Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
File: x1es7dSIRbnr0Muqfb2ri8z9jWE.mft (raw, json)
Hash identifier: /GTmOyksOj9bcGv3x4A2wCDhfoOXP11asJ6UmCgFQeg=
Subject key identifier: E2:55:AF:B1:44:B8:BC:47:44:A5:A1:37:A0:22:DA:CD:AC:48:89:9A
Authority key identifier: C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
Certificate issuer: /CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Certificate serial: 019FAC759C7B929F13A1DA3A5ABD5BA42162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:16 +0000
Manifest this update: Wed 29 Jul 2026 06:00:16 +0000
Manifest next update: Thu 30 Jul 2026 06:00:16 +0000
Files and hashes: 1: 1-Urp8rAL1ZSmlkxaPOzl5pj6sR8.roa (hash: eq+9SCGsso6J0nmlRfLYKk2u+tOTbol21TaNCHcqDic=)
2: YBBatb3zVPdSOcJ9MpSHMK867-k.roa (hash: IlKGC7X7khejWn4GInerZOXh0TDt6Gd+xhqLmW0TfU4=)
3: x1es7dSIRbnr0Muqfb2ri8z9jWE.crl (hash: WtmgnGOKNnF4Fnsd2yU9SDP4C36YQjCVK+AcJJOFhus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:9c:7b:92:9f:13:a1:da:3a:5a:bd:5b:a4:21:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c757acedd48845b9ebd0cbaa7dbdab8bccfd8d61
Validity
Not Before: Jul 29 06:00:16 2026 GMT
Not After : Jul 30 06:00:16 2026 GMT
Subject: CN=e255afb144b8bc4744a5a137a022dacdac48899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:7e:73:0c:b9:d2:c4:06:bd:95:d4:de:cd:
7f:a1:db:88:0d:0e:b2:34:42:7b:2c:47:20:21:56:
83:be:0a:42:1e:3e:7b:1f:08:e6:cd:ca:70:ee:43:
2a:d0:b9:9c:b5:0e:4a:b4:d7:9f:4c:ec:f2:ac:74:
ed:da:b8:9f:a3:80:db:aa:51:87:ec:d3:8a:53:f1:
99:1a:b6:81:de:75:f3:85:21:8f:c6:9b:59:9d:93:
ee:95:59:d7:d9:69:69:93:04:74:ad:51:4c:5e:6a:
b9:32:53:c1:a9:0c:da:f9:19:46:c2:86:05:7b:c8:
aa:e8:be:13:b3:36:94:2f:95:44:16:68:18:2d:af:
ab:94:c8:9a:18:86:48:67:e0:6e:cf:71:e2:36:ab:
d4:64:79:db:e0:0d:7a:21:d9:8f:5a:c5:38:06:43:
50:58:45:53:97:78:fa:45:be:13:5b:cc:09:51:ff:
79:84:7d:b7:4a:04:00:54:3a:8f:9f:28:66:ad:c4:
0b:70:7d:5d:23:1c:76:56:a5:71:df:cb:bb:94:49:
99:76:f3:8b:2e:b3:b8:10:1c:5a:91:76:78:5f:17:
91:2d:1a:78:b9:e6:18:87:ab:8a:6c:9e:a4:a9:15:
1e:4b:d5:e6:13:ff:3f:37:39:68:9c:7f:b7:87:fe:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:55:AF:B1:44:B8:BC:47:44:A5:A1:37:A0:22:DA:CD:AC:48:89:9A
X509v3 Authority Key Identifier:
keyid:C7:57:AC:ED:D4:88:45:B9:EB:D0:CB:AA:7D:BD:AB:8B:CC:FD:8D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1es7dSIRbnr0Muqfb2ri8z9jWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/x1es7dSIRbnr0Muqfb2ri8z9jWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ca:e5:72:65:3f:36:7d:c9:19:19:5e:2b:c9:46:fd:a0:fe:
4e:97:df:26:39:39:e1:ed:68:14:32:2c:83:97:b2:4d:0d:66:
90:eb:c5:6c:e7:a2:0d:c0:4a:c2:96:84:fc:b1:53:fa:84:78:
15:4f:1a:0b:05:d0:45:0b:54:30:c2:fd:bd:ba:95:9c:d5:76:
bb:2a:5f:65:54:50:9d:3f:0e:71:06:24:0f:f9:8d:d2:c5:8d:
95:6f:2c:c3:3f:0a:61:3c:fd:0e:a3:0d:4c:50:20:f0:82:18:
5c:1f:f4:5d:fa:e3:10:d7:03:73:70:1b:d6:ab:b2:be:5d:c9:
aa:28:fc:84:58:0e:eb:28:96:04:02:e0:ae:a6:2e:0b:74:5b:
0a:14:2a:4c:22:1e:09:e4:06:37:2e:d7:ed:0f:3b:78:7c:1f:
85:8e:e3:4b:35:7e:7e:77:73:4b:59:69:74:17:ef:b5:7e:85:
c0:db:1a:17:65:57:33:e4:74:f4:86:56:68:55:48:1f:c7:18:
fa:68:48:4b:f9:06:fb:89:84:ca:76:64:a0:31:33:a9:ef:91:
7c:5c:53:7f:42:90:50:88:5a:78:c6:9d:ca:1a:80:f5:75:85:
60:0c:3d:3b:36:17:96:42:40:90:f2:a3:67:fd:eb:0b:62:f9:
e2:e7:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:36:54 2026 by rpki-client