
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: hBiKERtIpaXljvkSnPfi5g2SDSDpBr7hJwKtSOxF4IM=
Subject key identifier: 0A:82:18:2B:73:56:68:86:D2:3C:E4:B4:F5:CF:D8:30:9B:FE:85:97
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 019F9090A309500F34189102E057C99886E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 1281
Signing time: Thu 23 Jul 2026 20:00:25 +0000
Manifest this update: Thu 23 Jul 2026 20:00:25 +0000
Manifest next update: Fri 24 Jul 2026 20:00:25 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: XhNjXo/C/qr+2RSV4YAJbQCXkiwjbIjJsGIp5+6EwRc=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:a3:09:50:0f:34:18:91:02:e0:57:c9:98:86:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Jul 23 20:00:25 2026 GMT
Not After : Jul 24 20:00:25 2026 GMT
Subject: CN=0a82182b73566886d23ce4b4f5cfd8309bfe8597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:03:53:bc:59:84:a1:75:1e:be:a0:12:e8:
0c:04:06:0f:7b:d7:1a:1a:6c:42:59:18:31:5d:64:
e4:09:84:24:dc:0e:72:73:f7:b0:1c:85:72:1d:05:
85:d2:8b:5d:80:7e:2a:63:7f:84:7f:9f:ac:05:1d:
5c:d7:d9:02:fb:92:02:93:75:3e:91:f9:fc:ac:57:
aa:96:02:44:c1:da:91:fb:11:cb:06:30:30:bb:8d:
f3:02:f1:f0:06:a7:18:eb:0f:47:35:d4:5f:79:0c:
29:75:48:64:c3:38:03:32:f5:5d:ed:69:0c:ba:79:
b6:c5:de:6f:5e:63:d5:28:d7:c6:33:65:31:34:66:
00:0e:73:07:2a:73:8e:de:6c:ee:b2:36:03:4f:e0:
3f:7d:43:f4:15:2d:1e:e6:91:40:d7:8a:a4:36:51:
5d:99:f4:91:7b:8c:b3:f4:04:17:65:9e:56:26:a2:
7a:7c:08:65:35:d5:d5:48:e2:13:17:20:8d:e7:12:
3e:5f:68:ff:92:b7:95:7a:da:05:5f:45:03:f3:fc:
8b:19:5e:dc:b0:e6:60:db:03:aa:59:ad:1d:34:de:
10:f7:c8:36:b6:cd:b2:c3:c6:fd:3f:d7:7a:7f:26:
6f:7e:e4:4d:ac:e5:fd:46:4a:8f:40:3e:ee:bd:0d:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:82:18:2B:73:56:68:86:D2:3C:E4:B4:F5:CF:D8:30:9B:FE:85:97
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:95:9a:55:95:e6:0a:c1:95:27:55:91:04:31:19:1e:a9:45:
5b:c1:94:37:88:dd:cf:a3:95:5f:64:ab:66:8a:37:52:3e:f9:
8a:54:01:d2:0f:8d:92:0c:20:ca:6b:5e:43:d6:b5:f7:a1:ff:
93:f5:7a:13:8b:4f:ce:b8:ad:d2:0d:a7:8e:a6:10:26:ff:d6:
7b:18:0d:12:07:e6:df:5d:7b:ba:6b:4b:39:d4:49:9e:85:96:
d0:9e:42:ef:3d:62:31:02:4b:07:cf:f8:dd:8a:8e:70:65:fd:
92:ee:da:73:9e:2d:75:a5:86:cf:7e:12:a3:72:09:3d:47:3d:
f9:c5:26:f4:87:ad:3c:69:26:c0:d8:d4:36:fd:ed:2f:8d:d4:
0f:bd:d0:61:d2:7d:50:50:2d:1f:c0:a4:e0:96:7d:bc:d6:43:
5c:df:5d:92:36:61:96:c4:53:94:b1:20:c5:1d:30:99:1f:fe:
2c:ad:05:ad:f3:eb:41:e8:2c:fd:ac:95:70:ad:d8:d8:65:db:
e6:0e:e2:56:f0:53:73:87:30:86:da:b2:49:1b:bd:55:d6:5a:
93:6e:c1:1f:48:18:71:64:4b:74:4e:8e:b1:f6:b0:8f:30:4a:
1d:36:18:87:3e:ae:d8:69:07:56:77:05:9d:1d:bd:35:09:bf:
dc:e5:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:37 2026 by rpki-client