Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
File: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft (raw, json)
Hash identifier: V1vv3iUxiqR+m1eYwXuS3bQu/pmWBSpU89UoAV8xUcM=
Subject key identifier: 99:DE:83:8D:AD:1B:7A:48:30:8A:A4:60:D8:2E:27:45:88:A9:E3:8A
Authority key identifier: E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
Certificate issuer: /CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Certificate serial: 019FA8D0039951B9F7150C1AA401CD16374B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 13:00:32 +0000
Manifest this update: Tue 28 Jul 2026 13:00:32 +0000
Manifest next update: Wed 29 Jul 2026 13:00:32 +0000
Files and hashes: 1: 4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl (hash: PQkAY1ZGGoRBeg4q8LgHNY9RY0aJoIdCUu1b4To8ACU=)
2: vhW7lS-JBYebJEO-U1J2yweu6Yo.roa (hash: hv3bo8RYqKbVjpyma1UuE8rn8DDYyjzn6U1qa0IMKCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:03:99:51:b9:f7:15:0c:1a:a4:01:cd:16:37:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29ed9a9d1b6b5383ebf946d5fc54980612563ea
Validity
Not Before: Jul 28 13:00:32 2026 GMT
Not After : Jul 29 13:00:32 2026 GMT
Subject: CN=99de838dad1b7a48308aa460d82e274588a9e38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:17:92:03:e7:d9:fd:14:f5:91:29:d4:ec:
e8:08:68:52:f6:42:c9:b7:10:21:f9:7a:a6:0e:c0:
26:b5:4b:cd:82:72:bd:52:a2:c2:53:d1:b4:d5:fb:
de:9b:38:55:83:0c:05:12:5a:86:22:8d:65:70:a1:
78:1b:78:40:3c:11:a1:4a:d4:0e:dc:8a:4c:d3:ac:
37:6b:bd:11:cb:d9:55:8a:99:44:b0:87:a2:8c:41:
90:47:4f:b4:30:e1:dc:58:74:b2:36:c6:65:ca:a6:
0f:ed:c9:13:02:41:42:3c:b7:55:6f:dc:a8:0e:22:
f9:7a:fa:61:98:31:ab:d8:52:5f:db:63:bc:9b:35:
89:77:df:11:73:47:bf:b4:d8:5b:78:9c:72:b9:be:
c0:f4:6c:1d:c1:eb:74:01:ec:b0:ac:a9:71:be:72:
1e:ed:96:bb:dd:16:b8:dd:b2:7d:5b:31:47:0b:1e:
1b:1c:70:92:8a:17:99:b1:2a:c3:ad:28:a5:e8:9a:
f0:f8:f0:38:83:d6:b4:51:17:70:b7:9b:3d:c4:d1:
d5:6f:ff:95:e8:50:d6:c5:7b:2b:e2:8a:ae:d2:c2:
cd:84:ee:6c:1e:be:2d:18:1b:7a:b5:b8:8c:a7:57:
2d:49:4c:d9:07:49:2c:ae:c1:30:4b:68:a7:31:77:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DE:83:8D:AD:1B:7A:48:30:8A:A4:60:D8:2E:27:45:88:A9:E3:8A
X509v3 Authority Key Identifier:
keyid:E2:9E:D9:A9:D1:B6:B5:38:3E:BF:94:6D:5F:C5:49:80:61:25:63:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p7ZqdG2tTg-v5RtX8VJgGElY-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/38ec5b-336d-4a1c-a84a-f6c6859b30f0/1/4p7ZqdG2tTg-v5RtX8VJgGElY-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b4:9f:43:81:dc:3e:c2:47:84:6e:9b:54:35:b0:55:80:2e:
66:00:d6:e4:b9:c0:ef:c2:9c:f3:2d:a2:ae:4c:8a:86:ac:3b:
bc:46:4b:a8:04:ad:79:5a:70:ea:b5:af:ce:27:39:19:56:15:
92:fa:98:c5:cb:7e:5e:81:3c:4f:16:3a:43:48:6b:42:77:c3:
b1:59:c6:2b:32:38:80:92:68:1a:96:b2:1c:1e:4e:3c:24:96:
ee:88:f6:e6:78:f9:e5:a1:55:6b:1b:03:c3:6a:ef:2e:4f:7c:
ce:3d:8d:a7:1a:9e:37:3a:e4:a1:09:13:f5:8e:d5:53:3e:42:
49:09:7c:5f:d4:f3:ef:3f:d7:02:08:9e:1c:f3:3e:67:0b:f6:
62:25:d5:52:44:96:aa:3d:3d:f8:a9:cc:0b:54:cd:48:48:92:
8b:4a:6b:e0:8c:bb:2d:cf:10:c6:29:38:f1:c2:92:7c:0b:da:
55:36:2d:8b:4f:8c:81:cf:98:51:ae:8a:5d:2b:e4:7a:b2:d4:
d3:1e:eb:c2:a0:9b:17:e7:3b:cb:72:57:a2:ce:a0:8b:59:46:
68:14:72:72:2e:6b:d5:af:60:72:07:0f:81:9a:46:0e:16:29:
b0:9b:06:bd:75:d0:d8:14:8c:d4:b4:06:75:49:05:5f:7e:36:
cd:01:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:48 2026 by rpki-client