Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: W9hYFVoqdGel2jaEo8kNa5Fxikr1v+x3A5OhYyHHpcg=
Subject key identifier: 93:E5:42:E7:90:C9:E6:52:B1:F1:ED:13:EE:3B:E9:EE:00:A2:32:5F
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 019F8FB4C13A21DF05E8204ADE54FE4E3680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 19D2
Signing time: Thu 23 Jul 2026 16:00:15 +0000
Manifest this update: Thu 23 Jul 2026 16:00:15 +0000
Manifest next update: Fri 24 Jul 2026 16:00:15 +0000
Files and hashes: 1: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: 0lGMZIfxdNpo9IAZWqc1NdpWB4GkewFvDrZhVi3j2EA=)
2: 5aSu5rDgohcAcFRBlVeL4KQf-Bc.roa (hash: TBrAPV4bOwpXI3ikK/+R0NLpPd2CyHMsQiSsoHb0Hng=)
3: B4UdmI4nMjXvDI9mqvP3jq5Yyds.roa (hash: TvdoyPhTynvytwC8PwcUZrOiE5PXu6aF1+Z/HvWiCkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:c1:3a:21:df:05:e8:20:4a:de:54:fe:4e:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Jul 23 16:00:15 2026 GMT
Not After : Jul 24 16:00:15 2026 GMT
Subject: CN=93e542e790c9e652b1f1ed13ee3be9ee00a2325f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:4f:57:0d:24:77:ab:ae:f4:a3:7c:c7:3b:
2e:17:23:9f:99:c1:0f:be:73:01:a6:b0:e3:97:0d:
7c:9a:cb:a1:73:31:83:b8:ba:f0:c5:74:f0:71:86:
96:ac:f6:2f:ef:42:7b:f7:f5:d9:e1:d0:c6:71:48:
00:df:8e:77:22:8c:36:d9:de:8d:f0:b5:a7:af:53:
18:25:ec:14:bc:cd:d4:7a:f5:5c:3c:99:9d:03:12:
a4:d3:e7:4f:21:d4:89:a2:b2:06:24:db:eb:00:58:
f0:7d:ba:90:72:06:5a:29:93:6a:6f:6b:58:02:4c:
26:18:e0:80:9d:93:47:d6:81:35:1c:4f:4a:ad:37:
e2:74:7c:8e:6c:c7:48:94:5d:21:fd:89:7a:c5:fd:
ad:9f:46:3e:e5:a8:ba:71:b3:eb:59:fd:01:49:81:
30:4f:fa:37:10:ca:84:ab:13:30:53:07:c8:8b:ee:
4e:81:18:31:78:c3:e5:7b:b5:17:25:c8:a0:3d:0b:
4e:11:96:b7:15:2b:d0:60:31:8a:72:5a:a7:79:8d:
de:a8:68:cf:9d:c4:06:6f:06:a2:cd:08:3b:59:e3:
85:53:fd:d1:7c:18:11:27:26:cd:bb:d3:8a:51:3d:
f5:c6:bc:ac:92:d6:31:a6:c0:cb:aa:02:be:09:88:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:42:E7:90:C9:E6:52:B1:F1:ED:13:EE:3B:E9:EE:00:A2:32:5F
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:19:87:7b:e8:6a:4e:ed:9b:08:3e:f6:ad:6e:b0:c3:eb:19:
35:2d:81:25:c1:ca:9a:a0:e6:62:5d:90:b7:1c:99:93:88:0d:
5e:a1:1e:d7:ca:9c:3a:aa:93:e4:73:94:3f:5c:71:df:16:e3:
f6:c4:03:ac:4b:82:94:1b:fb:9d:e6:80:45:99:54:6c:36:fb:
5c:11:98:19:33:5a:d3:2b:2e:37:3d:e6:ba:b1:34:24:54:de:
54:ca:45:9b:05:f4:9f:20:52:78:ad:ad:08:94:c7:3c:eb:85:
93:fc:ce:d5:12:11:81:fc:a9:25:a6:86:d3:08:ab:e9:d2:9f:
80:7d:85:c4:c6:19:01:88:77:08:2d:b9:64:24:5a:51:14:df:
7c:b3:23:f8:0e:df:91:74:e3:c2:03:20:19:21:cb:7d:e0:ab:
80:84:b3:c4:19:0c:87:45:de:b9:93:10:73:dd:35:9b:a7:6a:
b5:87:ac:fa:89:30:06:47:34:0a:18:06:a8:eb:96:6a:fe:76:
9b:b3:86:69:51:36:d9:df:59:a5:54:37:17:e3:a6:76:03:eb:
4e:31:58:90:73:c9:be:a5:da:bd:1f:2b:f5:d7:fb:0b:7f:a7:
b8:e5:30:c2:f1:9f:27:9f:7e:e4:b7:94:cb:c6:4e:91:7c:ee:
ab:05:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:30 2026 by rpki-client