Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: z9PF6oUoRj01tgdMDgFR1RDBo5fvXd2AQ+lf34lLCxg=
Subject key identifier: B5:43:93:53:E7:4B:57:74:ED:93:0D:D1:07:F7:69:55:55:00:E1:FE
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019FAB2C9BC854A2C82CC2F7B048320A27DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 00:00:55 +0000
Manifest this update: Wed 29 Jul 2026 00:00:55 +0000
Manifest next update: Thu 30 Jul 2026 00:00:55 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: n1vVZtQiSHPGYPrKaghQ5W8HVKJaU/5jr3GGjAHs+vk=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: pPHuomO4xh_m0S-r-_OhJE-mYVA.asa (hash: TKq6TnfE0FWP12xkoJvmUbR5i0X/fWByiH3vtL0RFrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:9b:c8:54:a2:c8:2c:c2:f7:b0:48:32:0a:27:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Jul 29 00:00:55 2026 GMT
Not After : Jul 30 00:00:55 2026 GMT
Subject: CN=b5439353e74b5774ed930dd107f769555500e1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:75:f2:dc:dd:a4:c0:78:68:bf:b6:7a:19:
6e:72:df:b8:a9:98:32:e3:ce:ac:76:61:00:a8:cf:
cd:a2:bf:c6:9b:59:8b:38:c8:ca:3a:d7:10:9b:f0:
49:3a:1d:cc:19:35:30:8c:4f:cc:db:b1:a1:28:1d:
80:6b:03:d1:2f:82:96:73:a5:92:56:30:3e:9d:7f:
f4:2e:4f:79:bd:e4:af:32:70:66:f0:ef:5b:f3:fb:
33:db:0b:04:51:41:79:5d:62:d2:f1:a5:b1:76:31:
23:6a:fb:d6:30:53:30:3f:dd:f6:0d:37:64:64:e4:
8d:f5:34:cc:76:14:c3:29:18:92:1d:31:6a:50:88:
ba:f1:3e:a1:f7:2d:4f:b0:ba:84:98:65:14:0c:8a:
d9:da:1d:a5:e7:27:ec:95:11:60:dc:79:4f:a7:44:
8a:dc:f1:94:6d:0c:b4:5b:6d:83:f5:7b:c5:73:d1:
40:ed:d1:6f:82:eb:34:dd:4f:05:67:fd:b1:59:34:
cd:a0:0c:12:67:53:05:9e:eb:7c:33:ce:02:9a:e8:
5b:3a:dd:74:65:3a:0b:34:eb:75:ab:95:71:d0:cc:
2c:52:4c:23:fe:5d:51:9b:e9:e1:54:5f:51:61:37:
0a:fc:2b:e2:27:44:f1:30:e1:a5:a1:ee:61:9d:dd:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:43:93:53:E7:4B:57:74:ED:93:0D:D1:07:F7:69:55:55:00:E1:FE
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:95:e8:d2:69:eb:27:27:c8:f6:e5:3a:e7:c4:7b:e0:1f:5f:
8a:44:60:e9:88:e6:6a:ff:14:e2:21:75:a1:52:72:34:56:5a:
4d:c2:7c:18:b4:a7:8d:bc:75:09:f0:46:82:e0:06:c5:3d:ac:
a7:3b:97:30:9d:4b:8f:51:76:1a:1b:02:ac:43:cb:18:3e:a3:
a7:61:92:ad:23:1f:3a:a2:4b:29:10:86:50:e1:3b:5f:6c:ec:
ee:bb:03:ea:84:d7:c8:06:bf:c6:09:ac:c0:74:b4:8c:34:17:
11:29:0f:12:55:6a:97:9b:25:fe:ab:dc:c9:25:6f:91:b9:5b:
b0:d7:9c:0c:fd:51:8d:0e:15:60:2f:ef:bb:83:04:2e:64:81:
6d:9c:a5:bf:fe:66:cd:1d:60:25:c1:6b:fc:27:64:4e:34:71:
92:f6:89:37:3c:cc:80:f6:3a:f7:8a:0e:8f:98:a6:1f:a1:90:
4e:87:8c:6b:38:5f:99:67:47:d6:79:ce:82:8d:e8:33:06:a5:
b0:14:2e:d1:b3:c2:22:80:f8:4b:32:7b:a1:84:50:3f:c7:cd:
39:10:bf:08:ed:33:80:20:c0:33:9c:73:4d:20:41:08:3f:41:
e2:6d:1a:b8:31:66:a5:e4:a1:00:e2:96:d2:4d:60:11:1b:64:
6c:99:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:20:11 2026 by rpki-client