Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: FyXf2s2MJwTW/RecYxJG+ctQCIOBVRMHPghJVZJSkyY=
Subject key identifier: 49:FA:63:2E:29:9F:12:79:2F:B8:BE:B2:F3:2E:D2:C8:C4:35:85:8C
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019F9323F97EA632203D1E74449403F88B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 16D9
Signing time: Fri 24 Jul 2026 08:00:36 +0000
Manifest this update: Fri 24 Jul 2026 08:00:36 +0000
Manifest next update: Sat 25 Jul 2026 08:00:36 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: iWfBTgsJSEwiw7Neev2aDdoSfpYOrf+OUxfi/Fhe6Jc=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f9:7e:a6:32:20:3d:1e:74:44:94:03:f8:8b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Jul 24 08:00:36 2026 GMT
Not After : Jul 25 08:00:36 2026 GMT
Subject: CN=49fa632e299f12792fb8beb2f32ed2c8c435858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:7d:0a:3c:76:6f:81:f4:1e:ac:80:8e:11:
d5:52:9e:22:bc:8a:bf:4c:cb:eb:63:f3:a4:5d:c4:
11:91:38:3f:45:dd:f9:f7:30:4e:15:17:b3:77:45:
7b:07:77:79:c4:49:7d:39:09:28:9c:0d:12:90:f5:
5f:ff:31:cc:ca:f1:ce:a6:3c:b8:52:d0:f6:4b:75:
38:b4:f4:59:39:f6:d6:bc:c6:0e:61:a8:23:ac:21:
d4:2d:3f:31:ab:ef:cd:62:cf:f3:b1:25:1d:0e:59:
4f:a0:52:9a:24:fb:ec:af:f9:72:29:d2:81:69:42:
cb:21:74:31:42:52:69:6f:2f:7f:3b:07:d9:d0:5f:
b7:43:31:91:d1:6d:44:94:52:f2:c8:a7:54:fd:d3:
27:ce:e9:9e:1c:9a:12:d1:eb:4d:42:04:94:6f:c4:
61:e0:2f:0f:21:42:c9:6e:a3:80:42:0a:d0:e8:eb:
05:00:16:62:49:cd:15:7b:01:15:4e:7c:51:6d:d8:
13:d7:51:13:03:ef:76:1f:29:47:fd:d7:a5:8f:71:
4c:b9:3c:99:aa:4a:8b:8c:34:e0:b4:3d:d1:80:5f:
1b:ba:3a:9e:b1:08:26:07:f4:b0:cd:f0:d0:dd:5e:
ae:19:92:52:6b:7d:68:ad:b5:96:23:70:5c:7a:4b:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:63:2E:29:9F:12:79:2F:B8:BE:B2:F3:2E:D2:C8:C4:35:85:8C
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e2:ca:49:62:e1:5c:f8:85:01:1d:38:f1:23:96:e9:0f:fc:
83:0d:20:f3:15:98:8c:01:1c:30:30:2a:93:cd:c4:6f:35:db:
22:20:97:10:21:85:b5:ee:1f:28:e2:3c:65:f6:3f:81:6c:78:
06:be:ec:82:83:e1:6a:22:1a:09:83:28:e9:0b:cc:ca:a5:36:
52:f4:bf:0d:87:c3:fa:9e:8f:f6:b9:dc:f2:2f:1c:d2:9f:f6:
2b:b3:d1:4c:60:85:47:55:36:98:f6:07:96:a7:31:4c:af:48:
34:f2:e7:c3:f3:07:6b:32:c4:0f:44:87:e6:47:0f:b4:a5:c5:
42:57:e9:e3:b1:7f:f6:a8:d9:6d:58:90:94:b9:aa:9c:41:12:
90:8b:84:aa:65:19:44:c3:da:ca:e4:64:ee:ff:a2:a1:64:d4:
b2:b9:52:4e:7d:6f:0c:d2:ee:cc:c5:e6:b5:3e:75:9d:7f:31:
a4:2a:20:b2:44:6b:cc:6c:7e:2f:67:f3:b6:1a:8d:94:bd:67:
f3:66:c8:dd:14:a1:10:64:12:0f:95:75:0c:d5:fc:59:70:90:
91:d6:86:d5:6d:85:20:67:ad:17:12:cf:0d:48:a9:fb:8c:df:
67:c5:0f:5d:7a:a4:d7:f4:c8:06:c1:b9:54:19:40:b9:71:64:
7c:a3:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:23:19 2026 by rpki-client