Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: ua/sxzsNKVhUQhceBB94iD5WsB0VFIo1ChRVichIkZk=
Subject key identifier: 7F:84:D7:AA:88:D6:24:C2:0B:11:13:EC:BA:AA:8B:80:43:B8:B1:E6
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019F9022C8016B5DEFA398A75278C9165778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 0A2C
Signing time: Thu 23 Jul 2026 18:00:26 +0000
Manifest this update: Thu 23 Jul 2026 18:00:26 +0000
Manifest next update: Fri 24 Jul 2026 18:00:26 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: thApMJ/klbDVNW6XGeT0/4wMV42exldJgbrcEb9QQ0M=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:c8:01:6b:5d:ef:a3:98:a7:52:78:c9:16:57:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Jul 23 18:00:26 2026 GMT
Not After : Jul 24 18:00:26 2026 GMT
Subject: CN=7f84d7aa88d624c20b1113ecbaaa8b8043b8b1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:97:a9:91:80:9e:97:d4:93:2d:90:bf:13:
95:c4:41:7a:aa:98:71:51:43:b6:b8:58:77:9c:b3:
b2:27:3b:7b:9e:e6:7a:ab:f8:54:b7:a1:12:39:de:
ed:aa:5f:3b:39:16:70:ce:75:36:a6:4c:fc:41:51:
6e:b4:fe:9a:50:fb:0f:c5:9b:92:1e:5a:99:05:4c:
76:de:01:ad:34:6f:e1:79:39:47:95:3b:40:95:8a:
66:42:6e:b8:eb:51:00:56:1c:ff:0a:11:b6:77:17:
19:3a:29:31:f8:26:78:b5:79:d5:1f:56:1b:c7:32:
01:4e:65:dd:ba:94:a1:c3:34:c6:75:23:48:2b:e4:
30:88:1c:09:b9:1d:2c:50:04:38:7f:09:d1:83:b1:
b9:b1:b1:da:4b:28:3b:5f:fa:ba:da:b4:da:62:17:
83:97:e5:74:10:13:41:8d:28:16:d6:c1:fa:7f:df:
0f:8f:12:1a:8c:3b:e6:46:5b:6f:71:94:b1:11:04:
6e:4c:53:6e:d7:d2:d1:e4:d3:7c:b3:61:ae:0d:a8:
a3:17:63:a5:01:bd:86:55:16:dd:1a:97:58:ed:0f:
4e:91:57:5b:69:70:35:7a:6b:50:39:47:74:6a:bc:
a4:82:bc:1a:4a:9d:c1:c7:27:ac:bd:45:80:44:3d:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:D7:AA:88:D6:24:C2:0B:11:13:EC:BA:AA:8B:80:43:B8:B1:E6
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:27:e8:bc:8e:48:70:fe:80:41:76:a3:e8:16:01:1a:30:30:
72:be:37:ad:f0:3a:00:73:73:e2:64:e5:57:a9:b0:69:ce:2a:
7d:17:e6:9c:4a:ac:9a:fe:19:fc:89:13:7a:20:c6:2b:5c:25:
e5:b3:11:27:90:c7:b0:a6:bd:06:df:ab:d9:21:cf:0e:49:43:
d4:c9:b0:2f:e8:6c:1d:b5:6b:1e:a8:96:38:1c:43:e2:d9:24:
60:2b:8a:db:c0:b5:c6:70:06:c7:41:4f:ec:2f:a6:f7:7a:8a:
de:09:6e:dc:9d:80:4e:2d:22:a9:66:55:86:d3:3e:b1:7f:09:
f6:79:35:d8:87:84:2d:ef:7f:47:0d:35:92:21:a2:00:b7:60:
76:3c:b6:2f:4a:fe:94:78:8b:bc:df:0e:11:c1:bb:45:1c:de:
48:f7:5d:86:6a:17:69:c8:d3:93:08:e9:7b:89:54:c1:b1:b3:
a9:d6:fb:7c:54:23:ba:88:c6:6e:89:94:f6:1f:ec:4f:8b:ae:
a7:ea:02:e3:0d:70:89:49:3b:fa:11:57:24:05:db:bc:88:e5:
91:22:ca:fd:01:68:aa:36:10:05:46:dd:7a:17:17:6e:73:6e:
6b:0e:b1:b3:53:7a:16:1b:74:13:40:16:3f:8d:f8:41:12:c2:
9d:d5:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:44:38 2026 by rpki-client