Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
File: mFW4DEXftep6qn3R2O2LFPnB3EU.mft (raw, json)
Hash identifier: FTgVwNszzB0i0xfnRg/YnPdxs/mSJ3HMMQyV7rYlbxw=
Subject key identifier: 6A:0B:46:38:6F:9E:A9:0F:4F:C6:97:D9:81:32:A2:D9:52:73:21:6D
Authority key identifier: 98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
Certificate issuer: /CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Certificate serial: 019F935C4B3B057138CE9B3257244B91BD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
Manifest number: 04B3
Signing time: Fri 24 Jul 2026 09:02:06 +0000
Manifest this update: Fri 24 Jul 2026 09:02:06 +0000
Manifest next update: Sat 25 Jul 2026 09:02:06 +0000
Files and hashes: 1: V40XeqVh6l4DbCmS7UQsikJ2-iM.roa (hash: 5u4CbQ5JG4yrJVoWscvPthJuNktPYvJ7kXfZHFgxd10=)
2: mFW4DEXftep6qn3R2O2LFPnB3EU.crl (hash: ii085yTkox5gMSOXXgwWkN7kRgAp6be86ixCTKggoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:4b:3b:05:71:38:ce:9b:32:57:24:4b:91:bd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9855b80c45dfb5ea7aaa7dd1d8ed8b14f9c1dc45
Validity
Not Before: Jul 24 09:02:06 2026 GMT
Not After : Jul 25 09:02:06 2026 GMT
Subject: CN=6a0b46386f9ea90f4fc697d98132a2d95273216d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:06:75:fa:2f:cd:9c:a6:b0:bc:79:5b:0d:
bc:da:71:9e:3c:06:24:d3:6a:18:84:d0:dd:11:3e:
10:9a:63:d7:c1:7c:94:75:92:c0:8e:f1:1b:20:a9:
0a:16:be:1d:91:0e:76:bf:8b:ce:29:d3:7b:fa:a7:
7f:3c:2c:ff:a6:8d:aa:ea:e6:32:58:20:84:54:17:
18:0b:b5:0b:27:29:24:94:df:81:cf:b9:fe:c1:14:
2e:d2:a0:b8:22:e4:7d:b4:23:fb:9a:57:40:eb:5c:
af:b0:cd:f6:10:24:6f:01:87:29:8c:06:21:63:3b:
d5:ad:f3:56:85:22:24:32:63:ab:9d:fb:91:25:24:
7b:8d:53:95:13:fb:5c:8c:03:bf:17:46:31:bf:0e:
f0:b1:77:bf:d9:9d:c5:86:e5:40:dd:06:f0:f1:9d:
33:4e:90:3e:ec:df:09:45:53:3d:9b:21:99:ed:93:
36:c7:20:32:ba:24:87:e9:90:81:27:1d:d2:bc:70:
64:95:ae:2d:96:2b:e0:7c:ea:4f:19:83:30:b9:67:
b3:13:57:b6:59:0e:cd:50:a0:5c:97:a1:4b:4c:fd:
f2:df:ab:2e:91:78:49:74:fc:fb:72:57:d2:56:ed:
44:0b:5f:22:21:72:67:47:89:b7:79:91:2e:33:fa:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0B:46:38:6F:9E:A9:0F:4F:C6:97:D9:81:32:A2:D9:52:73:21:6D
X509v3 Authority Key Identifier:
keyid:98:55:B8:0C:45:DF:B5:EA:7A:AA:7D:D1:D8:ED:8B:14:F9:C1:DC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFW4DEXftep6qn3R2O2LFPnB3EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3a6bb4-24b8-4086-a29d-ee6c509b6221/1/mFW4DEXftep6qn3R2O2LFPnB3EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6a:cb:83:b8:7f:20:c5:da:ce:78:44:cb:27:e4:12:76:a7:
bf:51:fa:56:f5:1d:59:a9:ea:cf:66:b0:5b:4c:e4:bc:3f:31:
0d:76:40:aa:6e:f1:43:42:b8:ed:6a:eb:79:8e:0e:fe:17:8d:
a8:0c:bd:3a:bd:08:6c:5a:4e:cc:ef:bd:a3:54:86:b8:e8:a5:
12:3b:06:03:7e:be:42:39:7e:b8:e6:61:1d:5c:fc:23:21:ea:
37:2d:40:61:4d:f5:04:a8:d3:c9:cb:5d:d3:cb:7c:57:78:91:
f3:b8:27:49:f7:04:54:56:02:b6:ac:5e:48:9a:c3:72:bd:c4:
a9:c6:aa:2f:58:62:4e:09:e7:4a:1e:d9:8f:1e:e0:9f:a7:e8:
32:be:75:b7:b2:d8:1c:58:b4:1c:bf:ba:d8:9c:3c:45:1b:3f:
3d:f3:17:78:b9:56:df:c2:58:a3:cd:e6:43:57:ee:65:be:35:
f5:a5:42:59:9c:84:db:cb:4e:32:1c:58:ec:07:ae:ec:26:4c:
e1:4c:45:09:fe:e5:fd:0e:62:cf:fc:fb:6d:dd:07:24:d4:7e:
aa:ac:df:77:2e:fb:af:92:16:70:9e:14:8d:48:b2:55:f4:99:
09:4b:e9:60:28:a2:d0:fe:b6:2c:44:69:34:ea:65:8f:3d:d6:
b8:b9:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:21:44 2026 by rpki-client