Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: tU3qFcIBM97ieukf2pz729U31f0vCLwvfQje9erKrEI=
Subject key identifier: 27:F2:68:D8:C6:4A:6C:0F:78:7F:5C:7C:CE:A6:92:31:16:4E:90:98
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 019FA7BD1E4D82EF85491AF511B8581F58E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 15B1
Signing time: Tue 28 Jul 2026 08:00:16 +0000
Manifest this update: Tue 28 Jul 2026 08:00:16 +0000
Manifest next update: Wed 29 Jul 2026 08:00:16 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: /tVGBqtMluWDpr/tPqS6vWR6GOceAkenbk8vMx8vnYY=)
2: R3kq7Tu6gRsTs905XA3OIx0hnx8.asa (hash: i0v0le2V8KgOYY+tMlhW7yajuhdDrHP/SvNGEb/LiEQ=)
3: XT_1jof6p0-6Rq9yGMKNddmG5gc.roa (hash: zoD4X0KwRY+rISekdKuEzTq6itAQw0dp7xwB+9IQQEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:1e:4d:82:ef:85:49:1a:f5:11:b8:58:1f:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Jul 28 08:00:16 2026 GMT
Not After : Jul 29 08:00:16 2026 GMT
Subject: CN=27f268d8c64a6c0f787f5c7ccea69231164e9098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:bb:d5:c6:05:32:f2:87:3c:22:6b:6f:82:
50:b0:e7:c5:b3:ee:81:3f:bd:6e:b2:7f:80:1e:1c:
21:63:02:12:2b:11:23:3a:db:9b:93:86:11:21:07:
c1:91:2a:76:63:38:69:87:11:58:c1:39:54:9d:52:
6d:8b:4a:f5:45:c7:03:76:04:32:cf:35:1d:02:7b:
e5:a6:20:44:92:4e:9a:c4:d7:d1:bc:aa:5d:1c:6d:
55:57:8a:29:1b:93:a1:64:cd:e2:b3:48:f2:e8:a6:
0c:9d:c9:6e:a3:09:24:89:99:b0:7e:69:10:95:ba:
e6:b5:17:3d:ff:ef:ca:34:c9:ed:b9:7e:10:b8:e2:
56:98:09:99:a9:d9:1a:c6:b8:3c:80:f1:44:14:45:
35:93:c0:45:59:fa:50:c6:5d:ef:df:dc:30:89:a1:
52:b2:73:cd:5b:9a:b8:91:1e:41:ad:85:55:d3:a5:
1c:fe:fc:3b:57:22:48:7a:d8:1a:78:d7:e6:d3:07:
f7:13:20:40:a3:13:9e:67:25:49:ab:e5:7e:a5:08:
db:86:39:6d:66:06:9a:1b:f3:e1:ef:01:00:02:2c:
08:38:36:e1:fc:07:c1:64:dd:e4:a7:e2:64:12:e2:
82:0a:3d:f8:3d:71:d5:f3:fe:e6:f2:82:29:09:96:
ca:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F2:68:D8:C6:4A:6C:0F:78:7F:5C:7C:CE:A6:92:31:16:4E:90:98
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d8:a8:b4:54:7b:26:e1:65:21:87:8d:4d:8c:ce:f3:0e:2a:
4d:f7:ed:10:33:38:19:5c:b3:1e:7b:ec:04:a8:ef:66:db:03:
20:9a:69:4e:a0:c9:f3:98:5a:62:cb:5d:75:ce:3d:77:82:55:
ad:9f:18:e5:a7:a3:98:f5:89:27:f6:f5:a2:de:38:cd:eb:51:
4a:3d:c9:59:0d:b4:03:b4:12:75:43:8e:12:04:f2:a9:70:97:
8d:ad:d5:8b:16:5b:bb:e9:34:1f:6a:fe:3a:61:07:50:c6:95:
5c:9c:40:d2:a0:46:66:44:71:a7:a9:ed:7d:76:e5:9c:99:1a:
3d:0a:de:62:99:f4:d7:70:39:90:bf:30:77:27:53:42:fc:47:
be:27:65:4d:28:84:69:c0:0c:a0:fc:f9:7e:3f:b9:0d:bf:98:
3a:e7:b3:ad:fa:76:48:98:8a:7d:2f:4d:67:05:48:cf:9f:98:
e9:02:e5:7f:9c:ba:9e:dc:48:14:55:1a:b2:ed:5f:30:84:39:
32:42:ad:e2:56:89:30:59:cb:21:58:d1:57:14:ca:95:d7:cd:
ce:79:8f:d6:7d:b6:99:41:3e:57:45:78:c3:90:a9:24:cc:33:
dc:86:50:39:ff:15:d1:89:0f:97:46:fc:76:2d:a0:b1:83:c8:
1a:28:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:07:39 2026 by rpki-client