Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: KECtH7yvg8BaFOZl0aajdoAN41Fkp2XuUQZNLUi2XZY=
Subject key identifier: 2E:D4:86:B2:C2:FA:42:EE:AB:38:5D:F8:F8:BD:D1:0D:CA:B3:4C:F7
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 019F90C7F9BEFC096F78D652D90F2F84B932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0DF2
Signing time: Thu 23 Jul 2026 21:00:52 +0000
Manifest this update: Thu 23 Jul 2026 21:00:52 +0000
Manifest next update: Fri 24 Jul 2026 21:00:52 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: cNBI8TBth62NJadKWMGZVfmcAaPi5YIPairptx3WxdA=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:f9:be:fc:09:6f:78:d6:52:d9:0f:2f:84:b9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jul 23 21:00:52 2026 GMT
Not After : Jul 24 21:00:52 2026 GMT
Subject: CN=2ed486b2c2fa42eeab385df8f8bdd10dcab34cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:1f:d3:3b:f4:fa:22:b6:f9:2c:a1:dc:67:
33:c0:69:d0:b2:8a:14:be:69:e5:b5:93:40:6a:09:
f1:f0:db:89:66:7a:17:24:41:f9:88:2b:3c:82:ab:
09:30:b2:ba:52:a5:75:b8:7e:39:59:31:a0:fb:08:
60:a9:5f:01:28:32:50:64:ab:e2:65:94:5f:9d:b0:
15:c4:1c:6e:3b:14:a8:d8:58:47:c1:8a:f2:08:a1:
74:e4:22:d2:e9:79:e7:c5:66:5c:9f:1b:bc:91:14:
85:e7:b2:28:fc:73:54:79:d0:6b:08:d3:7a:6b:e3:
bb:e2:65:a7:1d:99:f9:08:fb:d5:24:df:16:01:6e:
cd:ae:2e:88:2a:32:1b:7c:33:25:95:82:f9:f4:67:
9b:24:2e:72:f2:b8:ee:c0:35:95:a1:c7:95:f9:c0:
6c:94:ec:8a:9c:a5:2b:03:a0:e8:04:70:72:40:ac:
d8:ba:5e:c7:23:41:4f:57:14:c3:52:25:67:0a:92:
ea:af:76:7f:cb:78:41:3c:dd:c2:7e:a8:58:15:f3:
93:0a:06:d8:d6:82:8b:08:8b:0e:d3:62:58:71:54:
90:b9:33:43:52:e2:57:48:ae:ab:91:cf:cd:ee:13:
21:77:31:b7:82:a5:57:01:d8:74:14:a9:c2:54:28:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D4:86:B2:C2:FA:42:EE:AB:38:5D:F8:F8:BD:D1:0D:CA:B3:4C:F7
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f2:06:56:3e:63:97:d9:8e:55:9a:44:f5:59:b3:3c:d1:a0:
5e:7e:6a:6d:97:e9:b6:3e:39:f5:de:9f:ca:ef:b8:ce:4f:58:
2f:04:a6:80:5f:18:a4:d7:6a:c2:7e:a8:d5:52:ad:ba:bb:94:
d0:74:5e:6a:e9:ce:8a:30:db:a3:6f:23:20:4d:d1:f2:a9:c7:
50:5f:31:44:97:63:34:01:b5:ea:15:90:a1:7d:5b:7d:1c:c7:
34:74:02:af:b1:82:70:61:1c:f3:82:ce:d8:d0:f4:55:ed:56:
bb:8f:a9:93:f5:8b:6a:6b:f2:90:30:61:a1:ab:03:5c:33:97:
b4:56:50:7a:26:cf:d7:be:6a:eb:0d:51:3d:e5:9d:2b:a4:22:
65:03:05:7a:09:88:77:a5:c2:09:e1:86:f5:df:57:72:17:6c:
3c:40:b2:9b:d3:2b:34:86:78:1e:bd:2e:b5:89:be:e8:60:b8:
c5:51:2c:e9:b5:91:85:d0:02:6d:28:b5:4e:31:12:08:66:3b:
5c:23:eb:fd:76:18:f8:a4:12:86:af:35:ab:34:c1:f3:5c:a1:
df:dc:4f:fb:48:5b:06:a3:37:46:b3:c4:ab:db:0d:8a:7d:85:
74:38:72:6c:14:f6:f6:2e:5c:27:eb:e6:65:d3:a4:ad:8b:97:
ee:09:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:05 2026 by rpki-client