Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: rSx0/fnzhylsWY782cVnO50ihs/5RDyZM6+/Rhr1v+4=
Subject key identifier: 3D:35:51:86:C4:69:B3:DF:AA:CA:DC:F1:0E:70:77:80:36:28:59:74
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 019FA9AC010A07B1CB52CBA214AFFA722897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0E78
Signing time: Tue 28 Jul 2026 17:00:49 +0000
Manifest this update: Tue 28 Jul 2026 17:00:49 +0000
Manifest next update: Wed 29 Jul 2026 17:00:49 +0000
Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: 1sJIyMNojfie2HGwAyHo/lnP/sVamZ3zB9JFudGBAPk=)
2: kngS6K-zD_8sUA397D-FmyaEEHM.roa (hash: EsRQ0EgBwWquSNWV/LYzcwJWySX++9Ff9+FU6ey8IeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:01:0a:07:b1:cb:52:cb:a2:14:af:fa:72:28:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Jul 28 17:00:49 2026 GMT
Not After : Jul 29 17:00:49 2026 GMT
Subject: CN=3d355186c469b3dfaacadcf10e70778036285974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:34:3e:81:54:7b:7a:ca:53:f0:1e:7d:46:
10:ab:78:3b:22:1d:d8:39:43:82:bb:31:2e:3b:da:
58:ad:c0:e1:60:9f:73:64:af:7b:ed:b6:7e:9d:df:
22:c7:05:a9:57:aa:eb:60:bc:c0:0c:d9:46:0d:eb:
07:b4:ec:50:dd:17:37:b4:fb:d4:9b:26:b8:cc:48:
4c:1e:fb:74:04:b6:71:33:af:b7:97:a5:3d:ef:37:
aa:3b:79:e1:2f:88:d4:2b:eb:63:06:5e:fd:b8:20:
7b:a6:95:36:7f:5a:d8:63:38:4f:a0:df:04:ef:7f:
5c:97:1c:04:7f:a6:e0:1b:61:0f:d8:ea:54:dc:a1:
42:57:48:d6:55:47:7e:f3:93:f7:52:28:1d:54:57:
ac:06:63:c8:3a:cb:f2:46:a6:4b:09:3d:e3:73:bf:
11:ab:19:7f:b0:8e:8b:0f:ff:d2:8e:f9:f9:26:66:
aa:ea:b9:a0:5a:cf:1c:03:ca:c2:d4:46:2a:40:4e:
b8:38:db:a3:af:4a:7b:67:75:e8:51:56:ba:31:6e:
61:49:77:9b:0d:b6:e7:05:46:72:fd:17:f8:d0:80:
e9:d9:57:94:5c:ba:81:64:56:f2:a0:cf:fb:50:08:
8c:dd:0b:44:2d:c9:39:f0:92:e2:34:3c:7f:9d:ec:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:35:51:86:C4:69:B3:DF:AA:CA:DC:F1:0E:70:77:80:36:28:59:74
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:90:47:6d:46:41:fd:e5:ff:c0:f9:e4:8a:3b:f6:eb:f4:38:
ef:c3:59:13:a6:d1:5c:ca:d2:f7:40:35:01:72:fd:6c:3e:50:
39:01:67:c4:5f:9f:b5:fe:88:2b:c6:d4:88:41:2d:5b:8c:e2:
b2:d6:cb:af:ba:1e:36:7b:f0:40:41:b3:af:c6:c5:0e:e0:1c:
d2:a4:09:e9:b9:da:6b:62:bb:74:23:f8:7b:d9:4a:f8:f0:7e:
0c:22:77:66:8e:1d:b1:a9:ff:4f:4f:ad:eb:a1:68:c2:62:f0:
6d:09:57:ea:3f:a9:f5:fc:e8:db:19:71:4f:94:a3:e5:9c:83:
6f:b7:33:89:be:c9:c9:d7:8f:a1:0a:f6:d2:b4:27:d8:8c:f4:
7e:d1:12:db:6c:71:53:cc:77:a9:45:fa:8b:70:c9:c0:71:be:
13:e1:c9:91:7e:95:2a:cf:b0:20:2f:d1:35:86:d1:73:11:dc:
c1:12:d5:89:6a:67:32:e7:39:83:3d:95:5c:83:d1:b2:5c:22:
5a:e9:76:16:2b:ef:81:ab:96:5d:20:5d:82:25:c9:f7:fb:67:
2c:94:5f:f6:96:6b:9c:ee:2a:d7:ae:75:43:19:04:2b:71:8a:
a3:60:a2:fa:86:1c:8b:15:16:8d:88:c8:dd:e2:3d:dc:72:45:
b3:f3:cc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:10:36 2026 by rpki-client