Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: hBknDYiB1Vp3TZ8rdKowySYlA9gfh2oPJHKC2vcHgyE=
Subject key identifier: 54:32:21:FE:EB:24:98:5A:71:5A:67:74:9A:8D:2E:8B:C8:56:22:80
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 019FA9E29628ED9BCCD0008C3123F2161664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 18:00:26 +0000
Manifest this update: Tue 28 Jul 2026 18:00:26 +0000
Manifest next update: Wed 29 Jul 2026 18:00:26 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: gaX8m77gDq7kpV+Z+tJT9KKZUQfppYy+2N1dof+CcVA=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:96:28:ed:9b:cc:d0:00:8c:31:23:f2:16:16:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Jul 28 18:00:26 2026 GMT
Not After : Jul 29 18:00:26 2026 GMT
Subject: CN=543221feeb24985a715a67749a8d2e8bc8562280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:15:08:98:3e:55:a8:26:bd:8b:ba:8a:b5:
45:5b:ed:67:c9:b9:18:00:63:b4:6b:8d:90:7f:49:
46:20:c7:94:a2:2f:18:f8:c7:9f:1a:2f:f8:09:1f:
9d:cd:c5:c2:6c:fd:fc:74:b9:67:9a:58:10:8c:35:
e4:e8:06:16:46:32:31:1d:43:24:9f:c6:e6:5e:a0:
35:8a:5b:c9:e5:c9:cb:9b:5d:16:8b:a3:2a:1b:c5:
63:9c:98:b6:62:c1:a5:8d:08:61:39:d6:53:09:5f:
61:53:d5:a6:3b:d3:3b:fd:8f:c7:30:59:e3:a3:0b:
d2:82:4a:49:6e:fc:63:b2:55:b1:e6:0d:b4:7e:15:
7f:5f:0b:91:f8:19:53:47:18:0c:0c:5d:7e:5e:bd:
cb:2a:ba:82:82:56:bd:98:08:5e:72:0e:5b:af:e3:
0b:b6:c2:6d:4f:3e:8a:08:2f:5f:a1:0f:62:0d:d2:
5a:ac:99:95:6d:27:9e:de:a4:11:d4:52:b7:41:ae:
cc:89:9d:29:e6:91:63:87:91:98:51:f2:57:af:96:
7e:91:e5:9c:f9:65:d6:2d:77:22:2e:7b:72:56:76:
d9:f8:c3:bd:bb:b1:1f:b4:f1:07:9a:27:84:16:66:
9c:6b:3b:88:1b:7e:f5:14:c3:2d:9b:1a:e7:40:84:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:32:21:FE:EB:24:98:5A:71:5A:67:74:9A:8D:2E:8B:C8:56:22:80
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fe:fd:99:aa:fa:e9:39:9e:76:e0:2a:68:f0:e6:9d:da:7e:
77:de:18:a0:70:d4:91:14:e1:85:64:74:68:17:93:f8:97:ce:
2d:3a:60:9d:3d:33:a1:c1:e3:0a:3f:f5:51:bf:46:31:36:e0:
cf:06:ec:3e:03:85:8e:3d:50:1a:8c:78:8c:cc:1d:38:3b:7e:
0b:50:cb:89:77:d4:12:b8:c0:2b:d4:44:45:d1:dd:5c:e3:85:
6c:55:6c:72:06:45:a0:5d:47:a9:01:43:32:fc:0a:ff:b7:cd:
d9:f7:f0:35:fe:15:6d:2b:92:0f:fd:4d:05:0f:70:f5:5c:77:
63:85:ad:7b:38:90:47:58:d8:94:83:f3:b4:7b:90:94:b5:f0:
c0:f0:50:15:9d:a2:e2:33:a8:c0:0b:6f:4b:35:87:c6:7b:3c:
24:ab:06:da:bb:2a:5d:c7:cd:5d:ae:b2:ad:55:34:4d:ae:77:
8e:1c:13:0a:63:59:19:73:05:ef:c7:a5:ef:f7:2b:b6:2d:e5:
65:55:4e:b6:fd:d9:16:74:30:31:c4:1c:ee:5f:3e:c3:36:5a:
c8:76:ab:f6:75:f9:51:8c:81:c3:39:6f:f6:58:35:90:cf:1c:
12:12:3e:8e:72:01:84:66:7e:6e:68:23:e6:29:2c:2d:7e:5c:
1c:a7:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:34 2026 by rpki-client