Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: XiXdyHwk7IsfLxucpL004X6aNTUZQtw5STklMikSnmw=
Subject key identifier: 63:EB:A2:38:CA:1B:83:E4:87:57:8E:BB:CC:79:B5:17:6F:1C:8D:C8
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 019F9059DF6F00E8C02FCE82F7DCC7D4FA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 19:00:36 +0000
Manifest this update: Thu 23 Jul 2026 19:00:36 +0000
Manifest next update: Fri 24 Jul 2026 19:00:36 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: +02xUAW0y6MEwOo4r8VV19Q+OS/6FIgSnoSD1dKtzh8=)
2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:df:6f:00:e8:c0:2f:ce:82:f7:dc:c7:d4:fa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Jul 23 19:00:36 2026 GMT
Not After : Jul 24 19:00:36 2026 GMT
Subject: CN=63eba238ca1b83e487578ebbcc79b5176f1c8dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:4e:c6:20:20:83:94:f9:ea:12:69:0f:5a:
86:c2:ba:b0:4b:3e:9d:5c:e3:6e:20:2a:fc:d6:8a:
36:41:a3:0e:ab:c2:8d:53:fd:81:66:34:86:fe:8a:
06:8d:de:75:50:05:6a:9c:46:fb:db:b7:23:03:cf:
b8:87:87:0e:01:d1:06:78:1a:c2:c3:95:de:a2:d4:
18:c0:0d:8e:8f:7b:d7:ef:ea:03:7a:f3:e6:cb:66:
52:99:cc:f5:a3:98:f8:7f:e9:50:05:96:e7:b6:e0:
ad:d4:d8:aa:39:a4:8a:1e:9e:b7:50:1f:6c:29:a6:
f9:4c:71:54:bc:3e:60:83:55:2e:b2:d4:3b:e7:bc:
92:39:c1:31:f8:2f:1b:2c:08:fc:6d:50:df:ba:43:
3c:51:4d:b8:a8:fe:77:04:bf:0b:c7:51:77:99:6f:
73:d2:7c:3f:ac:93:75:cd:3a:2f:d6:f1:ef:3f:d5:
0b:ef:70:50:e2:50:63:f7:2f:ea:ae:b8:be:5e:6d:
54:ab:5b:74:0f:12:2b:8d:c8:2d:d0:72:e3:4e:91:
61:a9:6f:da:48:e4:89:da:64:4d:40:d9:11:98:2c:
d5:0b:64:a0:a5:d7:a4:fe:f7:bb:f6:3d:2b:de:71:
ba:6f:8e:63:51:9f:99:2a:ba:e8:b1:d0:45:95:79:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EB:A2:38:CA:1B:83:E4:87:57:8E:BB:CC:79:B5:17:6F:1C:8D:C8
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f7:18:b3:a7:a6:3d:fe:94:e5:4d:72:cd:db:03:34:76:9c:
3c:21:f3:1c:20:db:dd:7b:54:4a:6b:01:d5:4e:d9:74:64:70:
a2:eb:eb:cd:79:4e:34:a3:f8:35:44:b4:3e:5f:7d:89:7b:81:
18:cd:46:ef:b5:d3:34:f9:f5:c6:1c:b5:21:90:24:ab:69:e6:
d6:d7:f3:f6:c8:56:fd:cf:df:99:50:94:05:9c:0e:3f:2e:c5:
2a:57:c1:68:93:41:90:19:4c:14:bb:81:84:b7:38:36:0b:de:
37:0d:56:2c:ec:7b:4a:9b:87:33:d2:a0:f9:f5:90:6e:36:1c:
76:a4:7b:b5:b7:41:14:f9:6a:d6:51:d5:46:65:1c:8c:45:1a:
4a:14:2a:5e:94:da:4c:a9:e2:8d:fc:52:ce:b8:84:03:47:29:
43:39:08:46:07:e8:6a:db:11:83:67:62:5e:14:70:55:53:95:
57:1a:4c:16:d0:76:a1:8b:19:09:27:bd:99:95:11:4f:50:5b:
fc:0d:dc:fa:35:88:da:06:4e:2a:1a:45:79:7e:80:6a:40:39:
19:18:d3:1c:d5:0e:b6:7c:aa:76:52:9b:3c:a1:7e:9b:ea:22:
5f:1c:cd:d3:ae:7c:d3:d6:dd:ca:52:75:c3:97:54:33:f6:67:
73:91:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:26 2026 by rpki-client