Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: L0IbAmkQ9NvkeMcE63MiupmeafKpq7NXZg2LxU3iWlo=
Subject key identifier: 4D:78:C4:03:40:A0:7C:F9:7C:7E:CE:97:BE:F5:70:44:BA:00:BA:B1
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 019FAA87AB52E46FF79485DC7E00CD0982FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 21:00:45 +0000
Manifest this update: Tue 28 Jul 2026 21:00:45 +0000
Manifest next update: Wed 29 Jul 2026 21:00:45 +0000
Files and hashes: 1: TWgMkDcy_HR5XMg6rXv7Ax4ipk8.roa (hash: H/mEg4ne87MR+9DERthNodFmmxJcKV/plF/1hfT1FKo=)
2: XXDs_1WF8xAupVE6WOS_dNf9osM.roa (hash: 20X1/QsaSj3DVDtfhjJ7nUqhCYkTj6/5wZfHSwDpBiU=)
3: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: ZKyEcYoyL3JMcirktfb6RJ1Iokjun2bnrY1UTSRcpgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:ab:52:e4:6f:f7:94:85:dc:7e:00:cd:09:82:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Jul 28 21:00:45 2026 GMT
Not After : Jul 29 21:00:45 2026 GMT
Subject: CN=4d78c40340a07cf97c7ece97bef57044ba00bab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:96:ce:84:47:ee:03:98:33:6d:91:19:6c:
bc:d7:62:c6:18:58:69:ff:d4:7f:5c:85:5f:25:67:
16:fa:c0:8f:78:ef:7a:74:ee:39:14:60:29:39:82:
ea:bd:2e:1b:d8:64:d0:14:72:15:be:b4:60:dc:19:
49:01:be:0f:0c:3b:f2:6e:a1:fe:52:44:93:05:e0:
43:e2:9a:4e:61:4d:62:8d:96:bf:9b:e5:57:4d:ce:
20:c8:84:80:5d:e9:b8:e3:73:3f:98:b7:ea:99:bb:
54:63:f6:ce:53:ca:a7:05:64:ae:99:93:20:40:a6:
40:6c:ea:30:6b:05:22:6a:fe:69:1d:d5:1c:7b:0f:
d4:99:55:02:63:99:92:e4:4c:90:f3:d9:d4:13:57:
21:8b:56:fd:52:96:2e:79:98:95:23:89:fe:aa:a5:
e1:e0:a9:04:ac:17:53:17:6a:61:b7:b6:32:8b:45:
c0:12:00:3a:bf:2d:07:80:ed:b7:0a:71:2e:cd:2d:
61:7e:6c:27:d3:d0:1a:bc:0a:04:e9:6a:e0:6d:a7:
f3:88:d6:65:01:b0:71:43:2f:58:3d:42:ad:e7:09:
5f:24:ca:16:61:e1:96:33:2a:00:39:1c:a6:bc:e2:
63:55:05:39:20:63:2d:70:63:53:9b:b2:1d:fe:35:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:78:C4:03:40:A0:7C:F9:7C:7E:CE:97:BE:F5:70:44:BA:00:BA:B1
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f4:a9:00:13:29:33:8e:14:46:b0:73:1d:5b:0b:39:f3:af:
2c:18:81:33:b3:19:78:0e:b3:62:18:67:eb:f8:8d:d3:89:2d:
33:8f:f6:40:52:9d:9a:d3:bd:a6:5f:50:e8:15:bf:6e:ba:ff:
28:f8:a1:de:8c:d0:bd:67:c7:04:58:c3:e8:92:28:70:da:b3:
c0:8d:76:4f:d4:9e:2a:32:23:6b:87:8c:80:e0:b4:65:0a:f6:
4e:23:89:36:d6:96:c0:67:09:f2:99:71:35:27:bb:cd:f4:df:
8f:8c:4e:51:65:35:fc:a4:27:4f:23:a6:51:a1:99:ff:67:15:
43:ce:3f:36:85:30:36:08:dc:23:b0:2c:8c:20:a5:4f:0f:fa:
b4:4a:7f:4a:c7:a3:f8:d3:0e:12:49:e2:84:94:f6:9d:bb:ce:
77:53:95:f6:45:b4:8c:ea:25:9e:ff:80:94:d7:38:30:44:87:
92:9b:df:c1:61:0d:c5:36:03:b7:d1:86:f3:56:7c:36:e4:6e:
cb:3e:c3:f7:2e:60:21:e5:3e:c9:2a:f6:21:83:eb:3b:2f:ed:
ac:7e:d4:ea:46:b6:c1:32:80:9d:b9:a3:dd:3f:68:bb:d5:02:
e3:5c:2a:60:67:a8:f5:ef:ee:ce:8d:be:6e:e5:26:2a:3c:a5:
e9:e8:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:22 2026 by rpki-client