Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: 8W+XyNx1iZ0ha2Kii6hhEJXBL1EYCBeuxgCyShBZnZU=
Subject key identifier: 5F:BF:EE:DB:A8:A7:26:9A:D0:C0:98:A0:D7:E6:F8:88:AC:9F:1C:EE
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 019FA9AC51F54A08593C57BEA47C98F0AA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0DBF
Signing time: Tue 28 Jul 2026 17:01:10 +0000
Manifest this update: Tue 28 Jul 2026 17:01:10 +0000
Manifest next update: Wed 29 Jul 2026 17:01:10 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: OUKBsnJilNWvcPuDRJAqRG8EnirCeOy8gVRvLkaWTmM=)
2: j_t_jFAta10RI31T6FonCloC3D4.asa (hash: Omact/OG1Vjza6tNA6dIAQIik0sg+Ex+j9k7Zm7x4yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:51:f5:4a:08:59:3c:57:be:a4:7c:98:f0:aa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Jul 28 17:01:10 2026 GMT
Not After : Jul 29 17:01:10 2026 GMT
Subject: CN=5fbfeedba8a7269ad0c098a0d7e6f888ac9f1cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:84:44:bc:5f:24:94:85:6f:d6:db:5b:ec:
a5:16:b2:60:30:3c:af:43:71:b2:e9:73:8d:bb:bb:
7c:cc:2f:2c:81:17:5e:75:8d:ea:a5:c4:f8:a1:ce:
99:71:ac:19:c8:fe:92:49:0d:42:ec:08:88:71:73:
50:70:37:a8:59:67:45:ab:61:bb:91:65:5f:fc:4d:
ea:86:34:13:be:0b:5f:ec:66:d4:b1:2a:9a:33:43:
41:8d:57:5c:6b:ac:5f:d1:71:fa:9b:10:a5:4c:cd:
99:3e:17:33:5e:44:81:92:87:d7:6c:1c:d1:f5:8f:
c6:44:e1:a9:cd:b1:61:83:91:a8:c4:c7:95:2f:b8:
be:a8:8b:8e:39:f6:28:b4:93:90:29:4f:ca:ca:00:
63:c0:6a:d6:5b:51:68:4d:38:a2:c5:eb:32:42:6d:
66:28:d1:a9:18:5e:47:39:d1:d4:97:f1:88:b1:0b:
a8:67:e5:cb:a4:13:17:a6:75:1e:6f:55:b0:af:7b:
6f:95:44:76:bf:aa:a2:4d:73:43:62:44:ae:9e:36:
56:9d:1e:eb:e4:3a:4a:ad:53:53:f0:e1:20:7e:93:
8e:8a:ad:b3:e3:3a:d8:a6:e9:4d:63:c3:50:89:1f:
e5:15:14:8e:dd:df:0d:f6:3c:ea:f2:c7:e7:1a:d9:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BF:EE:DB:A8:A7:26:9A:D0:C0:98:A0:D7:E6:F8:88:AC:9F:1C:EE
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:13:de:e2:8b:5e:ad:6b:b6:8e:64:fa:32:dc:a7:f7:a6:
36:7e:78:05:f6:84:1e:5a:5d:eb:2e:66:a6:42:12:72:ea:21:
1d:2f:c2:83:e0:35:29:03:46:cf:d9:eb:d5:24:17:a0:78:94:
4d:a0:f0:f9:6d:4a:bb:21:71:52:bf:7b:21:d4:5e:79:8c:85:
81:f4:69:45:73:f7:b7:00:54:7a:3d:b6:c6:01:1c:39:90:08:
ce:ec:0f:9a:73:f2:fb:12:49:0c:fc:6a:76:bb:53:59:2b:2a:
85:22:7e:db:d8:4d:31:68:ad:92:21:7c:31:4a:b6:c5:67:ed:
52:85:c7:64:12:d5:92:9f:cc:2f:a0:b1:f5:92:02:a0:eb:4e:
5d:a8:cd:87:97:e0:9a:f2:2f:fa:09:d5:c0:7c:fa:4d:25:3d:
4c:cc:58:1e:52:3a:c2:f3:00:17:d5:76:ac:d8:d8:9f:a0:ce:
22:03:24:a9:29:ac:6f:78:46:04:bc:37:4f:70:09:9e:e5:0d:
a3:30:de:c4:7d:18:a0:1d:18:f1:84:df:4c:fa:9a:82:d8:22:
63:7d:52:e6:02:aa:2c:3b:82:1b:40:85:9d:e0:f1:5b:89:ea:
23:2e:50:3e:e2:62:a1:3c:65:ae:fb:50:c8:5d:75:c2:05:a3:
13:fd:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:17 2026 by rpki-client