Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier: 9+uJva8LvwSzUyN9xxQsYflK24x1pg9AuCSYVMc0J7E=
Subject key identifier: A6:0C:64:25:86:22:2D:18:ED:06:94:10:36:FD:54:02:9E:97:27:34
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial: 019F916CFCEE744C5D8ED9F21C49FE96166D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number: 02A7
Signing time: Fri 24 Jul 2026 00:01:06 +0000
Manifest this update: Fri 24 Jul 2026 00:01:06 +0000
Manifest next update: Sat 25 Jul 2026 00:01:06 +0000
Files and hashes: 1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: jqbWCYYkTr+W9X7ckS6j3JxlYtLO096rLHMWErF/aOA=)
2: Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa (hash: HW7h2XnvN7F3euJL4sahv9OWYDM7sKHWz8LB9hcLvk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:fc:ee:74:4c:5d:8e:d9:f2:1c:49:fe:96:16:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Validity
Not Before: Jul 24 00:01:06 2026 GMT
Not After : Jul 25 00:01:06 2026 GMT
Subject: CN=a60c642586222d18ed06941036fd54029e972734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:2a:40:a1:cc:b3:ba:c0:3b:78:f0:90:64:
c2:a5:e9:b1:c2:4d:6f:22:8d:48:b0:d8:55:ab:5f:
b9:07:18:2f:da:ae:40:d0:55:cd:04:1b:f4:39:7d:
7d:0e:f3:fc:aa:e6:7e:48:71:da:5d:23:34:25:0e:
9d:65:95:2a:fa:25:4f:9a:c3:65:72:65:97:6d:b4:
8c:16:a3:ed:aa:2d:72:1c:c9:8c:c2:99:41:89:70:
3f:66:ed:0b:4b:27:c9:35:70:da:1f:07:79:3f:93:
a3:51:9c:32:be:b1:99:6d:38:7e:20:a5:ac:f0:7b:
4d:01:2c:1f:71:7b:7f:97:5f:78:32:72:c1:d0:b0:
20:c5:8e:a5:03:40:84:9c:77:ea:c6:7a:c7:ad:f9:
77:b0:9e:66:aa:cc:1c:25:94:13:ba:fc:e0:ee:cc:
1e:98:25:3d:57:49:98:7c:19:c6:f0:cb:48:76:75:
f9:b4:a5:5a:4a:59:8f:d2:8f:e2:58:56:22:0e:d5:
c7:a3:8e:ad:a5:ae:6c:61:60:25:f6:48:13:39:34:
c1:fa:f9:1f:78:eb:93:35:37:de:e0:1b:56:99:bf:
01:c0:7f:9b:9e:5d:8d:fc:bb:9e:63:3e:63:82:9f:
90:f8:f1:73:3b:a7:b4:5b:3c:4d:aa:26:bf:7a:c9:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0C:64:25:86:22:2D:18:ED:06:94:10:36:FD:54:02:9E:97:27:34
X509v3 Authority Key Identifier:
keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:48:36:54:99:b5:31:4c:73:07:ec:cd:ba:12:c1:ab:e5:b8:
cc:70:51:b0:45:fb:4d:e3:b5:07:0e:76:fc:b5:87:51:d4:53:
11:81:17:12:75:32:5a:b0:2a:fc:28:d8:96:11:a1:1f:7d:aa:
1b:d1:26:d5:e8:4f:2f:24:3e:dd:d4:88:00:a6:28:11:35:13:
b9:7c:ee:52:4a:79:fd:ac:f2:d9:23:36:bc:bf:77:c8:ce:8b:
c6:a3:e7:87:23:d7:c1:a9:58:8f:e9:0e:fe:ce:bf:f7:eb:ce:
fd:31:2d:57:1c:a6:2d:2a:c6:fa:80:f7:14:4d:58:64:b4:27:
29:bd:a7:cd:50:41:65:af:9e:4f:b0:5b:d2:ef:0f:18:83:4d:
b1:7b:fc:a0:6f:41:e8:f2:c6:65:3c:2b:1d:54:5d:0e:1e:49:
34:2c:13:c7:42:42:1d:46:50:59:13:97:bb:d2:1d:37:85:0e:
b2:48:d3:d1:59:fd:d2:df:58:d2:9d:43:26:a8:1a:b3:cc:f5:
65:ee:f8:9c:07:ad:ff:da:56:2a:3b:8b:e7:be:d9:c1:d9:cf:
ed:ee:e9:ff:07:6c:5a:91:84:97:b9:e1:17:9b:03:3e:d0:60:
fa:f6:b5:84:42:5f:7d:52:ae:cf:24:80:e2:a9:a7:6e:2a:a5:
d2:3e:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:50 2026 by rpki-client