Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: B/aIOT8vpVTCfvW+F2jBC1+WtrBPYRI12Ds+XMghxTE=
Subject key identifier: D5:FA:15:96:F0:C2:A6:54:3B:AC:B4:A7:98:A2:7F:33:8A:23:4C:61
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019FAABE6C552643089D360904EB5E331834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 22:00:34 +0000
Manifest this update: Tue 28 Jul 2026 22:00:34 +0000
Manifest next update: Wed 29 Jul 2026 22:00:34 +0000
Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: ldMdRC0LCWfTxI3fBtv6O67xOQ+W9tu+N8dTglCQ92I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:6c:55:26:43:08:9d:36:09:04:eb:5e:33:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jul 28 22:00:34 2026 GMT
Not After : Jul 29 22:00:34 2026 GMT
Subject: CN=d5fa1596f0c2a6543bacb4a798a27f338a234c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:da:96:f9:34:ca:00:a2:75:40:34:8e:f1:
35:88:89:7f:ae:3f:92:6e:ff:57:e3:da:16:b8:08:
62:82:29:cb:b5:3c:6e:de:07:39:d5:16:f9:40:56:
e8:8d:04:a5:5a:b0:18:7d:34:6d:54:0e:87:ba:12:
b6:7e:40:1d:91:2d:12:da:95:d3:ed:07:f8:d0:61:
7f:6a:25:90:8d:b7:07:31:21:fe:88:a7:20:f3:dd:
62:62:2a:59:3c:d0:f9:df:cc:b5:b4:d7:7f:66:7d:
79:a8:a0:b5:21:0d:b9:25:c5:21:a6:3d:a3:73:39:
92:42:2d:fe:44:29:ac:0e:03:f3:ab:fe:0c:f2:72:
cd:38:aa:e5:9b:f5:0a:87:9c:5d:c4:a5:67:46:ec:
fe:fe:3d:6a:8d:4c:a2:21:5c:09:d6:c3:89:80:97:
e1:d5:fc:05:27:5b:62:bc:61:6c:5b:d0:cb:13:8d:
e5:f3:2c:a2:74:cf:90:4d:f7:fa:8d:9a:05:ba:0a:
46:2c:86:01:62:af:28:67:87:83:fc:91:f5:c8:4d:
f5:39:1a:7c:38:9a:57:7a:4b:a1:94:e1:70:f7:96:
85:3b:14:ea:49:1b:dc:1a:df:66:72:b1:8a:c9:8f:
9b:62:d9:e0:09:20:0c:ff:d4:ba:ac:98:a7:e6:65:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FA:15:96:F0:C2:A6:54:3B:AC:B4:A7:98:A2:7F:33:8A:23:4C:61
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:48:f9:db:32:6e:5e:ec:c1:29:30:88:e4:ef:d1:1c:d7:36:
0a:8f:31:a9:95:b1:6a:72:cb:61:bc:67:b3:a2:3d:18:7c:66:
a1:b7:2b:8a:1d:35:3e:f6:19:14:11:f9:12:0d:02:cf:c8:6c:
d4:70:a3:bc:2b:ee:83:93:96:73:30:7c:66:6c:44:7b:6f:a9:
45:86:b8:cb:85:ca:de:7b:64:7c:49:ff:8a:fe:f8:6a:c8:5d:
da:d9:43:e3:af:9e:5a:fe:31:a8:7d:ac:98:34:e4:95:81:d2:
79:e1:f4:b6:1b:f1:ee:b4:d4:04:a3:6a:fc:80:62:64:fa:6b:
1c:0d:aa:14:3e:61:1e:ea:0b:3c:45:45:bb:85:98:e1:4c:fa:
10:f6:36:8c:98:b9:89:38:68:c2:79:e1:64:b7:94:b6:b4:f7:
0f:ef:d8:97:dd:07:b2:82:78:a5:f0:72:05:84:19:63:ff:25:
b8:a1:df:5a:69:e1:f9:ec:fc:06:b0:9c:e9:eb:bd:82:d1:c8:
35:d8:bb:29:40:ce:86:4c:44:ce:d6:ec:2e:da:93:22:b5:d3:
50:9b:af:a2:5f:5a:c1:59:98:f8:86:08:79:cd:64:81:78:fc:
9e:f3:20:71:1e:2d:d7:77:d5:d3:53:83:ec:76:9e:cb:d8:e3:
7f:47:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:33:26 2026 by rpki-client