Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: CBruC2yTZKIX/r7Nt+EZlGetoRqJTY7dHcq0yao4gv8=
Subject key identifier: 42:4F:A9:78:A0:CE:1F:1E:8E:52:E8:AD:D2:7D:E0:6F:3E:5A:33:A0
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019FA907A14DDF54B85E8106DC6583B90FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 14:01:17 +0000
Manifest this update: Tue 28 Jul 2026 14:01:17 +0000
Manifest next update: Wed 29 Jul 2026 14:01:17 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: TzvUZmfgFU+PXryecv+HMO/JFN/qISb2O4tNS6nx4Ao=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:a1:4d:df:54:b8:5e:81:06:dc:65:83:b9:0f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Jul 28 14:01:17 2026 GMT
Not After : Jul 29 14:01:17 2026 GMT
Subject: CN=424fa978a0ce1f1e8e52e8add27de06f3e5a33a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:a6:da:db:1b:c1:ab:d8:39:ee:ba:34:bc:
c7:a5:49:4b:bb:a3:80:dd:ba:e8:60:2c:db:7a:05:
14:c9:26:02:ad:6e:45:a5:a0:49:3d:4c:7a:e6:0e:
49:48:13:53:2e:68:3b:1b:d1:e6:65:29:40:8a:ff:
39:41:07:47:68:1a:83:84:a4:ae:e9:b8:32:31:4e:
b4:7b:09:a9:7f:ed:bc:ce:91:07:9e:27:e3:68:73:
ac:0f:bb:19:bb:16:8a:2d:81:9b:fb:24:03:85:70:
81:a2:cc:56:2e:5b:74:e3:15:a2:f1:2a:f9:f5:4b:
23:fa:0b:a0:63:29:a8:ea:ca:e5:72:b6:b0:d3:aa:
0f:16:14:cd:1d:73:a5:1a:a6:12:45:70:a7:87:55:
ae:71:83:f7:c9:8e:8e:88:f9:21:4a:c7:01:54:dc:
80:89:ea:11:49:94:33:26:3b:47:fd:52:be:1d:e9:
17:18:df:c5:47:42:ea:34:e4:20:ff:75:78:dc:c4:
49:76:7e:a3:b7:a6:b8:1c:1d:1d:26:ab:9e:c3:1d:
af:6f:e3:7e:0d:6e:4a:32:da:25:db:16:0c:12:b7:
6b:56:bf:40:d8:5e:ce:1d:54:13:a3:77:59:9f:4b:
74:aa:ba:a5:cd:d4:c2:e6:c9:cd:8a:20:d7:10:bb:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4F:A9:78:A0:CE:1F:1E:8E:52:E8:AD:D2:7D:E0:6F:3E:5A:33:A0
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:c7:c0:01:01:c4:42:4f:d4:e8:d1:22:ae:79:a0:d8:5a:
bb:b5:9b:45:75:dd:7d:71:e4:f1:f1:95:4c:6d:1c:2d:16:c7:
68:cf:de:38:01:e2:f8:b3:38:35:45:13:74:10:d0:76:77:e6:
aa:06:06:83:69:18:d0:80:d4:ab:12:bc:20:16:f2:8b:24:14:
01:33:f3:ca:f5:8d:a1:4b:f7:2f:6e:71:61:2c:50:7c:78:b9:
32:be:ea:2e:e6:56:6a:eb:22:73:18:ad:27:3e:3e:57:d3:e3:
4d:07:0a:11:27:e8:63:0d:7c:0b:2c:5c:83:86:6b:5e:e6:bb:
3d:40:49:db:3e:41:2e:e0:82:bc:75:fe:17:6e:cc:7d:5b:84:
45:1a:9d:00:32:04:83:5d:1d:78:f3:18:38:a6:93:14:09:80:
74:bf:b5:b3:9f:b7:60:31:3c:aa:9f:42:1c:ca:ac:e7:0d:6b:
87:4f:6a:56:1e:f7:b1:7a:3f:66:10:38:b7:b5:fe:9f:10:d9:
9c:4c:df:96:14:77:21:db:f0:bf:50:fa:38:be:a8:78:d8:3d:
86:2c:c2:f7:38:34:48:b2:10:63:0e:8c:c2:8e:8e:44:7f:8d:
55:d6:93:7b:bb:6c:ed:34:d3:0a:c5:47:8f:a3:4b:77:10:fe:
97:a4:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:37 2026 by rpki-client