Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: Ww2Em26Ey/NxgLWVqOfhKtMAK/hUrer5RvJ5nRTwatc=
Subject key identifier: 4F:CD:2F:FF:6E:5D:54:2B:8A:F4:13:C9:4A:23:7B:D7:CC:76:37:4E
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019F8F7E3B5CAD3F91CED1EBFC0179EC80F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0FDD
Signing time: Thu 23 Jul 2026 15:00:42 +0000
Manifest this update: Thu 23 Jul 2026 15:00:42 +0000
Manifest next update: Fri 24 Jul 2026 15:00:42 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: 0CN7XDjv+Brv4eGzKMqwakNU2m1xWL6UigxTZzk3sIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:3b:5c:ad:3f:91:ce:d1:eb:fc:01:79:ec:80:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Jul 23 15:00:42 2026 GMT
Not After : Jul 24 15:00:42 2026 GMT
Subject: CN=4fcd2fff6e5d542b8af413c94a237bd7cc76374e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ff:ae:7a:f9:03:26:af:bb:97:cc:72:2e:0a:
72:a1:23:d6:77:1f:49:c6:17:44:77:ac:1d:61:3a:
de:f8:b4:d7:34:3e:ca:a7:02:85:6d:6b:6b:da:a6:
70:dc:7f:af:15:5f:56:ca:d3:3b:61:d8:88:87:2e:
0f:c1:05:11:87:da:f1:ca:87:e5:07:b2:f4:73:b4:
5d:5e:a9:14:d1:52:ab:74:b4:c8:99:ba:12:18:88:
fd:b2:d6:41:ae:c3:84:c4:90:2a:5c:4c:d5:8f:c3:
54:83:9e:94:86:2f:68:a2:e5:39:16:02:80:26:72:
93:02:be:5e:2f:6b:88:45:a1:b9:28:45:d4:7e:e5:
f3:1c:43:0d:4a:e9:6e:a3:7d:dc:07:a9:c1:25:d4:
ac:d3:5b:03:4e:ab:ec:c9:0c:74:d3:bf:52:95:34:
5f:ef:8d:8c:ce:81:03:44:59:8b:cf:ef:19:8b:48:
cd:f3:0d:2a:af:e6:f2:ee:f7:04:4a:fe:ee:db:ba:
c3:c4:ff:61:5a:75:43:a1:34:b0:ca:64:f2:19:fe:
1f:a0:0b:a2:3c:b6:f3:c2:5d:cd:36:4e:cc:c9:44:
31:17:a8:ac:6f:9b:b2:26:0d:53:41:4d:5c:14:df:
06:ba:e8:c6:95:c6:91:78:20:0e:a8:b5:bc:27:a4:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:2F:FF:6E:5D:54:2B:8A:F4:13:C9:4A:23:7B:D7:CC:76:37:4E
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6b:47:20:8f:0a:69:cc:5b:1a:31:6c:4d:8e:7b:06:0e:e2:
fe:a2:ee:e0:d4:d0:5b:d9:42:8b:dc:86:ce:c6:1e:69:8d:83:
34:d5:2b:5f:26:c2:72:bb:f8:3c:0c:2a:09:4f:0b:23:9a:16:
4e:74:c2:23:58:3d:79:8b:dc:5b:06:7c:1d:93:8f:d4:d7:b0:
71:a3:e9:4a:8c:67:d2:3e:7e:e5:65:48:bf:9b:ce:04:dd:50:
32:d1:da:1e:06:df:c9:00:4e:be:57:8d:81:b6:ca:da:dc:07:
46:35:57:b1:19:90:ef:87:b2:f6:f4:2c:0c:c2:9d:5a:e4:67:
c3:f5:10:2d:c5:12:b4:0e:6e:a6:e5:a5:cc:3b:9f:32:df:ec:
61:0c:a4:6d:41:72:67:6e:3d:bf:b0:cb:0b:09:1b:6b:7c:6f:
5f:de:2f:ad:66:4b:a5:02:86:7e:91:38:38:c0:dd:36:be:af:
03:87:2b:eb:22:26:a8:84:74:84:e8:2c:c7:05:87:55:95:87:
7f:72:c9:17:7b:52:ee:9b:8a:f6:b5:19:d9:7d:9c:04:b0:52:
4d:5f:c9:bc:7c:e1:00:73:a8:55:62:7a:74:82:b4:12:c2:2b:
d8:72:51:00:1c:00:b6:80:f8:d8:de:19:8d:46:09:fe:5d:c5:
d3:8c:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:29 2026 by rpki-client