Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
File: 4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft (raw, json)
Hash identifier: HHFpY/sfnkuqu9bfradxW+fX936Wpssgx9d/8zI/240=
Subject key identifier: D1:8D:0F:1D:86:25:7C:29:26:B4:5A:34:AB:5D:A1:B4:D3:24:10:49
Authority key identifier: E0:35:F8:82:FA:6E:EF:25:20:0B:6A:7D:73:78:C2:85:92:6D:8C:9E
Certificate issuer: /CN=e035f882fa6eef25200b6a7d7378c285926d8c9e
Certificate serial: 019F90230CD00EB1535CC26D8C663465B4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
Manifest number: E5
Signing time: Thu 23 Jul 2026 18:00:43 +0000
Manifest this update: Thu 23 Jul 2026 18:00:43 +0000
Manifest next update: Fri 24 Jul 2026 18:00:43 +0000
Files and hashes: 1: 4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl (hash: 8XZUOUEhwmYC6JswDTW2ZW/g3zs5Adf0AflCb5m4qek=)
2: xulwkrdTClCIo8JTMQSPEZiJ5xM.roa (hash: zBwBsovIkxRJ5sWGqQLeI9gfF8IlVwdOJj27qMN+l8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:0c:d0:0e:b1:53:5c:c2:6d:8c:66:34:65:b4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e035f882fa6eef25200b6a7d7378c285926d8c9e
Validity
Not Before: Jul 23 18:00:43 2026 GMT
Not After : Jul 24 18:00:43 2026 GMT
Subject: CN=d18d0f1d86257c2926b45a34ab5da1b4d3241049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:70:bb:35:c5:2f:5a:55:5d:cc:a0:2a:b4:
31:a7:d8:9f:10:be:d4:47:3a:3d:b4:d0:98:67:d1:
ba:60:78:12:fd:57:1b:ed:bf:61:4f:84:23:f0:ec:
3e:4f:49:c1:4f:cc:3c:fd:1b:02:23:05:f5:2a:b3:
f1:c0:58:b2:b6:b2:04:ec:38:b0:2d:96:eb:85:d5:
c9:dd:6d:74:64:1e:82:96:3b:8a:b7:a4:8e:6b:a9:
de:4e:87:95:45:9d:6f:a0:eb:34:f8:32:1c:e3:1b:
45:ff:1c:89:95:4d:c7:40:d0:1d:03:46:19:b5:4b:
ee:23:c2:4a:17:63:39:5c:c8:d1:95:65:6d:f5:17:
29:28:94:50:a1:11:e4:54:71:70:c6:35:db:a8:af:
39:c0:a1:87:32:cb:12:5e:45:a1:60:9f:6f:40:51:
ae:45:6e:6c:9e:bb:ac:ff:b9:d2:d6:c3:a5:34:32:
30:86:48:06:e0:0a:16:9e:71:e6:08:11:72:f7:81:
35:bc:bc:eb:49:11:8c:e4:92:33:75:82:8d:d0:3d:
7c:ee:66:6c:9e:10:77:a9:62:49:79:7a:e7:cb:4a:
55:75:33:ae:6e:98:32:53:82:8e:1d:6f:1b:6d:16:
58:cf:c9:34:57:fc:6c:23:3b:60:ac:8b:a8:c4:f3:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:0F:1D:86:25:7C:29:26:B4:5A:34:AB:5D:A1:B4:D3:24:10:49
X509v3 Authority Key Identifier:
keyid:E0:35:F8:82:FA:6E:EF:25:20:0B:6A:7D:73:78:C2:85:92:6D:8C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DX4gvpu7yUgC2p9c3jChZJtjJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0a71-989f-4052-8b38-27f31b7027bd/1/4DX4gvpu7yUgC2p9c3jChZJtjJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ec:54:53:b6:4d:da:26:6d:e2:8b:39:9d:b9:70:22:c8:6e:
79:1b:6b:41:91:cb:91:d9:02:0a:2b:6e:be:7b:5f:98:99:22:
64:be:68:b6:8f:98:a2:1c:d9:82:8a:76:e3:51:3c:ad:fc:d5:
e3:8c:82:b6:71:58:bd:ba:40:94:76:4d:31:ad:ef:c9:e3:e5:
f9:4c:e5:e0:fc:83:f8:6a:38:69:06:7c:a7:f5:c0:fa:0b:31:
66:40:4c:a6:23:f3:6c:48:08:c1:cb:92:e2:b8:5d:68:d8:94:
28:bb:ad:f6:cb:25:59:2e:00:a2:fc:86:40:66:8f:f4:18:8b:
55:78:9e:7d:e3:04:f8:1f:7b:60:a8:f5:16:96:df:ee:57:b6:
1e:99:7c:f8:97:fd:70:e6:c3:82:38:15:b5:ea:8d:36:27:51:
ae:6a:f1:e3:7f:2a:a9:02:aa:b2:4a:13:f9:f8:1b:e2:cb:ce:
1c:e6:9d:44:e5:f3:37:3a:09:0b:0d:90:88:66:96:68:bf:6e:
9c:6b:62:74:db:15:e2:ae:0a:38:53:0d:b8:8a:93:54:12:73:
c3:e4:34:8c:a9:c4:e9:40:53:d8:9d:b8:e3:ee:65:24:6c:d2:
8a:d6:75:80:06:6c:1e:f6:31:5e:3b:85:c7:eb:09:ad:93:c7:
14:a1:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:44 2026 by rpki-client