Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: iSE92ZkIBDsRy3pais6Y1YSc5hq2+VJy4RhvstPyYCU=
Subject key identifier: A7:82:37:27:1C:F0:76:95:60:FB:A3:57:09:C7:EB:1B:C6:50:84:BF
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 019F905A81023993917948E0FE54E7E3DC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 1234
Signing time: Thu 23 Jul 2026 19:01:18 +0000
Manifest this update: Thu 23 Jul 2026 19:01:18 +0000
Manifest next update: Fri 24 Jul 2026 19:01:18 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: A5+ULqSAe2v2Wu/u9uORoG5jwYwnLwusqCJheoReoKc=)
2: 6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa (hash: LkG1rsHegbWJdLC+vukY1wOXCMcnkOUFAcxz3/K326I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:81:02:39:93:91:79:48:e0:fe:54:e7:e3:dc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Jul 23 19:01:18 2026 GMT
Not After : Jul 24 19:01:18 2026 GMT
Subject: CN=a78237271cf0769560fba35709c7eb1bc65084bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:de:92:8a:ae:5c:f0:6d:a5:ab:2b:88:c3:
c5:d3:a6:5b:6f:9b:e6:e1:ab:42:da:c2:c4:37:18:
60:6b:86:3d:b6:81:bf:ac:05:a0:f0:99:e3:92:94:
06:74:24:ca:25:4d:0c:2d:0e:0f:c4:90:83:b4:4e:
d8:df:5d:bf:7b:6a:38:8f:77:01:33:31:5f:34:ab:
5c:6b:e7:c7:50:99:62:7d:ca:ca:05:0e:06:7b:32:
36:d6:91:68:cb:35:a9:66:0f:eb:95:cf:0d:26:23:
2e:1f:05:1e:52:b4:81:fa:c3:e6:2f:4b:73:df:b7:
26:02:fe:a5:14:28:7a:0d:af:c9:4f:0b:7e:02:5e:
95:99:04:05:63:e3:af:21:15:ee:28:6c:9a:bc:4b:
54:77:7d:5c:f1:39:ac:77:cc:c4:d5:e1:de:95:e6:
e0:0c:0c:51:b7:59:6e:10:c1:d8:92:a5:9a:6b:8e:
fb:4d:10:37:8a:cb:53:8c:32:6b:7e:89:b3:26:99:
c4:b6:21:6b:7a:d9:d5:32:33:7d:2e:9d:c9:19:d9:
f7:e3:ca:eb:54:66:e1:a0:b1:10:2a:37:27:7c:bd:
90:bd:f9:b6:11:24:4a:08:0c:0a:ea:fb:86:2c:9b:
d6:70:80:4b:9e:d4:23:ed:ea:86:d8:08:5e:6a:01:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:82:37:27:1C:F0:76:95:60:FB:A3:57:09:C7:EB:1B:C6:50:84:BF
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:38:b1:88:f7:e8:a7:d9:0d:46:bc:f5:4c:3d:af:28:2c:b9:
1e:ee:45:d1:f3:a5:a0:1b:74:93:59:f9:ca:20:1d:ba:c3:15:
ed:5a:75:10:3a:59:9c:c5:19:12:a3:a8:75:22:54:be:47:a6:
de:39:cc:de:5c:b3:2b:82:47:a2:69:c1:ee:84:fe:81:09:99:
c1:8f:04:28:b6:6b:dd:e2:c2:58:ff:38:ca:96:8b:2b:95:a0:
df:34:c3:3e:43:f6:fe:5e:e3:c9:1e:9b:54:3c:1a:c8:0b:59:
7a:b8:ad:58:35:74:13:77:dd:55:d5:a8:39:0e:6e:2b:74:fc:
41:4e:e5:ff:e6:1b:48:79:9b:e1:41:70:86:c9:9f:d8:44:80:
e5:d6:be:e7:53:d3:38:42:99:a4:1b:66:73:c0:3d:9a:a3:c5:
9e:66:ff:ed:57:1f:c0:5b:0f:fe:09:df:a0:90:2c:ab:be:90:
f3:b8:0f:20:94:97:86:2d:f5:a4:77:8b:95:bb:10:c1:79:75:
45:53:1d:6d:dd:d9:ed:33:c6:41:55:78:a6:39:aa:31:b1:47:
93:29:67:31:ee:4f:ea:37:81:9e:eb:d0:b6:22:a0:7a:72:bd:
e6:19:9b:3f:5a:30:e9:6c:0f:90:b8:bc:08:ff:3a:31:9c:b5:
ac:93:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:32 2026 by rpki-client