Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
File: 4tjFhzGeOswh3wozQeUSXjdNuiI.mft (raw, json)
Hash identifier: DZqA4b/gURvsAoM6Gz8KeGQsiGMYS3WyFDxuRvwZSNk=
Subject key identifier: 5B:23:85:C1:66:C3:DD:51:41:6D:6B:3D:DD:A5:95:75:5F:E7:AE:EB
Authority key identifier: E2:D8:C5:87:31:9E:3A:CC:21:DF:0A:33:41:E5:12:5E:37:4D:BA:22
Certificate issuer: /CN=e2d8c587319e3acc21df0a3341e5125e374dba22
Certificate serial: 019F8F7F5FCA914BF1117C9F61DE8D60AD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:57 +0000
Manifest this update: Thu 23 Jul 2026 15:01:57 +0000
Manifest next update: Fri 24 Jul 2026 15:01:57 +0000
Files and hashes: 1: 4tjFhzGeOswh3wozQeUSXjdNuiI.crl (hash: NyuGStDE7ypMEsctge96+Gkm3fLhDv/uPC6XCaNcOV0=)
2: zbeKXEtBHivuXewjvv-PutuCHTI.roa (hash: cARCYTy36klUolDqP5aOrJ3kV5YBXwe6iec5qzqNP8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:5f:ca:91:4b:f1:11:7c:9f:61:de:8d:60:ad:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d8c587319e3acc21df0a3341e5125e374dba22
Validity
Not Before: Jul 23 15:01:57 2026 GMT
Not After : Jul 24 15:01:57 2026 GMT
Subject: CN=5b2385c166c3dd51416d6b3ddda595755fe7aeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:bb:f6:58:7d:1b:ad:b3:02:a2:ea:4f:5f:
e4:50:9a:03:76:9e:3a:fc:d8:bb:77:bd:8f:8d:a9:
b6:51:19:b3:cc:27:34:36:f4:b2:87:5a:13:28:f8:
4d:08:b5:48:78:b3:78:16:2c:75:19:65:de:ae:25:
ce:17:c4:e6:2c:2e:62:ff:09:7d:b0:a4:e8:1e:f3:
1e:69:de:8e:90:06:27:b2:60:92:9c:f5:3b:b4:40:
6c:04:96:14:cc:cb:2f:7c:d6:65:7b:a3:91:5b:2f:
f0:f3:07:60:56:e8:29:b9:4b:4e:d3:f8:cc:ed:46:
fa:8f:71:5e:d8:40:94:71:ee:cf:8d:b4:d1:82:d6:
dd:6c:e4:75:7a:b0:5e:63:f2:e6:a6:f9:d5:1e:73:
af:79:d9:c0:6e:e6:72:42:30:3b:4c:44:0e:00:9a:
ee:07:27:dd:e0:3d:5b:7e:01:36:92:42:d3:e0:74:
b8:a3:25:1b:4b:ed:a3:d8:26:e6:48:f0:e4:81:e7:
85:14:fc:d0:1f:a0:c3:39:d6:8c:8d:2d:9d:d5:93:
a5:0b:d6:96:0c:62:6d:4b:2e:54:80:7c:59:00:fd:
f0:8f:85:61:e1:4e:1a:11:4e:11:a4:39:c9:65:94:
99:be:68:40:11:51:a4:6f:66:7c:3f:ac:03:7b:fe:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:23:85:C1:66:C3:DD:51:41:6D:6B:3D:DD:A5:95:75:5F:E7:AE:EB
X509v3 Authority Key Identifier:
keyid:E2:D8:C5:87:31:9E:3A:CC:21:DF:0A:33:41:E5:12:5E:37:4D:BA:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tjFhzGeOswh3wozQeUSXjdNuiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/4tjFhzGeOswh3wozQeUSXjdNuiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ee:27:2d:bb:30:4f:32:af:42:eb:50:9a:9e:a1:98:b2:2c:
6e:19:78:19:90:71:af:54:ae:09:1c:87:2f:b5:44:dd:e8:b0:
83:b2:3c:d1:8e:3f:f7:45:7e:23:07:d6:b4:1f:8f:d1:01:f5:
8c:dc:7d:1b:da:d4:29:66:7c:94:64:cd:31:de:44:70:3a:8c:
4d:06:fe:8a:e9:82:96:a5:61:d2:46:a6:92:0b:1b:99:47:6d:
78:d9:75:72:e8:38:bb:66:04:7a:ae:e6:a6:a1:79:8f:3d:b7:
98:fb:3a:bb:a3:be:32:1c:64:6f:a0:fa:f0:9a:0b:2e:30:f0:
43:65:da:0a:10:4a:97:09:dc:6b:a8:9c:e5:1b:ec:1a:1e:44:
28:23:ef:4f:e9:fb:70:76:5b:94:eb:83:f7:94:42:8d:19:87:
42:ce:10:2a:a7:6f:84:57:18:71:5a:7d:fd:05:5b:e2:bf:00:
c7:14:f5:f7:bb:df:6e:8c:25:42:f2:1b:af:87:d7:72:22:3c:
c6:32:4a:ab:f0:75:14:29:a8:b5:19:6a:ab:42:a6:18:62:55:
50:24:11:33:0b:d1:3f:ae:26:d6:51:73:b1:96:31:43:db:d2:
80:db:ae:70:72:15:b3:74:e4:85:81:7a:a3:b7:cf:08:28:e0:
a9:6f:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:10 2026 by rpki-client