Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: uEFa0L9asNQSSueGc+JB/LN+DDagcFiba8K194aG4wc=
Subject key identifier: CE:4B:6F:96:6C:52:F0:60:A7:C8:A4:46:D5:C9:8D:F6:AC:46:01:02
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 019F90FE88BCA505B022A27A935E96F2C774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 0D20
Signing time: Thu 23 Jul 2026 22:00:27 +0000
Manifest this update: Thu 23 Jul 2026 22:00:27 +0000
Manifest next update: Fri 24 Jul 2026 22:00:27 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: EIMQdmoOsrzVCIS/klukjTCMxGQJOtyKlRCIGp/Okzw=)
2: _-JfME-Erck4pkvS4WQAD8N3srk.roa (hash: QrEZHXMbaydoz+Hi0SYY4JVGJuxwhF6iX/ilfGhMhOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:88:bc:a5:05:b0:22:a2:7a:93:5e:96:f2:c7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Jul 23 22:00:27 2026 GMT
Not After : Jul 24 22:00:27 2026 GMT
Subject: CN=ce4b6f966c52f060a7c8a446d5c98df6ac460102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:b6:cf:2b:a1:f7:d0:06:72:42:2f:76:23:
40:af:4b:ce:e1:b5:2e:94:16:39:5d:7a:bb:fa:f0:
ee:34:e5:d3:76:d4:87:a7:3b:13:5c:d3:06:82:e4:
d9:5e:80:41:77:0d:65:78:f8:8d:4d:ca:32:e3:91:
b3:c4:f7:6b:a1:f5:fe:8c:47:7a:b4:29:d2:ba:51:
9e:c6:a6:19:44:7d:5e:0f:1d:82:e1:d5:7c:31:0f:
04:c4:c0:d7:ba:66:21:96:ec:ae:ba:c0:2c:7d:25:
5f:0a:22:74:7b:5b:07:01:59:d4:7c:a1:ba:1f:0e:
2f:11:af:dd:44:58:ee:2f:73:20:e9:cd:fb:d9:0d:
29:ab:28:67:46:c9:85:66:c9:d8:43:de:ef:fd:49:
55:a9:50:a3:ac:6d:e1:ea:7f:cf:f6:98:13:dc:4c:
9d:e2:5d:06:02:05:76:ce:cf:b2:a6:85:28:aa:c3:
85:7a:64:ad:73:09:d0:5f:42:54:53:92:67:e4:08:
e6:fc:6a:5c:47:da:ab:5b:94:99:e2:5e:16:38:b1:
76:c7:89:b3:e1:aa:ad:17:21:19:68:a8:04:6f:ae:
ca:fc:e9:a3:29:f1:6e:f8:c1:9a:22:83:7b:d8:5f:
0f:ea:6f:af:ee:d4:4e:9f:a2:d2:a2:48:10:2c:f8:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4B:6F:96:6C:52:F0:60:A7:C8:A4:46:D5:C9:8D:F6:AC:46:01:02
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3b:68:a3:d4:4f:0e:2b:46:f7:54:65:c1:6b:e2:73:00:ec:
78:9d:9f:4d:44:fa:fd:f2:9f:22:e7:45:17:5a:1c:65:32:6c:
d7:52:11:f2:4c:45:95:3e:bd:38:27:f7:7e:57:85:54:80:ea:
ac:d9:09:f7:c6:7b:33:85:a9:ef:4b:b8:58:87:b1:68:82:cb:
aa:9f:e0:c6:fd:1e:20:32:16:b8:76:ea:18:39:f6:c1:2d:57:
b6:6b:50:63:78:23:7b:7a:a2:87:42:a9:c1:b2:8f:3e:01:40:
a8:ed:14:55:42:23:88:c4:1b:26:07:58:53:8d:40:af:21:14:
f2:f5:77:dd:59:10:c4:93:2f:ea:f7:a2:0c:50:91:54:43:31:
80:07:e6:35:c4:49:0e:f4:38:22:c3:82:97:af:42:b4:40:51:
ea:73:e4:91:b5:24:72:37:95:ca:21:76:3b:79:73:1e:53:b3:
46:7e:ca:69:8a:31:9d:21:fb:29:66:a6:d9:36:0d:b6:db:4b:
b8:1e:c9:63:48:88:65:1c:10:12:3c:e1:a2:b7:f8:1e:e3:db:
e2:c7:11:4b:af:f8:30:76:a4:a1:22:08:93:ab:a1:1c:77:c4:
c4:77:a4:0a:a2:c9:f3:36:a8:8b:af:87:cf:1c:1c:40:1f:74:
77:d1:20:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:51 2026 by rpki-client