Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
File: 4TbBQNV8BgOYHZBG1McqrcZJe48.mft (raw, json)
Hash identifier: vuXCWt7u83OlCWn+0uPSmv4MIEQLG+mpiJqA9KbSOBg=
Subject key identifier: DD:8D:59:99:56:F5:5E:02:C8:B9:D7:73:57:9E:9F:38:D9:4D:4E:CC
Authority key identifier: E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
Certificate issuer: /CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Certificate serial: 019F9248B8F1B7581AE3918D90E58E0980AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
Manifest number: 0156
Signing time: Fri 24 Jul 2026 04:01:07 +0000
Manifest this update: Fri 24 Jul 2026 04:01:07 +0000
Manifest next update: Sat 25 Jul 2026 04:01:07 +0000
Files and hashes: 1: 4TbBQNV8BgOYHZBG1McqrcZJe48.crl (hash: FQXge/Lg1lsJ7c76V/rWBRWpTi16Uorm+r4PNs0xP6Q=)
2: flO6XJpnIFOsdZyjDNefmOQ-G_w.asa (hash: MR9nPjOlXBd3N+fXKFHrapKtNEWrnTEaOnHmqRgXcfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:b8:f1:b7:58:1a:e3:91:8d:90:e5:8e:09:80:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Validity
Not Before: Jul 24 04:01:07 2026 GMT
Not After : Jul 25 04:01:07 2026 GMT
Subject: CN=dd8d599956f55e02c8b9d773579e9f38d94d4ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:c0:dd:45:a0:03:7a:af:42:73:2b:69:05:
79:bd:2c:da:ef:9c:06:83:66:60:d3:75:b3:fd:79:
a2:42:c6:eb:a6:21:b9:d7:0f:40:c9:b1:3d:5c:e3:
f6:46:91:75:a3:91:97:7f:c2:d7:9e:ad:34:4a:0c:
18:24:92:e5:d8:ef:3b:02:44:dd:57:30:d5:14:90:
4e:46:9e:fb:1a:37:ad:63:10:ea:d0:63:6c:e9:16:
52:84:db:ea:d8:ce:50:31:03:db:03:91:20:ec:c4:
e7:0a:fa:c5:af:46:94:3e:c5:d6:2b:2e:b5:6e:21:
bb:a5:47:9d:f3:2f:46:7e:5d:a2:aa:a9:41:a5:3a:
5c:f8:04:06:ea:68:3c:5e:72:49:5e:19:a2:eb:a8:
29:db:1d:d8:c1:65:d9:00:20:11:11:d2:67:8d:43:
67:86:3f:fc:b0:8c:92:d1:93:f4:c7:e8:36:cc:37:
78:79:52:15:c9:b8:18:0e:12:00:5a:e1:d5:fd:02:
1a:f2:3e:45:0d:38:6b:05:14:58:6a:d8:03:9a:64:
fc:0d:79:62:ea:63:0f:d0:d6:82:4d:3f:58:2d:9c:
11:96:65:1d:c6:e9:ac:5b:3f:c7:5f:65:84:27:f4:
9d:0f:94:e3:80:72:ef:9d:71:1c:88:20:40:0b:ee:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:59:99:56:F5:5E:02:C8:B9:D7:73:57:9E:9F:38:D9:4D:4E:CC
X509v3 Authority Key Identifier:
keyid:E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d7:2e:8b:34:3d:05:f5:b0:96:90:59:c3:b9:89:db:b5:dc:
4f:6e:74:15:ac:5a:6d:88:c1:21:91:54:0a:98:ae:3d:23:af:
03:a1:d0:27:6c:ed:b5:2d:1c:67:b8:57:29:2a:34:fe:25:ee:
3a:7a:b6:8f:93:c5:ff:dc:0a:e0:b5:2e:89:a9:44:04:c8:4c:
8e:4b:26:0e:80:64:ca:60:ce:93:14:88:77:83:59:31:b6:cd:
05:0c:6f:54:9d:db:80:c7:ea:ba:07:a8:b7:e7:31:4d:57:88:
68:fc:12:54:4d:18:2e:be:f7:ff:06:71:a0:c6:18:c1:1a:6d:
ca:ea:87:06:8d:a1:76:52:a5:d3:5f:c2:7c:35:65:55:ab:2a:
02:90:f9:24:e0:e5:97:6e:9d:0c:38:b6:2c:a2:69:c4:71:b5:
dc:6a:f2:d2:53:14:84:a3:a4:83:d4:6b:93:19:d0:c0:be:6e:
6a:1e:b4:50:53:97:9b:db:39:62:dc:8d:64:ce:30:a6:9f:20:
56:3d:ad:45:90:e9:44:78:95:31:40:e3:1c:c9:50:c1:09:3d:
e4:72:16:67:40:cb:7a:09:a1:b1:a8:21:1f:65:64:f8:c2:46:
e5:65:7f:79:47:47:7a:46:6e:5d:87:4b:ca:72:b5:a2:b2:49:
6b:ac:67:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:35:01 2026 by rpki-client