
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
File: 4A98YCwtJIbuagplJAe5BKfUDeA.mft (raw, json)
Hash identifier: 345vmGoYCSpiqN3BzJ5G5Lvcfg/NiD+JJmCbSctch+M=
Subject key identifier: EC:19:54:AD:EF:95:0A:C3:56:9E:C3:F7:52:C6:46:A3:F3:DB:58:D6
Authority key identifier: E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
Certificate issuer: /CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Certificate serial: 019F8F7DE050266B91A21C3501C584460A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:18 +0000
Manifest this update: Thu 23 Jul 2026 15:00:18 +0000
Manifest next update: Fri 24 Jul 2026 15:00:18 +0000
Files and hashes: 1: 4A98YCwtJIbuagplJAe5BKfUDeA.crl (hash: Aav3uh1+iZEW9taobwSepcOEzmyST5nUMYxcsdUvTrg=)
2: XYZAtepajrERzVfepYrQ1WLpJn0.roa (hash: NwsD9n0fR/8scpVFCnvi5VpS0JM3A+KLBhhzQOSTM9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:e0:50:26:6b:91:a2:1c:35:01:c5:84:46:0a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Validity
Not Before: Jul 23 15:00:18 2026 GMT
Not After : Jul 24 15:00:18 2026 GMT
Subject: CN=ec1954adef950ac3569ec3f752c646a3f3db58d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c1:d9:88:9d:46:00:37:f9:d9:b5:87:94:ae:
35:b2:aa:35:2b:ad:1d:0e:15:dc:f3:04:1a:e2:d6:
f2:fc:6a:69:fd:e3:e3:82:25:70:ce:9c:44:58:71:
ce:15:b1:77:fa:21:5b:89:68:75:09:dd:98:82:bf:
97:f6:91:d3:13:3c:c8:99:bb:ba:09:8e:ce:2a:d7:
5d:67:6c:cf:aa:10:10:09:b3:c9:08:f1:94:e9:3b:
dc:e3:33:71:c2:29:87:0b:08:de:15:08:5b:b2:0f:
e7:47:3e:f5:00:a1:9d:a0:e0:e2:5c:1b:80:f4:59:
2d:e7:85:81:59:d9:ce:25:e2:e8:6c:a5:fb:ae:d5:
72:c9:94:85:78:7e:43:51:38:e0:85:59:47:22:87:
cb:64:74:b4:ad:2b:a8:e9:3e:5c:86:da:25:06:df:
fe:84:cc:b8:df:70:b2:92:92:5b:a3:73:37:b1:ec:
5b:81:e3:8e:56:cb:db:9a:cf:f4:8e:ec:4e:42:03:
f9:20:8e:aa:8b:ff:c5:36:eb:18:8e:39:49:6e:5e:
f6:7e:24:1f:bd:cf:e6:e9:e9:14:4e:91:49:b4:0d:
18:a3:51:d1:ff:19:f8:16:d9:c8:39:5b:f9:7d:f7:
12:89:06:48:fd:17:e7:72:a9:66:f0:f3:5a:23:16:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:19:54:AD:EF:95:0A:C3:56:9E:C3:F7:52:C6:46:A3:F3:DB:58:D6
X509v3 Authority Key Identifier:
keyid:E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d8:ab:a1:9a:1d:83:ab:44:24:49:64:09:21:93:58:cf:47:
07:9d:76:2f:fe:bf:59:9d:bd:b4:95:d8:91:61:bd:69:bd:a4:
92:82:7a:54:80:cf:c7:4f:7a:23:b9:94:4b:19:7d:20:d2:54:
27:bc:59:b2:18:49:98:f4:d1:3c:ed:7c:b5:a5:82:54:74:52:
2c:15:a9:0c:79:26:fe:28:21:33:e4:ad:11:6d:13:2f:6f:58:
c5:79:41:42:48:e9:6c:c6:e1:a4:8e:4a:1e:73:8b:46:38:9f:
71:22:4b:e8:fb:44:09:92:69:55:d0:81:c0:bb:27:f2:c1:ab:
19:dd:d2:7c:f8:42:e1:37:d7:66:e9:25:1d:e0:17:8d:cf:a3:
da:fc:fe:13:a5:4f:4e:d5:d4:c9:92:86:30:1c:72:5d:f0:e7:
4e:df:91:1a:03:b9:71:b7:8e:c2:c8:b0:40:05:ef:13:8a:d0:
53:c2:8a:b0:43:5f:3f:0d:f2:bc:19:e7:07:43:1a:54:6f:28:
cf:e7:03:28:f6:93:36:e0:1e:2b:9c:6b:68:f6:52:b2:c0:18:
e1:a5:d5:90:c9:ab:df:18:0a:57:96:7e:49:d0:88:cb:64:6d:
a2:7c:05:ed:e8:9f:e1:01:16:93:86:c8:45:a9:7e:62:3e:82:
c1:ae:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:38 2026 by rpki-client