Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: dGSn0s8eZ1nXgSSHwPLP+a7C8hFYMjv1QxhJ660/pKI=
Subject key identifier: DC:A4:96:68:7D:29:5B:29:0D:BC:96:5D:4B:4C:B8:AF:D9:1F:15:39
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019F905A6A1697C1D9E9117E9CBF5EBC9F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0C04
Signing time: Thu 23 Jul 2026 19:01:12 +0000
Manifest this update: Thu 23 Jul 2026 19:01:12 +0000
Manifest next update: Fri 24 Jul 2026 19:01:12 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: kK/Rs5a2roj6dkJGejZplSxrMkwD+q4/Hew3qQi+BTU=)
2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:6a:16:97:c1:d9:e9:11:7e:9c:bf:5e:bc:9f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Jul 23 19:01:12 2026 GMT
Not After : Jul 24 19:01:12 2026 GMT
Subject: CN=dca496687d295b290dbc965d4b4cb8afd91f1539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:d8:50:44:b5:63:c1:f2:2c:27:e8:3b:9f:
b5:fc:59:1e:e8:17:f1:d7:4d:93:32:46:56:9d:de:
db:5e:c7:4a:52:75:ad:c9:7b:0f:50:05:94:59:4d:
7a:f0:d7:f6:f6:84:39:c1:25:be:4a:85:44:d8:c6:
44:6f:62:02:78:ee:0c:13:d2:80:fb:5e:f4:d1:1d:
e5:82:23:7c:cc:ae:e5:b4:cc:c4:67:30:b4:d7:60:
47:c2:bc:34:18:e3:06:69:e7:3e:90:c8:6d:37:24:
a3:90:10:b6:88:1f:1e:b8:bb:94:db:c2:4e:7a:07:
5f:86:93:0a:8e:97:79:58:ab:53:3b:41:56:c4:3d:
9b:28:4d:40:d1:ce:cf:97:81:5a:4a:27:39:e2:9e:
9e:ca:97:9f:e0:9c:db:7e:23:ee:d1:8d:d8:4a:56:
c5:bf:15:4c:7c:79:1d:c6:ce:69:52:6d:0f:aa:da:
e4:68:b9:74:73:69:78:43:f7:b8:52:2b:a5:45:de:
8f:1e:44:3b:c7:d3:71:bd:18:91:03:0d:63:e4:e3:
85:5b:8b:11:a1:97:3c:e1:a0:04:2e:2f:ef:08:a3:
37:f8:33:b4:58:49:83:31:e2:fc:e6:45:3a:2c:01:
d5:c4:b7:e8:04:0c:48:c2:ea:3d:0a:6a:b3:f7:5c:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A4:96:68:7D:29:5B:29:0D:BC:96:5D:4B:4C:B8:AF:D9:1F:15:39
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:bf:ec:6a:61:08:7a:d0:0b:08:c7:c4:24:5b:cb:3f:9a:
85:88:8c:9e:d5:e6:7c:f0:9d:80:f0:a2:f6:d3:c0:9b:59:16:
fe:26:cb:93:9c:ab:27:53:96:39:9a:ae:1b:d2:0c:b9:fb:50:
9b:cc:68:5f:f1:81:47:c4:2d:0d:90:27:dc:48:fd:ea:d6:8e:
50:3c:01:1c:d6:ca:05:91:51:b5:6b:6b:11:51:24:42:10:29:
9d:e9:dc:ef:a6:90:ac:37:37:aa:3a:47:32:ad:0d:3d:58:bf:
3e:c9:7e:91:66:8c:56:a4:50:1c:f1:0d:32:00:fd:74:99:ee:
73:3f:e7:5c:c8:d8:63:00:84:7a:7d:11:f1:a9:41:ca:27:a7:
c7:19:6f:2e:df:1d:68:63:12:80:b1:f1:ff:37:7c:9d:e2:1c:
f8:d4:91:62:40:cb:28:3c:92:1a:e3:9d:9e:5b:d7:de:6c:a9:
a6:dd:6c:3a:46:66:f4:8d:fd:1d:77:48:c4:54:70:fb:ef:6d:
82:5b:28:41:39:02:18:68:2e:9b:52:cc:5b:3d:f3:9f:d1:94:
1a:e0:86:58:27:16:26:3c:de:f4:6f:1a:47:19:5d:83:b0:5b:
19:21:9e:b2:fd:b3:21:8c:83:9b:a3:5e:57:a4:98:94:0a:9c:
4d:93:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:52:13 2026 by rpki-client