Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
File: CTdXHsK0hQX72gnKfqaN69lOAdM.mft (raw, json)
Hash identifier: lxQHqQFvVeuyMwrqd5p3DPAaWygLU76jwMn8tl8n/7M=
Subject key identifier: 4A:78:2F:7F:E3:05:45:66:CB:C7:96:FB:99:CF:88:EA:9B:BB:5A:39
Authority key identifier: 09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3
Certificate issuer: /CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
Certificate serial: 019FAA88A5FA9497FF2F6D49781275F111B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:49 +0000
Manifest this update: Tue 28 Jul 2026 21:01:49 +0000
Manifest next update: Wed 29 Jul 2026 21:01:49 +0000
Files and hashes: 1: CTdXHsK0hQX72gnKfqaN69lOAdM.crl (hash: TKQhZQ5HZh0H2kdi8yQDCSmWMOcb6CZ92ZUKKo+yAVI=)
2: pjNNqrlFdBEk-5LXIPaA2yAX9II.roa (hash: 6xAgp3Y3/YbpjnpdTMNy11kqzchtaR+Q0nGNwxBy1EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:a5:fa:94:97:ff:2f:6d:49:78:12:75:f1:11:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
Validity
Not Before: Jul 28 21:01:49 2026 GMT
Not After : Jul 29 21:01:49 2026 GMT
Subject: CN=4a782f7fe3054566cbc796fb99cf88ea9bbb5a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:5a:a3:e9:5e:97:8c:ca:89:72:50:58:da:
a1:50:96:43:98:f4:48:6a:75:73:4d:2c:d8:c4:e8:
95:03:50:76:f1:a5:63:28:13:48:f8:8a:e8:f5:a9:
6c:2e:b6:44:2b:34:6b:f7:7c:3e:77:ab:75:fd:2b:
3e:7e:48:42:26:d5:1b:83:6d:8e:9f:43:5e:b4:d2:
40:0c:2e:65:44:44:e7:b6:24:9c:cb:f5:39:98:30:
53:a2:4f:ba:5e:b4:87:73:9c:72:9a:3a:ef:02:e2:
e5:42:c5:ee:6d:98:f1:7f:64:6e:30:bc:ed:08:4b:
bb:29:60:04:6d:8d:0b:b6:40:8a:1e:34:7f:53:03:
1a:16:5a:55:6d:89:57:f4:f2:5d:ec:6f:fb:02:26:
c2:ec:d0:7b:15:3e:96:b9:b1:66:04:be:10:fc:38:
8b:81:75:cf:c0:89:35:ca:8f:e6:51:b8:8e:81:72:
e4:64:a3:2e:56:5c:29:43:7c:49:86:06:6e:eb:41:
7a:29:24:78:dd:18:67:a0:59:63:2c:9d:00:3b:b1:
bc:19:92:f7:59:14:b1:80:5b:7b:f1:6c:5c:ef:b2:
8e:42:57:14:b3:33:e0:25:fe:9a:28:22:d5:3f:d5:
70:5a:1f:a1:7c:09:61:a1:43:4f:b4:6e:b4:d4:b0:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:78:2F:7F:E3:05:45:66:CB:C7:96:FB:99:CF:88:EA:9B:BB:5A:39
X509v3 Authority Key Identifier:
keyid:09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:50:92:8c:09:aa:86:86:36:b9:ec:44:63:82:ff:a4:ad:db:
f6:d0:42:62:c2:ce:1c:70:f8:63:ae:e3:08:e2:9a:51:56:87:
36:0f:01:13:2f:f3:1c:be:62:b0:96:09:a4:bb:19:cc:a0:a2:
44:5d:74:26:a2:96:63:f6:19:d0:66:99:62:3f:16:04:03:cd:
fd:ff:76:21:cd:28:eb:8f:34:bb:5e:5d:78:cb:42:1f:e9:b9:
83:c6:b5:95:f0:46:1f:14:99:e6:aa:ca:4c:a3:e0:4d:a0:d8:
39:5d:f5:46:9c:ad:53:c7:7c:41:00:f8:fc:74:72:f6:e7:f8:
74:06:c6:87:b0:50:4b:92:39:e6:e8:44:2b:f0:9a:61:f5:e4:
50:5a:84:9f:f7:2a:24:20:41:4b:40:f7:31:3a:eb:6c:6f:e8:
c9:eb:db:dd:e3:65:eb:4d:e4:b4:7a:5c:09:62:8a:fe:27:51:
78:1b:1d:43:f5:41:07:72:4f:5a:64:55:0b:f3:a4:c7:18:68:
92:16:a6:06:d3:cb:e1:90:4b:1f:d8:5c:46:a9:22:b2:26:60:
c3:53:03:21:04:ba:a9:76:70:0d:76:51:fa:55:f8:84:4a:ff:
95:4d:05:8c:7d:08:e5:4c:2b:43:26:7a:f8:5c:e0:96:e1:1f:
73:16:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:16 2026 by rpki-client