Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: 8E0NCxAkz7x1KeQp6GH6gtsHLYGxPuu9MlHietKFL+0=
Subject key identifier: 72:47:B9:9E:CC:84:E3:2F:E7:F0:A3:A4:2E:9C:A7:25:EB:4D:FB:9D
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019FA9ABA450DC2C7E603FD57C4CBAD7CD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 17:00:25 +0000
Manifest this update: Tue 28 Jul 2026 17:00:25 +0000
Manifest next update: Wed 29 Jul 2026 17:00:25 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: +9Ab2rR4Q3sA7oKqRqvU7k8aA8/71Op0kFkoFdQYHZc=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a4:50:dc:2c:7e:60:3f:d5:7c:4c:ba:d7:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Jul 28 17:00:25 2026 GMT
Not After : Jul 29 17:00:25 2026 GMT
Subject: CN=7247b99ecc84e32fe7f0a3a42e9ca725eb4dfb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:7b:55:e5:b1:1c:85:26:65:bb:9b:4d:9a:
30:97:a4:88:6d:e3:de:a9:5f:d8:24:60:52:ff:ea:
c5:ef:98:0d:00:82:44:df:27:bc:23:69:f0:be:f5:
ab:53:b0:ea:d8:cb:4a:26:28:a4:1e:c4:bf:b0:11:
9f:10:5b:de:10:45:51:0a:31:be:d6:ae:62:05:b2:
c3:fd:81:56:39:6e:54:0e:71:a6:51:2f:02:0c:ed:
74:e5:f4:ef:ac:5e:92:28:6b:87:25:ba:5c:38:cf:
bc:78:50:a2:c2:1e:e6:eb:41:c9:c8:a2:38:96:65:
11:9d:e0:0d:9c:86:f2:9f:c6:0d:f5:4c:43:cb:fe:
a8:29:91:6c:96:ae:b4:be:ae:7a:0a:35:ae:cb:03:
19:c9:9e:94:39:4b:03:07:d1:89:95:09:c9:a7:8b:
dc:2a:b9:9a:22:1f:17:77:15:74:51:8b:4a:da:9f:
16:16:b0:05:44:f1:4b:9e:ae:bd:ac:fc:ab:4c:e8:
5d:45:76:de:e8:8d:ed:79:4d:c4:5a:06:d1:62:05:
82:98:95:bf:75:1c:f1:88:17:ed:2e:18:d3:31:cd:
40:9d:e2:5a:cd:a0:7a:2b:ba:a1:70:53:be:49:dc:
5f:51:93:00:9b:82:01:02:0e:14:8a:27:6b:6f:d2:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:B9:9E:CC:84:E3:2F:E7:F0:A3:A4:2E:9C:A7:25:EB:4D:FB:9D
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:51:dd:cb:a9:dc:90:5d:d8:26:50:5c:63:58:c9:1e:63:9d:
2b:19:1f:bc:78:d4:bd:a4:bb:f1:7c:51:82:78:07:ea:34:bc:
54:e3:c7:6f:fa:28:01:4b:a5:7c:d9:38:62:ee:78:38:56:df:
b4:48:e4:a2:3e:88:a1:00:11:5a:c5:9f:fb:f7:50:bd:44:a6:
74:d3:c5:65:9f:73:ae:a9:e3:22:88:b4:ec:15:cf:71:45:1b:
00:a9:51:f6:e8:ce:58:d4:f3:c6:90:e6:6c:09:1b:fc:62:7d:
ad:9d:37:26:30:7f:58:96:0e:d6:ea:eb:12:bd:52:80:5a:b7:
4c:26:0b:68:33:f8:29:de:12:4f:a9:27:0b:12:4a:13:26:8f:
62:91:7b:c3:f0:2d:3e:c5:b0:46:ee:e6:7f:88:3f:4e:b1:61:
d9:10:3d:93:49:bc:96:25:3b:b3:ff:55:80:54:ee:5d:db:60:
15:e1:38:ab:a4:da:64:78:7c:94:02:15:02:0c:b4:18:18:cb:
3a:ea:35:2c:7b:79:cf:85:b7:c9:d7:07:61:89:76:9c:cb:ab:
8d:45:58:c2:26:21:4c:b2:7f:d8:b7:8d:a5:4d:41:a2:1d:f6:
96:18:72:80:0d:be:59:de:9b:6f:d9:c1:27:bd:cd:ce:ab:74:
ea:ec:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:56 2026 by rpki-client