Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
File: CmhbcVcgw2L0zL11CmEz0z6pzUg.mft (raw, json)
Hash identifier: vkE+gsoKhiFWGvT9umjwl5R9Mq0nIeOOOf9OgTqHpco=
Subject key identifier: 4C:D9:1B:C7:25:65:C2:AD:7D:40:F2:77:AF:E9:9C:C2:F4:8F:4D:F2
Authority key identifier: 0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
Certificate issuer: /CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Certificate serial: 019FAC7627B152B65328D126CA40A6B1547A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:52 +0000
Manifest this update: Wed 29 Jul 2026 06:00:52 +0000
Manifest next update: Thu 30 Jul 2026 06:00:52 +0000
Files and hashes: 1: 0bWhQWuajdVxt380g1tHt_dfDzA.roa (hash: BNIIYhf4bu7N2Q9i17Tx4+jGFkmAZfsMMHPK83i6ScU=)
2: CmhbcVcgw2L0zL11CmEz0z6pzUg.crl (hash: ktI8gm7Dtg/Fjv1MwTeH4t/nrqMw76eOk5TTKx/T4+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:27:b1:52:b6:53:28:d1:26:ca:40:a6:b1:54:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Validity
Not Before: Jul 29 06:00:52 2026 GMT
Not After : Jul 30 06:00:52 2026 GMT
Subject: CN=4cd91bc72565c2ad7d40f277afe99cc2f48f4df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:06:3b:9f:14:d4:19:2b:60:b3:1f:30:f8:
4e:c0:85:62:14:5e:9c:1e:fa:ce:14:7f:d6:63:76:
7d:8d:1f:46:3d:a9:10:a8:67:96:2b:5d:a8:60:92:
15:92:27:dd:ed:f4:11:4a:29:93:68:e8:b2:4f:e3:
75:02:bc:ab:1f:89:53:05:dd:dc:f5:1a:89:98:bc:
dc:07:ff:ed:a8:54:28:ff:ca:90:a8:af:b3:84:35:
1c:c5:a5:c2:c8:ee:e8:aa:83:e5:bf:5b:66:3f:62:
90:e4:8d:fa:ac:40:d0:fc:cf:c8:ec:41:5e:3a:5a:
23:23:50:fc:30:45:38:a0:37:79:83:05:11:f6:e7:
24:ae:65:f7:e7:5f:18:8e:7d:a9:d2:33:f5:a7:34:
0d:20:0a:d4:6e:64:12:cd:d6:68:04:b0:cc:25:ac:
87:ac:18:f3:66:7a:97:43:83:e2:d8:62:36:1f:34:
ce:94:8f:f0:9a:88:72:b4:5c:44:55:fb:aa:e2:34:
91:da:6e:32:14:b8:7a:a8:bf:35:4c:c6:50:9f:a7:
dc:1c:2a:8d:70:27:96:88:f3:b5:f2:27:d6:f8:f5:
02:52:bd:35:85:54:40:24:07:47:a0:3d:e1:8f:f1:
ba:b4:0d:84:c1:8f:f9:3b:9e:de:f9:ea:d7:ca:84:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D9:1B:C7:25:65:C2:AD:7D:40:F2:77:AF:E9:9C:C2:F4:8F:4D:F2
X509v3 Authority Key Identifier:
keyid:0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:24:44:16:86:b0:f1:4d:e4:8e:73:ab:cf:ec:2e:ba:f8:56:
6a:e4:30:08:da:c3:57:f0:ce:78:21:f3:ac:6a:56:5d:9e:e1:
54:b7:37:83:5e:bd:1d:f9:b1:20:85:39:7d:f2:d0:ec:53:49:
d3:c1:01:4c:f6:45:e3:96:01:b7:1b:87:a2:f2:ed:cb:2e:a8:
70:3e:d1:79:6f:6d:c3:5a:55:f9:e4:24:ac:db:ec:c2:89:c1:
1e:46:5f:9d:c9:d1:69:f0:e4:2b:6d:25:f0:fe:41:89:55:69:
9e:3b:87:dd:2c:9a:46:de:22:9b:b6:be:f2:d2:e0:b0:11:a9:
73:64:e4:9b:7a:80:d8:30:df:f8:8e:e2:b1:50:8f:ba:06:3d:
8b:90:ac:c5:c1:e5:9a:4c:1d:54:ac:00:21:b5:4b:c7:8d:19:
35:d2:cb:52:25:3b:e2:6d:72:2e:a6:7a:6b:ec:95:f9:ea:ef:
f5:5b:66:fb:49:82:7c:9c:9d:46:73:22:43:87:57:a0:7e:64:
09:fd:4d:f7:af:87:ea:2c:91:da:31:f1:cb:e2:29:03:c7:10:
43:8b:20:08:d4:b5:b1:1e:11:fb:95:f2:f0:94:10:63:81:e3:
57:a2:b0:86:09:21:f2:00:0f:c6:65:e8:1a:6c:15:0d:14:52:
30:16:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:00:15 2026 by rpki-client