Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: Uj+C7BfXupE0bpanwORnsOnRzfDP2m0j6BVtCQvCD64=
Subject key identifier: 93:F5:F5:EA:95:DD:D5:41:7C:53:B9:C3:54:3C:DF:36:5A:93:D7:B7
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 019FABD0D46AF2C484B79FC3E6F6E7F41E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 03:00:17 +0000
Manifest this update: Wed 29 Jul 2026 03:00:17 +0000
Manifest next update: Thu 30 Jul 2026 03:00:17 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: GFg4D63ZjWbxpRqET1cCD7n+7MnIaz+AllHUMB/ItAw=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d0:d4:6a:f2:c4:84:b7:9f:c3:e6:f6:e7:f4:1e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Jul 29 03:00:17 2026 GMT
Not After : Jul 30 03:00:17 2026 GMT
Subject: CN=93f5f5ea95ddd5417c53b9c3543cdf365a93d7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:51:f0:a0:21:0c:d7:2d:70:4a:56:c4:cf:
a2:52:a8:33:b5:1c:64:0e:00:5f:c3:f0:a4:6d:32:
aa:4e:3a:ce:d0:05:14:ee:0f:ac:a1:b3:3a:58:d8:
9a:f6:4e:7b:5e:00:bd:9c:d0:1e:b7:6c:a2:0f:27:
07:7e:d3:ef:dd:c5:71:fa:e2:bb:3e:16:c2:f0:53:
f5:6b:e3:4c:d4:1b:17:d3:07:c0:6d:74:66:4b:c2:
60:29:de:6c:4e:3c:a1:fa:26:70:e1:4d:e2:83:95:
f1:fa:d6:34:ad:0a:ad:1d:5a:68:8e:11:e6:f4:8b:
57:18:c2:fc:a2:20:b3:87:d8:72:ba:cc:84:71:3d:
12:ff:09:12:f3:71:77:fb:75:2f:c3:cb:98:e9:68:
c0:a0:42:2f:c0:40:bf:80:33:97:f8:20:c4:90:14:
d8:6e:be:54:09:84:82:cd:96:b2:d5:7e:6f:13:9f:
0e:c8:18:83:1c:b2:83:f7:90:23:f5:05:f4:16:0e:
48:53:a1:a3:98:84:a6:17:85:65:ce:d3:a9:27:3f:
92:0d:d2:6e:fc:2e:a3:19:4e:85:c4:70:50:40:ec:
d4:00:89:c1:4d:b0:df:b1:bc:4a:3a:4c:e3:0d:65:
49:06:a2:4e:4f:58:fe:08:d0:12:6f:fd:df:04:f0:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F5:F5:EA:95:DD:D5:41:7C:53:B9:C3:54:3C:DF:36:5A:93:D7:B7
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:35:2e:f4:81:8c:2e:b3:56:f1:8b:35:49:8b:03:c8:fc:11:
2b:bd:bb:76:20:e6:b6:1b:1c:4d:7f:b2:cd:70:39:83:f4:6f:
dc:53:12:f9:2e:a6:3a:68:83:e3:24:0d:2c:a4:ac:3c:43:f3:
6b:db:48:d0:51:45:78:d4:48:49:5b:69:0f:3e:a0:ff:13:32:
64:f4:02:75:4f:2a:0b:3b:fd:c9:3e:c8:e0:3a:95:de:1b:a2:
0b:bd:2f:51:a5:24:d7:cd:19:96:42:1c:c9:82:72:1d:79:98:
24:14:cc:7c:98:0b:6e:24:cf:15:ec:53:31:c9:26:4e:06:bd:
8f:17:cc:7a:fa:80:7c:e1:f6:04:c7:2b:18:d8:fc:f2:6b:d6:
95:bd:8e:d4:3a:ac:9a:ad:18:67:fd:3e:72:b8:08:85:9f:c1:
03:c7:b4:a2:b4:ae:0b:67:ec:65:3d:85:ff:35:ff:eb:a5:20:
0f:36:5a:e4:39:10:69:d1:85:33:d9:15:86:b9:1f:f5:b1:8c:
4c:cc:b7:f6:c7:ce:76:29:d3:1f:99:3e:ff:9c:a2:7c:1c:24:
d4:6e:02:0d:84:ab:07:70:d6:51:5e:eb:63:3b:be:d9:74:4e:
78:e0:7e:a7:a9:8d:a7:fc:46:94:b1:86:8d:86:b5:ec:77:b5:
34:c4:cb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:53:15 2026 by rpki-client