Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: QhmpjjCBt3ZwJPaXwg8CD0V3q3zgJZoYq4/Vciu67X4=
Subject key identifier: 18:A4:45:35:3F:A6:B4:F5:77:16:ED:32:C6:4B:18:4D:7F:51:2C:DD
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 019FA93E3F1292B44529904FC83829C0B0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 0D78
Signing time: Tue 28 Jul 2026 15:00:56 +0000
Manifest this update: Tue 28 Jul 2026 15:00:56 +0000
Manifest next update: Wed 29 Jul 2026 15:00:56 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: AEcRiEsNptFIab5WTn+wz0YeyjYs0SJ47bs58o5dq/0=)
2: UWX8SxCjwL_qmxdOe6nySrZQC84.roa (hash: D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=)
3: vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (hash: 8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:3f:12:92:b4:45:29:90:4f:c8:38:29:c0:b0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Jul 28 15:00:56 2026 GMT
Not After : Jul 29 15:00:56 2026 GMT
Subject: CN=18a445353fa6b4f57716ed32c64b184d7f512cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:af:4e:69:ad:47:c0:2a:8a:cb:dd:32:d7:
2d:cb:06:a6:a2:1a:52:c7:7c:7c:78:4c:93:e3:5e:
12:8a:1a:ee:ed:ed:57:bb:a5:4d:b7:fb:03:63:3a:
92:1c:42:da:73:cc:69:44:da:b7:b7:61:98:75:46:
44:ed:f4:79:e8:4c:f7:01:db:25:cd:a0:1a:a1:92:
fb:5c:57:9c:22:9c:c0:43:a9:3f:c9:27:6b:47:61:
63:79:df:79:cd:2f:4f:a2:0f:0e:e4:f3:13:e1:c5:
fc:45:b8:24:e5:8b:33:aa:bc:87:be:02:9e:16:52:
97:bd:80:94:6c:b5:63:96:61:99:bf:7c:6f:ad:9e:
33:0a:50:d1:dd:09:7a:17:3d:18:30:ff:73:d5:ac:
f5:a8:ae:59:95:d4:4a:02:ec:58:22:da:ee:27:a6:
72:40:2f:03:7a:7a:e9:c0:48:c8:a4:a4:78:0e:53:
37:32:37:26:e3:f1:17:27:45:a1:48:fc:6f:d5:f4:
89:b0:27:ef:82:60:9c:12:70:fe:dc:44:a6:6a:09:
34:16:3f:e5:7e:ad:6b:28:67:96:02:b1:d3:0a:d1:
76:6c:14:00:2b:91:e8:42:fe:22:ed:3b:55:e8:17:
cf:27:be:de:0e:5d:b5:48:10:74:cf:0f:71:32:b6:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A4:45:35:3F:A6:B4:F5:77:16:ED:32:C6:4B:18:4D:7F:51:2C:DD
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:39:27:fa:29:3d:81:59:9e:69:8a:95:20:04:6a:df:51:
60:2e:2e:31:cf:d4:5e:fc:5b:67:e7:17:5f:68:f5:14:84:2b:
9d:80:49:d2:54:88:3e:70:cd:f9:8e:56:6a:52:de:bc:83:6e:
32:70:c3:4b:40:a6:45:eb:d5:78:a8:eb:32:4c:ce:e6:89:c9:
98:66:14:c9:68:3f:55:ce:be:c4:4d:d0:70:19:76:b6:06:01:
72:f4:51:77:80:ee:2d:3c:9e:f1:3a:1b:48:29:1b:93:6d:40:
a0:2f:76:74:34:4a:c1:37:a2:ab:1b:1b:e4:f2:d6:02:46:fc:
79:3a:bc:5a:c1:1e:e6:fb:aa:9f:20:96:dd:0f:4b:f1:34:6c:
e7:a0:13:0d:08:be:34:b8:20:ef:c1:a2:6b:f8:b2:75:92:b8:
d0:5f:94:e6:81:5c:a2:91:f7:ad:74:61:21:a1:a0:0c:dc:d8:
c6:23:6b:81:64:0a:bd:49:76:40:f7:c0:41:85:f8:6a:d4:c3:
2f:49:2f:d9:c1:b6:b6:e9:d3:bc:f8:cb:a9:5e:ff:db:4f:fd:
9f:13:38:07:cb:df:cc:67:29:0c:67:38:fd:fe:83:a0:8c:0d:
5c:3b:5d:d9:26:9e:05:53:91:fb:90:94:09:51:6b:52:50:67:
d6:9f:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:13 2026 by rpki-client