Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: 5S0oDNubFICNBqUJIEU9HIrhcp0uNhvRpum++EYKvGI=
Subject key identifier: B3:1A:0F:5C:46:07:AA:D4:DD:C1:31:BD:44:A4:72:7F:AD:93:16:D4
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019F90C7B1BDC11696C0A78DBF35040CCFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 15FF
Signing time: Thu 23 Jul 2026 21:00:33 +0000
Manifest this update: Thu 23 Jul 2026 21:00:33 +0000
Manifest next update: Fri 24 Jul 2026 21:00:33 +0000
Files and hashes: 1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: Me0C2LoFKatn9UCA8xKmNNvrsYnynSEkdAhOLPSq1Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b1:bd:c1:16:96:c0:a7:8d:bf:35:04:0c:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Jul 23 21:00:33 2026 GMT
Not After : Jul 24 21:00:33 2026 GMT
Subject: CN=b31a0f5c4607aad4ddc131bd44a4727fad9316d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:28:d1:66:3d:e6:ef:e1:3d:2a:e8:98:04:
53:c7:50:e3:0b:6f:de:82:92:86:9d:4b:db:d9:1c:
74:22:5c:3f:90:5e:a0:91:c2:37:3d:11:c9:f4:a3:
bc:05:3b:6a:cd:0e:79:64:61:f6:20:4a:fe:5b:a5:
ac:56:fa:f1:64:b1:c2:99:57:6e:30:4f:b0:d6:0c:
9d:e4:57:9c:78:00:41:f8:18:f7:ab:de:3a:a3:04:
19:9c:a5:71:74:69:df:43:12:8d:47:98:84:4c:61:
73:f4:0e:bf:2b:e6:40:bf:27:7c:22:40:bb:2f:5f:
23:b8:cf:53:7b:62:ef:8f:1a:2c:ca:7e:aa:03:9d:
32:ca:d3:01:bc:75:0d:df:f2:63:78:bc:90:11:30:
3e:e3:9e:ad:bc:fd:2d:3f:3a:d2:21:4c:3e:8b:d8:
ea:bf:a0:92:f7:ae:0f:84:84:0f:c4:50:eb:f9:e0:
60:a4:dd:e5:60:fb:ec:cf:2c:f4:a2:ce:62:53:47:
ac:ba:c6:c5:33:35:8d:85:32:43:a8:28:f7:7e:67:
77:19:10:b2:b7:f7:50:53:1a:97:f3:97:92:d0:d6:
5d:d1:1a:da:f4:47:b1:d5:52:19:61:ce:d1:a3:82:
3d:bf:7c:ac:64:da:cb:5f:e2:2c:ba:73:aa:9e:32:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1A:0F:5C:46:07:AA:D4:DD:C1:31:BD:44:A4:72:7F:AD:93:16:D4
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:56:09:69:88:f0:79:7c:29:41:9d:e4:5e:78:a3:ac:59:c4:
db:ab:3b:09:14:3f:22:e4:25:81:8a:7d:eb:4e:d7:10:8a:27:
13:fd:5e:d9:75:6a:35:a1:09:4c:97:6d:c4:ae:e6:09:a6:1e:
c1:66:f4:45:ef:c1:4b:23:f6:17:36:ef:bb:63:a9:7b:20:4b:
c9:15:ef:84:af:08:9a:1b:27:89:06:7f:03:7e:1a:87:7c:ee:
b2:02:50:99:9e:34:48:94:8c:88:76:3e:c4:9c:40:81:8a:17:
c9:37:2c:b6:83:ad:f9:49:f0:b4:27:2f:80:f1:70:9e:83:c7:
53:8b:38:bb:8a:36:7e:eb:6e:e1:71:c4:20:9d:45:89:b3:ab:
a4:db:db:d8:be:d0:ea:de:1c:4d:f3:99:e0:db:8e:06:0c:9b:
9f:4d:26:63:b3:da:9b:70:f0:3f:8b:07:25:d3:35:5c:55:1a:
52:4f:e8:39:9b:de:de:2d:b3:11:95:d0:88:d2:be:a5:5b:ab:
d0:5e:35:5b:c6:bc:bf:88:b9:6f:77:1c:cf:ff:7b:e1:66:7d:
4f:ec:42:bd:16:cb:8f:e0:c2:80:f8:7e:17:67:98:4c:2b:e9:
e4:9d:15:32:11:5b:23:6a:4a:c2:5a:3d:25:c6:eb:7b:d9:de:
d2:a7:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:28 2026 by rpki-client