Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: zYb28IiL779zUUiDcQDcsjo69W/Nh8WH1oFVMZYzZvY=
Subject key identifier: 31:6F:1A:14:AE:47:5F:6C:B6:08:35:19:E5:6B:CE:56:D2:FF:E0:F8
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019FA899D9E2ABA7F3E6467A2C4968636E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0D8D
Signing time: Tue 28 Jul 2026 12:01:22 +0000
Manifest this update: Tue 28 Jul 2026 12:01:22 +0000
Manifest next update: Wed 29 Jul 2026 12:01:22 +0000
Files and hashes: 1: CWBx_YaW55wp0Q8nHPmUDJfmm9g.asa (hash: sICMwCqCa7TLjDMZRJ5VqSQf7cfIQN96H4gFU0ZqRjs=)
2: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (hash: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM=)
3: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: aG6FF5tmcrJoK6nqQUAPboFBugNuNkEsTRe7IUcdhbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:d9:e2:ab:a7:f3:e6:46:7a:2c:49:68:63:6e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Jul 28 12:01:22 2026 GMT
Not After : Jul 29 12:01:22 2026 GMT
Subject: CN=316f1a14ae475f6cb6083519e56bce56d2ffe0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:8a:df:72:d7:e4:4e:b4:67:c8:13:b5:44:
e5:fd:ec:39:73:ff:80:97:23:88:2e:4d:f5:e3:49:
38:62:d0:45:d4:39:98:05:2c:f5:2c:85:27:54:74:
82:1e:6a:be:77:06:26:a1:5d:17:92:b8:b5:cc:e4:
1f:f9:7c:54:f3:7c:95:ad:97:fd:d5:ef:cf:09:bc:
90:94:83:94:26:cc:04:c6:89:81:be:47:fd:23:f3:
b3:0e:04:ab:a8:f8:08:4a:00:89:a9:67:1c:98:c7:
63:32:82:e8:14:20:b4:37:40:12:f4:4f:8e:21:3b:
a4:e2:45:3b:68:98:03:c5:19:1e:31:82:35:f9:cb:
fe:3e:85:16:53:ac:71:70:82:3b:4c:6b:f4:dd:28:
bb:21:53:5a:d4:fe:b1:99:24:02:66:f9:3c:57:97:
36:5b:54:b6:87:27:38:07:2f:d1:fd:dd:95:18:40:
87:3e:63:ce:32:f4:a1:2d:6a:9a:5f:85:db:a1:89:
a3:c6:bd:97:26:93:6b:4d:75:37:2c:86:13:c9:e0:
ff:17:34:a1:54:0f:33:cf:6e:6d:1e:f5:a8:c1:4a:
6a:02:17:51:35:86:99:4e:3b:76:4e:a0:54:b4:35:
41:26:5c:c3:ba:02:af:cd:d7:e1:cc:28:ff:ff:19:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:1A:14:AE:47:5F:6C:B6:08:35:19:E5:6B:CE:56:D2:FF:E0:F8
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:99:7e:5f:86:8d:8b:86:e6:b1:d4:83:46:dc:20:60:69:90:
73:d5:4e:e5:2f:f7:49:d1:c7:32:92:a7:a7:02:27:a6:88:03:
21:bc:8b:93:93:7f:49:e4:15:e1:72:18:c6:fc:15:dd:d6:cf:
ae:9f:64:d5:cd:84:50:e2:73:15:d1:9f:5c:97:b6:a9:01:e5:
00:3c:f4:cb:0c:e1:22:48:d9:32:df:7f:d5:1b:46:68:5e:aa:
07:ad:bf:a8:9c:c7:a8:3c:0a:fc:fd:14:a2:c9:2a:15:c1:29:
35:47:8b:ea:09:07:4e:5b:87:e8:8b:75:82:c9:dc:d6:c6:3d:
f3:b2:de:09:11:22:98:e5:0f:ed:76:62:e9:94:b0:06:3d:fc:
2c:5b:53:6c:be:dd:3d:2d:40:f9:02:0c:cf:b3:bd:87:42:21:
f1:2d:3e:69:f0:a0:07:24:84:35:83:ae:a9:1c:d1:88:37:96:
d0:ff:e5:78:8d:bf:eb:5e:9a:0c:8c:dc:34:4f:5a:6e:9d:e6:
be:a8:11:13:7f:a3:99:14:0d:17:67:b4:28:da:33:fc:97:e6:
4a:7e:e5:34:99:ee:ca:0a:57:3f:6d:58:05:50:ca:f1:ed:3c:
32:1e:56:81:bd:9e:50:ae:39:43:5a:9a:87:7c:05:03:fe:6b:
b7:0e:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:22:57 2026 by rpki-client