Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: 7g/y/Vdi48xvfYJrh7Ut0wKOKr19wTwA25EsQirk4IQ=
Subject key identifier: 83:C9:35:F3:53:E1:39:BA:0F:5F:33:74:DD:B7:E6:3D:72:8E:A8:DA
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019FA89A19227A05119A53794E8061ABC861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0D95
Signing time: Tue 28 Jul 2026 12:01:38 +0000
Manifest this update: Tue 28 Jul 2026 12:01:38 +0000
Manifest next update: Wed 29 Jul 2026 12:01:38 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: g24zQSSkyfjkwl1+X/n6id09n/jM7WQ8lbRa/nSYQ6Y=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:19:22:7a:05:11:9a:53:79:4e:80:61:ab:c8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Jul 28 12:01:38 2026 GMT
Not After : Jul 29 12:01:38 2026 GMT
Subject: CN=83c935f353e139ba0f5f3374ddb7e63d728ea8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:8b:50:0d:97:99:2c:88:73:20:68:2d:ef:
10:96:8f:cb:54:2a:9f:14:a7:61:10:fa:56:b8:4f:
1b:b4:b7:ab:84:04:cf:4d:22:f3:75:1f:10:9a:8a:
d3:bf:5f:f3:ee:81:5b:47:23:01:9e:7a:7b:1c:29:
66:4e:c7:70:ba:68:1e:4e:48:76:4f:e8:d7:3f:57:
b6:01:18:84:ef:d8:24:5b:20:f9:95:64:d1:05:c4:
92:88:86:b6:98:be:ec:cb:6c:54:b2:d7:f2:da:ce:
08:7f:81:22:d4:d5:c3:83:54:06:72:21:fd:67:4a:
bf:3d:73:78:17:e1:77:6e:d1:9f:ff:cc:35:5d:5c:
cb:00:d6:15:41:84:c8:f6:95:b4:e0:86:1c:bf:e6:
25:0f:ff:91:13:92:1e:68:49:dc:48:33:d9:fb:63:
5d:5f:6f:e0:e5:1a:ce:24:6a:a1:37:d2:10:69:b1:
bc:48:fc:75:d6:cc:c2:99:dc:8b:cb:87:7d:44:41:
af:24:db:68:22:b9:f1:21:c8:13:3b:0d:43:20:ad:
8a:06:3d:e8:f2:54:ce:5d:5c:f0:b6:20:f0:15:76:
5a:4b:d4:b8:c7:8b:d0:61:eb:9b:43:51:ff:d5:0d:
ab:fe:0f:e7:03:46:f3:ad:86:c0:5a:43:56:4a:13:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:35:F3:53:E1:39:BA:0F:5F:33:74:DD:B7:E6:3D:72:8E:A8:DA
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bc:19:84:57:a3:b1:a0:bf:02:e9:95:a4:cd:d7:72:fb:44:
f3:3d:ff:e0:53:18:6c:e9:8c:4c:88:76:36:21:ac:55:96:2f:
ad:66:5c:51:3e:9f:6d:b1:db:4a:1a:0e:10:9f:fb:f7:ec:be:
41:b5:98:2d:b8:ea:08:28:c7:18:5f:69:f7:50:cf:b3:17:55:
3e:a1:87:46:ca:a9:67:11:0c:ac:ea:0c:b5:49:4e:82:b8:18:
8e:af:58:a3:3a:1a:d3:69:84:5b:3f:69:25:86:b2:3e:8e:1c:
68:08:ff:97:e4:da:6e:e3:d0:ab:64:92:cd:87:59:e5:b9:48:
19:10:c4:f5:bd:d9:77:6b:25:be:85:96:2f:43:39:8a:92:a9:
5d:e9:a1:01:d5:f9:52:7d:eb:6f:70:94:25:34:c9:53:f4:4b:
6d:88:07:3b:27:cd:de:fd:d4:71:a0:e3:4c:51:d2:7a:90:75:
08:b9:08:bb:79:bc:a4:83:4d:fc:61:4a:33:eb:16:51:0f:de:
73:c4:98:94:74:1b:4e:4e:80:82:9f:4b:4c:1f:bc:c9:68:d5:
6f:46:3e:ac:fd:06:e3:9f:cd:75:2d:56:09:c6:08:1b:80:15:
79:7a:28:0a:8a:a9:6f:42:68:0e:1a:ed:ee:45:23:da:99:69:
f6:38:7f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:14:23 2026 by rpki-client