Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
File: 4bYF1mYOmDMcLiBJgPKldv30lhk.mft (raw, json)
Hash identifier: zk/OM5+hOWJB01j/DxY5Py1zLv+e+yTrOPKM6RpUXrg=
Subject key identifier: 2B:FB:04:7E:13:49:B8:A3:52:EE:6B:1E:58:A9:2F:86:3C:34:67:28
Authority key identifier: E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
Certificate issuer: /CN=e1b605d6660e98331c2e204980f2a576fdf49619
Certificate serial: 019F8F7E7EEAF966344F6496B11382585386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
Manifest number: 0166
Signing time: Thu 23 Jul 2026 15:00:59 +0000
Manifest this update: Thu 23 Jul 2026 15:00:59 +0000
Manifest next update: Fri 24 Jul 2026 15:00:59 +0000
Files and hashes: 1: 4bYF1mYOmDMcLiBJgPKldv30lhk.crl (hash: k99OFJpm2aLJ7/HdFBq60293j7SblWEMZ+an8OoF8nw=)
2: 5kAvBd30hpJ31v7a5btR1f3C5_c.roa (hash: z1wDX3ExFB1UHqUZVdNED873b9M0TIqJFILLETY+deY=)
3: J4mXmms4TiP28PN9LBCVFRM01HA.roa (hash: VUMEpxKdTm7c58+fUJJlRr+8yRrKuCjq0GD1rQWYd3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:7e:ea:f9:66:34:4f:64:96:b1:13:82:58:53:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b605d6660e98331c2e204980f2a576fdf49619
Validity
Not Before: Jul 23 15:00:59 2026 GMT
Not After : Jul 24 15:00:59 2026 GMT
Subject: CN=2bfb047e1349b8a352ee6b1e58a92f863c346728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:00:c4:cc:e8:a0:a7:55:14:bf:a0:36:de:
55:9e:45:81:2b:be:c5:6b:05:18:5f:3c:e1:59:88:
94:5d:8e:4e:5d:3c:2e:c1:fe:9d:88:2b:bb:25:fe:
74:4a:70:a3:19:de:bb:14:3e:a4:0d:19:26:f1:3d:
48:97:05:c8:f7:a1:07:66:0a:c2:2a:86:0f:72:89:
3e:81:3f:3a:81:21:81:eb:45:4b:b3:d6:f2:cc:09:
62:7f:2f:03:c1:98:d0:b7:13:80:8a:f2:8e:7a:59:
d1:eb:79:26:9b:ac:57:00:49:11:75:90:49:75:0c:
d8:2a:e2:c5:1d:69:9c:e6:a1:07:1c:ae:5e:3d:3c:
a2:11:bd:2e:96:87:a2:1a:dd:0b:dd:b4:b8:9e:d7:
67:c6:96:de:0c:0b:6d:50:c2:70:52:e8:83:b8:57:
04:ae:b6:75:d8:9e:af:ad:db:e6:3d:d8:85:e0:96:
aa:99:48:0d:da:3a:41:36:7b:c3:32:8c:9b:00:b0:
30:63:19:0b:36:ca:01:ae:f3:8d:77:76:d4:93:0b:
4d:af:89:c7:0a:02:b0:67:ad:d9:85:14:4a:53:51:
43:1c:f0:78:82:34:12:58:99:81:78:a4:2e:aa:fa:
23:53:c2:6d:d4:c3:bf:d7:c7:3a:ef:41:54:d8:34:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FB:04:7E:13:49:B8:A3:52:EE:6B:1E:58:A9:2F:86:3C:34:67:28
X509v3 Authority Key Identifier:
keyid:E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d4:a2:a6:f1:2d:6f:54:0f:26:2c:dc:f6:bb:74:c7:31:b9:
42:26:9f:e4:9f:37:90:5f:9e:f4:91:cd:b6:b6:28:5e:56:e2:
85:9d:91:89:be:f3:9f:df:2f:b4:18:aa:72:73:36:d2:a6:b4:
e2:1c:b4:d8:d4:cb:ec:7a:76:d8:71:7b:2a:1c:fb:57:2d:fc:
e6:20:5b:45:ce:a8:5f:35:e4:d0:44:e0:8d:5c:b6:0c:1e:9d:
3a:6a:1e:cf:70:18:f1:c4:1b:30:0a:f4:d8:39:5c:1f:83:cd:
45:0a:dd:28:64:89:ff:49:17:50:aa:dd:7e:c6:33:80:74:83:
0d:53:34:30:57:b7:e2:b7:00:af:b2:bc:21:a4:22:a1:6b:ae:
5a:75:70:97:14:de:af:f3:37:bb:37:86:d1:70:fc:cb:c3:ca:
5a:75:66:c2:68:58:c9:3f:a9:db:3b:c9:2c:08:d1:1a:14:b3:
91:f2:fe:7d:e3:9d:ad:8d:7e:f9:e4:f0:31:ee:05:6c:e0:f2:
f1:a1:da:03:4c:fa:c4:b5:91:bd:7d:7e:06:74:8d:ea:4f:56:
c4:15:f1:cf:da:b4:6d:8f:a4:2a:66:9e:ba:31:c5:df:6d:a7:
93:01:d3:ac:8a:09:a2:2d:ea:dc:95:5c:1c:3f:b8:20:57:5d:
e8:dc:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:23 2026 by rpki-client