Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: dK3SdeyznD977gBN/FYn0t9R5+lrs7BxAJi1ZI0uZJ8=
Subject key identifier: EC:A1:BB:67:13:7D:DB:8D:0F:33:1F:6B:99:5C:59:A0:79:1B:67:50
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 019F905A408E186CAB08C4432A1E1F34CFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0ED8
Signing time: Thu 23 Jul 2026 19:01:01 +0000
Manifest this update: Thu 23 Jul 2026 19:01:01 +0000
Manifest next update: Fri 24 Jul 2026 19:01:01 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: YvpaIT/8XDy/beXO3Z+nPlSI2luN6mpYWz0fvZV5Itg=)
2: 9WoXYCC1VJqnbGFNUpMF4rAgukA.asa (hash: 4Zq19YZTaukYMmJEdYX0CF4BWbwlExA/FZSk3vxkg/k=)
3: C9aXP0xnVks0GG--bUI7lSn9Og4.roa (hash: 7iquRG4sj7MdDkAUl6cu4d537zzGxzoS3U6EkDKWErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:40:8e:18:6c:ab:08:c4:43:2a:1e:1f:34:cf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Jul 23 19:01:01 2026 GMT
Not After : Jul 24 19:01:01 2026 GMT
Subject: CN=eca1bb67137ddb8d0f331f6b995c59a0791b6750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:31:0e:60:36:c4:da:94:da:bc:1d:64:df:
59:7d:54:36:34:d6:6f:49:38:dd:3f:b9:7d:5f:81:
c4:17:0c:6f:b8:79:72:69:3a:48:f5:6a:81:e2:a3:
09:99:7b:0c:51:8e:2b:eb:c2:27:23:ff:fc:30:3a:
c5:69:28:ca:da:cd:ac:cc:88:3e:86:17:95:69:23:
60:62:19:4e:5e:29:14:99:d0:54:bb:24:72:1b:5f:
c7:43:fb:3d:a2:66:4a:3f:b1:67:60:70:4d:cb:eb:
4f:c7:d3:7a:1f:36:80:c8:d9:9e:7b:88:9d:a5:bf:
d0:a0:7a:43:0b:af:8a:54:9d:ac:5d:69:9e:07:c0:
0f:7a:c7:d1:24:b4:a5:de:eb:7b:92:3c:37:8a:38:
1c:02:1c:86:4a:d1:5c:62:4d:49:6e:e7:0b:e0:1b:
dc:93:81:b4:ce:28:3a:36:d3:9c:70:12:50:7f:51:
be:87:e4:09:6f:81:8b:d7:f5:9f:72:72:38:4d:b3:
d2:11:a5:81:82:7b:1f:96:fc:a7:98:a5:13:f6:48:
4b:9b:8f:98:59:e3:e7:a6:d5:6e:b2:15:1b:f4:dc:
e7:9d:1c:9a:87:ab:ef:c3:8a:4b:8e:a7:f0:6f:3d:
b8:b9:e1:93:30:a6:46:53:16:b0:33:cd:49:62:c5:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A1:BB:67:13:7D:DB:8D:0F:33:1F:6B:99:5C:59:A0:79:1B:67:50
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4c:ae:35:82:55:3d:46:cb:05:cb:95:75:e8:2b:a7:5b:1c:
5f:e1:b7:45:9e:2b:4c:0b:2d:52:5c:dc:bc:80:05:5b:21:fb:
76:38:57:8d:2b:5b:ec:52:2d:d0:6b:1b:81:44:da:27:6e:16:
2c:61:17:a2:e6:d1:45:2a:4e:f5:f1:63:be:27:e6:c1:bb:26:
af:82:85:4a:45:42:a6:af:a8:1a:b5:26:a0:72:20:0b:18:d8:
df:58:63:7c:3e:fa:7e:75:87:56:fa:d6:bf:39:0e:ef:35:e7:
33:4b:f6:82:95:53:59:e7:86:d6:1c:92:65:95:fa:7b:3c:98:
9c:36:96:16:28:3a:1b:78:75:41:64:15:9c:99:fe:cd:5a:56:
3a:34:fd:b6:ac:07:51:4a:2c:4e:0d:1c:fb:76:71:73:6c:49:
90:80:c9:d1:ed:48:98:54:0d:f3:fc:91:5e:66:21:ed:e3:55:
10:26:29:5e:45:89:d7:75:ab:47:ea:93:c4:0a:d6:e2:f9:56:
c8:6b:12:d7:39:f2:51:98:38:b5:f6:22:65:60:d2:1b:7f:d4:
c5:15:5a:22:bb:19:cf:ba:c5:1e:71:a0:61:ff:49:62:4e:40:
64:10:31:0e:e5:73:05:8e:f7:6a:12:10:d0:36:1a:6a:5c:36:
c4:e4:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:33 2026 by rpki-client