83:5c:94:23:01:2c:
e3:59:18:86:6e:52:9c:d7:5e:42:8c:25:bf:cf:48:
ea:67:4b:e8:e1:a9:ea:29:f3:6c:84:c7:df:ac:6a:
e9:59:9f:5c:37:72:1f:20:0c:96:e0:16:ac:bf:c5:
87:eb:54:51:0e:12:b0:a6:13:1c:42:04:b2:04:84:
f4:a4:0b:be:26:91:35:67:0f:f3:4a:0c:90:28:a0:
18:31:ce:33:f1:fa:d9:15:58:d8:c6:d0:fa:f8:31:
15:01:7d:95:83:41:03:cd:4c:38:40:ff:b4:ca:b1:
a6:ad:e8:ac:9b:4b:74:49:ca:3e:ec:bb:2b:0e:a0:
a6:1f:1f:47:54:c4:9e:81:4f:c8:2b:5e:a1:e5:fc:
cb:9b:b6:96:22:bf:f8:03:ce:62:5b:9b:80:83:a8:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F4:86:AF:D4:71:A2:EA:77:B0:A1:74:F2:A8:3B:C5:EA:05:FC:A8
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9c:c7:f3:a9:2f:0b:f3:59:0e:ad:4e:e5:d0:ec:b5:78:aa:
49:d4:4b:b8:0b:e6:1c:5c:25:a3:f4:37:97:3e:50:94:d6:b9:
e9:04:15:d9:e4:3a:3c:5c:6a:98:2b:8a:83:79:f2:bc:46:32:
2d:2f:73:9a:c0:27:23:4b:81:2e:da:66:bf:8f:5b:a7:87:75:
55:39:54:e9:91:f0:ba:c8:4d:eb:fa:2b:d7:04:19:85:89:e2:
97:eb:fe:33:89:fd:22:08:9c:51:8f:68:34:f8:62:7d:f7:42:
83:99:6e:34:28:83:9f:e5:d2:d1:04:fa:49:bc:f6:b9:7d:30:
e7:eb:c9:ee:c2:c6:6b:6e:24:9c:f7:35:e5:8f:86:9a:0b:a6:
03:26:32:bd:9e:23:58:dc:fd:59:fe:0c:5b:74:37:8d:ea:a9:
7e:05:82:a9:2c:20:b8:cd:71:8c:d4:b2:ca:00:74:94:8d:42:
f8:66:d0:c4:74:a4:dd:a7:de:b9:51:97:e9:63:ea:b1:eb:5e:
c0:0d:c5:5a:26:a9:1d:64:47:91:b4:fa:12:95:b6:1f:4b:a2:
6b:47:68:cb:f1:81:ee:8f:6b:7d:95:a1:bc:3f:e6:a9:77:b1:
ac:1a:bf:45:d6:fc:e7:80:e9:89:b4:9b:2f:fb:b0:4f:f3:9d:
70:47:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:21:44 2026 by rpki-client