Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: 3mfKZ3EP5Q1FzjCkMKhuqyTtUYxXN6ATkffRf9j36vI=
Subject key identifier: 72:F5:71:91:E0:01:C5:6A:D3:BA:0D:D8:22:38:0D:6A:AA:FD:7E:50
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 019FA8997194B37D137391E124262EEF1E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 07FB
Signing time: Tue 28 Jul 2026 12:00:55 +0000
Manifest this update: Tue 28 Jul 2026 12:00:55 +0000
Manifest next update: Wed 29 Jul 2026 12:00:55 +0000
Files and hashes: 1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: va3PhJmug4CFFTPZowYUfjAZP+Y28ymJhWAxEV+gfc8=)
2: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (hash: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:71:94:b3:7d:13:73:91:e1:24:26:2e:ef:1e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Jul 28 12:00:55 2026 GMT
Not After : Jul 29 12:00:55 2026 GMT
Subject: CN=72f57191e001c56ad3ba0dd822380d6aaafd7e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:11:ca:b9:cc:9c:a4:cc:e1:92:74:f7:d2:
94:9c:87:2d:55:1a:75:73:89:81:8a:db:31:1c:3d:
7d:c0:54:30:ad:9c:42:03:0a:9d:76:2a:c8:7d:7f:
59:3e:69:7c:61:f1:92:6e:21:9a:61:15:76:d6:15:
3b:4a:8a:6a:6a:62:2a:49:ea:36:de:18:b1:a1:4e:
01:bc:ef:58:b5:74:35:76:4d:ae:bc:32:2f:61:0a:
14:e2:3a:6e:c5:c4:c2:a2:64:42:81:98:6b:0e:52:
25:87:01:f1:60:f5:ea:c6:63:85:b5:ce:5d:b2:a7:
24:93:42:8e:60:38:c0:bf:e4:ef:40:c2:f4:06:12:
b3:1c:6b:d0:68:3f:a8:10:39:6f:47:28:6a:13:6f:
f8:bd:05:05:1f:3e:a6:79:88:1f:68:89:df:46:f8:
66:75:50:34:c5:77:7b:79:c1:9a:a9:86:3d:08:a0:
a9:af:e1:14:2c:d1:be:85:09:86:73:3b:72:c7:ad:
5c:e9:34:b2:af:58:ff:ca:f8:05:35:23:64:66:71:
b2:00:54:b3:d4:f7:f2:96:ba:59:e1:75:64:77:1e:
5f:4c:97:fc:37:fb:be:8d:a5:dc:86:24:10:e4:4d:
b4:80:61:52:aa:68:d6:c5:b0:45:c3:f2:b1:35:ba:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F5:71:91:E0:01:C5:6A:D3:BA:0D:D8:22:38:0D:6A:AA:FD:7E:50
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:00:d4:37:72:ed:f7:0b:b3:d2:d3:62:d5:f7:17:c4:41:ca:
5e:3d:25:5b:35:63:da:e3:8a:8c:7a:57:15:19:30:95:2d:ec:
23:f1:49:52:e2:29:2c:f4:c0:08:29:a0:35:c2:20:ca:29:c9:
87:89:1e:24:cc:2c:2f:97:fe:66:1e:2e:f5:37:55:bd:c9:c2:
8b:40:4a:36:cf:94:fa:06:6f:1a:34:6b:89:d4:e2:3b:45:6a:
95:4f:a3:38:74:90:f1:58:34:ba:cc:72:48:5a:28:b2:b7:12:
8b:f6:21:c7:3e:92:47:13:74:17:d9:67:29:91:19:5a:69:60:
9a:c1:b7:e8:e0:1b:da:6a:68:4e:f6:19:02:bf:0c:91:ce:68:
8e:a2:f4:90:05:0c:e1:80:8a:f1:8c:c0:b7:3b:32:d1:44:17:
74:c8:4f:88:c6:75:06:06:14:e5:53:b0:61:7a:61:fa:8e:7f:
b2:cd:6b:bf:74:30:48:a2:40:93:b6:54:21:c9:3c:af:84:29:
41:21:0e:52:18:bc:47:9a:dc:0a:28:71:e2:9f:f6:6c:ce:6f:
27:c6:69:c6:bd:99:39:0a:8c:77:8f:cb:ba:a2:8d:9b:ce:81:
d8:cc:bd:8c:b1:e0:cd:c4:d8:7e:3d:69:78:d5:42:c5:a2:75:
5d:26:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:14 2026 by rpki-client