Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: PRJm3ryhMHb98BTDnrHnDtKsuC2hetX7KZcPucNF+Zw=
Subject key identifier: 4F:F6:83:B3:2B:58:B7:8C:6C:26:B2:04:47:0F:D9:93:0D:35:AE:12
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019F9211209552B4BA059430DAB295AF799C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 1523
Signing time: Fri 24 Jul 2026 03:00:23 +0000
Manifest this update: Fri 24 Jul 2026 03:00:23 +0000
Manifest next update: Sat 25 Jul 2026 03:00:23 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: IuNCmbHpraRYvQmO1IrUswmqCVogN1l+wq1Cr8tiUA8=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:20:95:52:b4:ba:05:94:30:da:b2:95:af:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jul 24 03:00:23 2026 GMT
Not After : Jul 25 03:00:23 2026 GMT
Subject: CN=4ff683b32b58b78c6c26b204470fd9930d35ae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:41:86:9d:54:86:71:a1:b9:b5:80:0a:a9:
a9:db:66:1d:c0:f0:1c:93:9e:d7:dd:97:b3:7a:61:
cc:91:af:80:c5:88:0d:6b:64:76:59:1e:76:f8:9d:
a2:38:c1:eb:fd:24:cc:30:f0:7d:54:39:35:fc:87:
a1:2d:6a:2e:cd:8c:7c:b2:55:83:53:e4:2b:c9:0c:
ce:2a:38:94:f0:b7:34:1a:8f:78:21:53:c6:25:63:
3c:a4:35:90:69:41:27:94:3e:8b:78:3b:1a:e0:3b:
6c:9c:08:93:b5:e4:4d:fa:52:7d:47:ba:1e:a6:37:
36:73:8e:6e:f4:d0:29:3f:49:2e:77:f5:9e:eb:7b:
22:e7:6d:bf:54:2d:85:d7:c4:b7:1c:2d:4d:a2:e5:
9c:94:04:d5:a0:b1:00:08:53:eb:d2:5f:b5:e4:33:
59:81:a6:6a:6b:28:bb:34:79:47:85:9e:5c:9d:bd:
30:b8:80:6b:84:9c:71:37:fa:36:c4:19:8b:ab:16:
6d:01:65:2e:8e:21:93:07:59:04:65:25:de:df:5d:
ce:f0:0e:75:14:11:49:0f:c5:2b:94:64:ce:4f:14:
98:d3:7c:31:44:f5:bd:b6:20:20:71:0a:5d:59:c5:
a2:b1:5e:5f:ba:f3:dc:6e:66:57:6c:03:a6:06:22:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F6:83:B3:2B:58:B7:8C:6C:26:B2:04:47:0F:D9:93:0D:35:AE:12
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:61:d2:f9:06:5a:74:c4:dc:5c:46:a9:22:fc:c5:c3:8f:4a:
a3:14:4f:a2:2e:f2:b6:b9:1e:6f:66:0f:2a:48:8c:47:0c:ae:
52:35:84:8b:96:35:5f:96:06:c9:fc:6b:68:ef:a4:d6:81:10:
48:7f:fa:43:c0:c7:5f:b3:4d:c3:df:a1:77:38:31:bd:08:0b:
5c:76:5c:5a:0e:a4:80:79:09:10:6a:33:4a:e8:3a:f7:0b:cc:
30:fd:95:47:f7:d5:a8:b0:d9:86:30:d3:95:ab:02:a7:f0:a7:
4d:db:52:9d:c6:e1:bc:51:c9:41:ac:96:87:36:ad:ed:c2:8d:
fb:d9:8f:5c:33:6c:8d:6d:48:d0:e5:ec:53:9a:bd:76:89:37:
dd:5e:c5:40:b1:9a:20:6f:94:31:3c:d0:3b:36:e2:ca:29:c3:
56:c8:33:3a:5c:82:94:0d:15:38:2e:f6:fa:23:7d:de:e4:28:
c2:25:7a:77:ff:3d:ed:10:35:de:d7:1a:bf:5a:de:51:4c:18:
5f:aa:7d:64:08:fa:dc:bf:72:70:fd:65:a4:1b:46:9d:82:06:
48:f4:d4:7b:6e:62:b6:3c:a4:99:9b:de:a8:87:33:88:10:94:
96:0b:dc:53:3e:90:d7:8d:a1:22:42:1f:d3:d7:bb:8d:eb:4b:
ee:1e:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:55 2026 by rpki-client