Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: o4sn9HBBAgf9BV9a9haZ8tsh2ce69rm/cJHqzKcueTM=
Subject key identifier: E5:D8:98:CA:72:C0:1A:3F:31:40:B4:AF:F9:93:17:81:F3:E4:75:FD
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 019FAAF5CBD369B79C73F2AC775F877F58EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 09AB
Signing time: Tue 28 Jul 2026 23:01:02 +0000
Manifest this update: Tue 28 Jul 2026 23:01:02 +0000
Manifest next update: Wed 29 Jul 2026 23:01:02 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: mC1IkxljYpYiHDeWKT1/XBYnwWCVdBgZsXn9TLRuSJQ=)
2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:cb:d3:69:b7:9c:73:f2:ac:77:5f:87:7f:58:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Jul 28 23:01:02 2026 GMT
Not After : Jul 29 23:01:02 2026 GMT
Subject: CN=e5d898ca72c01a3f3140b4aff9931781f3e475fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:fb:9d:2b:21:9e:ed:8a:c1:66:0f:06:17:
ea:a9:17:8f:ae:3d:63:f5:88:e4:81:f4:32:11:b0:
3c:2b:e4:c5:45:68:2d:b1:0e:15:5a:75:e4:cb:5b:
b8:08:99:11:cc:9a:2d:da:68:08:e3:97:8c:36:5a:
b3:8d:fe:7c:53:c3:eb:b8:2a:f5:41:bd:42:37:38:
a0:52:bb:ea:19:a2:6a:43:e9:18:3a:64:41:bd:02:
7b:df:1e:6a:ce:05:b0:dd:8a:71:d1:e4:61:f4:5d:
55:91:07:cd:03:dd:bb:0b:e5:df:f3:38:cd:45:92:
78:b8:7a:29:1d:bb:35:09:b1:1d:ed:27:0d:98:47:
13:fa:87:8a:b1:7d:12:cf:0e:e1:c5:0b:26:c9:2a:
b8:9a:1c:dc:d1:f1:31:ae:9e:a4:0b:b4:f8:13:c7:
3c:4a:01:d0:80:fd:d1:4a:fd:94:3a:6b:6f:18:f7:
e4:56:0c:04:be:d1:72:04:00:c0:b5:1f:4f:5d:77:
04:14:12:3e:e5:9f:10:8c:26:a7:81:d1:43:cb:eb:
a8:6b:69:c9:78:f9:64:8f:b7:8c:6f:63:17:8c:3e:
e7:ec:2a:25:d7:b9:59:8d:2a:6a:f8:66:ec:53:b3:
ff:54:c4:40:81:e7:84:5b:4e:fd:f8:a4:28:e4:99:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D8:98:CA:72:C0:1A:3F:31:40:B4:AF:F9:93:17:81:F3:E4:75:FD
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:93:93:f5:d7:98:be:12:81:41:59:5a:6b:f8:60:f6:ac:6f:
8a:9d:13:73:a1:3a:57:3a:79:85:8e:c6:cd:b9:1f:84:68:15:
3d:0d:06:ae:27:4d:57:b6:93:6c:79:1a:17:5e:72:08:7b:70:
8a:16:bc:02:64:94:b6:90:5a:73:e8:b9:31:da:f7:c9:c3:d3:
9c:57:bb:da:95:d5:a7:0f:c2:db:db:81:2d:90:b7:8c:70:ef:
b8:e4:f8:fa:06:bd:dc:4d:28:8b:0d:80:a1:d3:c8:44:71:78:
97:80:14:bf:9f:69:37:63:7f:52:a6:24:23:2e:0c:09:18:16:
b8:9b:2a:dc:ff:de:36:fa:bb:39:80:59:48:d9:7a:e2:9f:57:
f0:f8:64:c1:82:eb:68:a8:c2:e9:60:10:f6:ed:5e:67:73:88:
aa:a5:a5:11:81:a4:27:20:6e:60:98:0b:f6:33:b5:b1:54:aa:
16:02:2b:cd:17:55:48:d6:43:90:51:8d:45:37:89:a7:18:0d:
e2:eb:73:b0:7e:3d:db:c1:91:ec:c6:98:b9:4f:16:f7:f8:03:
5f:27:37:bd:2d:83:1f:49:54:a2:f1:16:a9:66:88:67:ca:5a:
9a:d4:ca:47:fe:f3:03:da:ab:b4:13:c4:02:97:57:52:67:6d:
df:97:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:44:43 2026 by rpki-client