Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: 0GjcAY+nLpZHAnHt8i+4nySLqutRWWcRai+roB3a+l4=
Subject key identifier: 98:56:20:B9:FA:A2:A4:59:78:C0:9B:7E:A8:E9:2A:7A:B1:55:FE:F6
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019F90C7E108632665122226E34E36E5BCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 07C8
Signing time: Thu 23 Jul 2026 21:00:45 +0000
Manifest this update: Thu 23 Jul 2026 21:00:45 +0000
Manifest next update: Fri 24 Jul 2026 21:00:45 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: NFDv7LvMGZVKOREJhjCvrzCFmEIKxcHDqBz0ufmuMqw=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:e1:08:63:26:65:12:22:26:e3:4e:36:e5:bc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Jul 23 21:00:45 2026 GMT
Not After : Jul 24 21:00:45 2026 GMT
Subject: CN=985620b9faa2a45978c09b7ea8e92a7ab155fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:3a:ac:3f:54:be:9a:b5:b5:ca:70:20:57:
45:a1:e5:4c:69:07:44:94:79:f6:84:14:28:4c:4e:
5e:58:63:5a:74:9a:86:41:91:3e:5c:17:61:43:76:
a3:12:f3:18:c8:b0:63:e4:47:70:f9:15:a0:7f:71:
67:0e:79:97:79:d6:9e:6a:ea:c9:fd:0f:23:c0:76:
62:26:75:2f:8c:6f:bc:7d:16:14:f4:d9:c6:c2:92:
09:b7:9d:af:ef:b4:a4:4e:99:68:e7:00:0e:46:8e:
f2:13:75:aa:cd:b3:bc:67:ed:4c:99:ef:f9:9e:b1:
9f:1a:29:94:5b:41:75:c8:4f:f1:94:bc:a4:f2:39:
8f:a2:60:f7:48:c8:a3:91:dd:9b:39:5d:c5:5f:a9:
8e:b8:11:65:aa:a4:98:fe:72:11:94:fb:e6:e1:4d:
bc:98:9c:5e:93:a1:4e:8a:6b:c4:a5:a4:51:1f:5c:
7e:53:c7:76:15:7d:30:7b:53:10:0d:1c:bf:8f:01:
88:a5:74:97:a9:cb:c5:0d:94:ed:d1:50:b1:7f:10:
b6:93:0d:70:19:ca:86:98:e8:e2:88:17:4f:ef:cf:
6e:f9:3c:83:bd:76:10:d7:01:54:aa:55:fc:e6:32:
f4:4b:22:b4:a8:d7:e3:35:3f:bb:00:0d:e6:b3:ff:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:56:20:B9:FA:A2:A4:59:78:C0:9B:7E:A8:E9:2A:7A:B1:55:FE:F6
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:07:83:fd:bd:66:65:d8:5b:ba:47:d2:ae:68:bc:7f:47:5f:
b6:dd:eb:df:3c:45:fd:8f:44:e7:27:aa:32:75:05:e3:b4:0d:
05:74:bc:df:70:15:30:77:0c:bd:8a:eb:2a:ab:85:f1:0f:c3:
42:2c:66:c8:a4:c8:a5:97:32:4e:a1:07:3e:f6:09:14:16:ac:
40:c6:57:49:20:64:e4:93:85:16:55:10:3b:a3:da:b0:df:2a:
77:de:12:66:fb:67:42:18:82:1f:9c:05:b5:ed:69:13:42:33:
cb:1c:63:cf:5e:f3:24:6a:ec:10:59:32:bc:ae:71:dd:45:f8:
c6:7c:9f:a6:6c:06:40:56:62:21:ee:4f:a6:1c:14:0d:58:53:
76:54:1a:42:3a:f3:b3:62:a5:a9:88:c4:99:81:0f:42:0b:65:
67:52:5e:e6:95:94:27:ff:e8:7f:f4:8a:11:2f:af:00:a0:f9:
81:d8:16:69:c4:6f:62:9e:ae:32:9b:07:64:e7:70:be:92:c8:
da:9f:45:91:99:1a:ff:12:fe:e2:1d:c1:6b:a7:4f:c6:f9:4e:
46:cf:09:93:d4:c0:7d:e4:29:0a:15:02:49:fd:6e:6b:66:ec:
d5:01:80:15:c7:54:cc:58:e0:d9:a0:2d:c3:18:6f:f0:61:68:
c0:fb:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:21 2026 by rpki-client