Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: D3zxECJbBjA0FpeVM8gqh09SSGPjJfv3voLZvf68mtI=
Subject key identifier: EE:CA:8C:83:86:F4:BB:37:F8:EE:84:6D:78:03:69:C4:7A:43:83:75
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019FAAF623040C54AFC4B565067850C6DC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 02FF
Signing time: Tue 28 Jul 2026 23:01:25 +0000
Manifest this update: Tue 28 Jul 2026 23:01:25 +0000
Manifest next update: Wed 29 Jul 2026 23:01:25 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: +S8/AVW6pi6VcGXevzKOKysbXu+AdNNgaILhH58IMhE=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:23:04:0c:54:af:c4:b5:65:06:78:50:c6:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Jul 28 23:01:25 2026 GMT
Not After : Jul 29 23:01:25 2026 GMT
Subject: CN=eeca8c8386f4bb37f8ee846d780369c47a438375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:ba:39:4f:d7:e0:3e:c6:34:2a:20:a8:1e:
94:b6:7f:91:15:e6:c0:05:97:ba:10:5b:47:a4:c1:
90:da:c4:c1:c1:3c:81:04:2f:3d:20:11:ac:99:e5:
7a:a8:2e:29:ab:5f:9e:91:9b:96:e7:eb:35:aa:79:
30:3a:0d:26:5e:70:89:18:80:9a:c0:3f:78:66:71:
b3:80:e3:d8:b8:f5:b0:e7:05:fa:a3:87:d2:6d:9c:
d6:dc:68:a5:ab:8b:32:1e:7a:9d:69:cb:02:ee:d6:
96:9d:b0:93:88:1c:30:4a:3d:24:59:e0:3a:0d:5b:
01:2a:10:ff:ab:6b:f2:75:2a:3a:6a:24:96:4c:11:
f3:d5:77:e7:ae:b4:a6:cc:21:d6:49:54:cf:96:94:
75:51:29:d2:fe:c3:bd:b3:42:73:a8:17:82:cb:1f:
f7:7d:ac:e6:b5:14:1a:3c:cc:67:0e:fb:9c:54:fd:
aa:f5:de:45:dc:3d:16:ad:9a:14:9a:d6:d2:7a:32:
e4:54:4b:c4:28:0e:59:dc:24:3d:fb:81:28:47:6d:
ce:6e:17:35:2f:d0:a4:9f:03:de:98:55:e8:c1:57:
07:a3:c5:6a:ca:19:05:3f:e5:d3:79:cb:3d:41:15:
85:38:1e:90:b0:06:57:9e:7d:b0:f7:ae:83:04:0c:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CA:8C:83:86:F4:BB:37:F8:EE:84:6D:78:03:69:C4:7A:43:83:75
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e1:7e:63:ac:7c:4e:3f:f8:17:b5:0b:df:60:fb:ad:62:a8:
d1:23:08:3e:d4:5a:22:91:05:8f:d1:a0:77:b9:3b:0b:39:5b:
f0:ce:c4:82:1f:c0:34:73:9c:cc:9a:68:b8:09:65:01:c2:a7:
56:9b:43:25:f4:3c:5f:fe:a7:39:79:89:12:04:01:4b:36:65:
91:77:b1:14:b6:08:ad:e8:f3:ec:a9:40:c7:58:5e:7c:b9:30:
c6:7f:4f:3f:68:d4:90:b2:04:07:39:4a:47:6d:e1:74:26:cf:
81:d2:b9:e9:39:1e:1e:d0:c3:b7:38:9d:48:6a:a0:bc:09:c5:
d0:d5:ca:fb:8e:66:4b:58:33:a8:93:99:62:bf:97:cc:72:f8:
a4:f2:c1:c9:b1:ee:4a:8d:0b:88:35:7d:e3:b4:d8:7a:dc:d2:
77:6c:4e:7f:8d:81:49:dd:44:66:70:a6:86:9b:c6:9c:d5:89:
6e:18:34:55:2b:86:74:34:92:77:bb:44:fe:fa:9e:9e:9c:28:
83:ea:db:68:9b:73:8d:bf:51:c6:51:0f:50:db:c8:b0:22:fa:
2d:a4:84:80:fe:5d:e2:92:49:12:94:6d:da:06:6d:0c:3c:8a:
15:38:76:83:91:af:15:81:ec:3d:5e:71:42:ec:6e:b8:b8:ac:
83:af:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:37:09 2026 by rpki-client