Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: AGH6bBMefCOiNpv4FEvGfmm6mVq02whqA3DYyl1JQ5w=
Subject key identifier: D7:0F:A8:83:BA:E7:53:2B:01:58:22:25:76:88:E2:4B:76:AE:77:01
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019F9091310AF570AA57E96D692027EDB94E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 20:01:01 +0000
Manifest this update: Thu 23 Jul 2026 20:01:01 +0000
Manifest next update: Fri 24 Jul 2026 20:01:01 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: tHZ5W6vIV0LvmBRgllrfY1P5KoSENp7M7Y/cH+dOJ8I=)
2: KUodnXGsFwyNehqN551Z9d54ZJM.roa (hash: 6vmbRe0Gw7jdU6fIKbRaOK9xmSJJHl1pGRS+mY2Td7Y=)
3: RxQknk-i6X3uYtHklAq4xTvLElU.roa (hash: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:31:0a:f5:70:aa:57:e9:6d:69:20:27:ed:b9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Jul 23 20:01:01 2026 GMT
Not After : Jul 24 20:01:01 2026 GMT
Subject: CN=d70fa883bae7532b015822257688e24b76ae7701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:fd:80:1e:ec:da:d9:22:29:39:c1:24:2e:
cf:ed:78:0e:14:7b:7d:8d:63:7a:78:e4:d6:36:1b:
1e:b0:55:67:f1:e9:d6:b8:63:03:fe:c8:54:17:2d:
f7:ab:53:ec:54:ee:88:0e:df:23:f9:16:9f:65:0a:
b8:7b:3e:a1:5b:31:74:c8:08:ef:ad:6c:9d:4a:4b:
8f:ed:b2:83:67:63:c7:38:ca:31:87:b5:5f:23:26:
5a:07:a8:78:2b:47:b0:50:c9:65:d1:41:5b:a3:f1:
ed:c0:cb:95:57:ac:88:b6:b4:a7:72:0a:61:25:19:
1f:ae:44:a6:2e:2c:92:83:45:fc:02:1f:ba:d7:dd:
02:6f:f9:27:4a:a3:2b:93:3e:47:72:28:61:fa:72:
a0:15:f0:57:0f:38:41:45:a3:b3:fb:7e:2a:af:e2:
3c:75:f9:79:77:37:72:d5:eb:53:8e:a6:50:9f:5d:
60:9a:bd:27:14:54:d3:b4:ee:a5:3c:f8:b4:dd:43:
05:53:61:b4:f1:ee:43:4f:17:d2:57:e1:2c:30:d8:
f2:3d:35:bd:81:df:9e:57:4d:0b:11:99:ad:cd:3b:
26:79:22:93:93:f2:d0:67:71:0a:92:be:7f:fe:84:
aa:dd:d4:80:fb:e8:d7:a2:9e:aa:6f:2f:bc:f9:da:
d6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0F:A8:83:BA:E7:53:2B:01:58:22:25:76:88:E2:4B:76:AE:77:01
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9a:6f:f7:69:d7:26:2d:24:c6:fb:88:e0:87:5c:1f:5c:05:
cf:b2:3f:71:04:db:ac:ef:22:c6:4d:d6:49:d0:2d:c9:b7:93:
04:dc:c5:cd:ad:c1:e6:e7:20:11:c5:3a:da:d1:ac:60:b5:98:
6a:24:f3:73:b2:f8:06:fe:63:67:eb:21:5b:b6:41:60:c8:64:
6e:dc:df:50:42:55:81:d3:3a:e9:71:68:e2:70:30:1e:0a:b2:
1b:9d:ad:df:32:50:dd:f8:f4:4e:06:23:1f:ec:89:61:8e:a3:
df:61:ae:3c:f1:7a:a2:b1:13:89:4b:59:d1:dd:26:44:c2:31:
f0:bb:28:32:89:dc:85:ad:43:38:c3:64:64:9f:b4:b9:c0:9b:
7c:d8:a1:78:83:8d:79:2c:9d:57:a2:0b:39:14:b8:04:46:36:
1f:d6:52:c0:6d:30:90:37:45:0f:9e:52:52:1e:06:2f:83:ad:
b2:62:ec:c8:e8:37:e5:04:4a:8a:e4:79:d0:31:24:02:0e:75:
4a:22:bd:57:d1:eb:f2:25:20:53:c0:56:60:1f:68:5a:1f:ba:
ed:e2:3b:9a:2a:3a:5f:ef:1d:33:1e:4e:ab:2a:85:d1:85:c7:
9f:a9:f5:f1:6d:48:a8:48:b3:cd:7a:4d:65:b5:3c:06:6d:a9:
7e:7e:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:53 2026 by rpki-client