Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: hveDLv+New+yO47cFc4/EOOcw4jG0sqNuB8uE73lCu4=
Subject key identifier: A6:73:A9:AD:36:69:01:CF:12:81:9E:22:83:77:95:6D:6E:D3:23:8C
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 019FAA19E852D433503F1DF833FDB466B34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 144D
Signing time: Tue 28 Jul 2026 19:00:52 +0000
Manifest this update: Tue 28 Jul 2026 19:00:52 +0000
Manifest next update: Wed 29 Jul 2026 19:00:52 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: xE7aBaQCx6L3JasAZLChdSCG0bHG3XjWnQjTTMdTVM4=)
2: maEv5ArPl0MhVYV7tQz9rkyTAIo.roa (hash: dBiLGOeBpvZw0H7gef9rbExfaEt6iLiJPLCEXhR/0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:e8:52:d4:33:50:3f:1d:f8:33:fd:b4:66:b3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Jul 28 19:00:52 2026 GMT
Not After : Jul 29 19:00:52 2026 GMT
Subject: CN=a673a9ad366901cf12819e228377956d6ed3238c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:ef:07:a2:02:72:c2:46:4a:60:d1:2a:2a:
6c:27:5b:16:d4:c7:73:9f:20:fc:df:0d:99:84:bd:
5f:9d:8c:14:c5:65:67:76:bf:0a:92:a0:77:22:e9:
a7:4f:e6:9e:f8:49:87:2d:3c:99:a5:21:a3:11:3f:
a2:e1:da:10:35:e7:49:68:bb:81:cf:e4:e9:c8:c4:
f6:00:b4:97:b8:04:f1:89:83:77:94:b5:08:d0:7b:
82:1d:45:b2:5f:f8:f9:79:aa:71:96:54:8d:74:af:
0c:1b:e1:6e:3e:e9:52:a7:0f:be:cf:b0:14:f7:c0:
e9:f5:db:1a:28:ef:8b:df:bc:d7:72:2b:b4:dc:f0:
30:4d:2b:25:73:43:a2:53:25:c8:15:a3:19:1a:90:
9f:66:7c:f7:fb:62:f4:41:f6:2c:28:93:23:49:65:
9c:b7:69:a6:e4:9e:b4:41:48:a0:a0:1a:f3:49:20:
ca:5e:37:09:3b:50:4b:18:e9:d6:e4:73:ce:75:c8:
4f:b3:24:b1:52:36:4e:78:36:db:32:2a:d9:d6:63:
92:12:ad:12:48:0f:52:60:97:04:12:9b:a7:db:ba:
d7:be:83:39:1e:e7:5f:99:3d:3d:be:9c:61:af:4b:
18:bd:41:3d:15:29:a2:1e:bb:1c:3c:8e:9b:16:99:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:73:A9:AD:36:69:01:CF:12:81:9E:22:83:77:95:6D:6E:D3:23:8C
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d7:69:c7:0a:77:46:f4:5f:7b:ed:58:f6:9f:2a:8f:48:fd:
48:f7:57:12:10:92:85:d0:b9:9a:8b:55:66:e6:91:ce:af:0f:
6f:9d:45:b4:e9:42:7d:30:a9:b2:4e:f7:81:15:39:49:49:33:
1a:8f:dd:fd:3c:49:dd:1e:d5:a7:f8:17:0d:61:3c:28:e8:77:
04:34:8a:0a:db:86:f1:b3:d5:2a:4e:50:f6:a0:66:53:5d:08:
72:9d:29:25:bc:5d:a9:9e:cd:79:6c:a7:f7:74:8a:54:7d:18:
ef:cc:fe:e4:08:9b:07:33:09:8d:6b:4b:22:ea:38:c9:54:a8:
a9:c6:ee:75:99:57:3d:b8:db:4d:0d:12:91:85:67:6f:97:fc:
c8:ac:09:09:da:b1:ac:b0:aa:f0:c6:3e:f7:10:be:ef:bb:1d:
5e:99:d0:dc:37:43:e1:cc:6c:40:32:0a:e6:c5:86:e0:68:d2:
8e:7e:64:66:8a:f6:13:c9:db:ad:ef:e8:9e:e7:fb:24:f9:1a:
a5:38:f8:2c:5f:12:91:fc:bc:31:8c:e6:48:a2:31:c5:55:85:
58:dc:3a:00:c5:7f:24:21:a6:84:b9:47:08:55:a4:d3:15:68:
86:bb:6f:2c:56:eb:fe:9d:2f:a4:54:0d:9b:31:25:75:2e:ed:
4c:4e:b2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:28 2026 by rpki-client