Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: qI2QTXXgHY1cmS6a6dCID9MK0MgD4puWfO6fLUI+H68=
Subject key identifier: CA:91:09:D3:06:59:E0:8A:FD:29:35:30:BE:BF:D3:C1:CF:0D:EF:CE
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 019F8F47A17C9D67143AC14F7218DEDDBFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 0FCA
Signing time: Thu 23 Jul 2026 14:01:04 +0000
Manifest this update: Thu 23 Jul 2026 14:01:04 +0000
Manifest next update: Fri 24 Jul 2026 14:01:04 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: ASfWoyUn3uSmkMih81l0UGzn78lIXASoVHX31HShm+w=)
2: fqd_p4Wrb6OXddN1aeuYEJC8YH4.asa (hash: jmbRwKrDPkjso/zUasnqP+cDaGWkVpbGq+nQ2VGiSLw=)
3: mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa (hash: 05RPu7PASUup4/F6w6O5WKp82l03RTgAZ/jZKw8NCyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:a1:7c:9d:67:14:3a:c1:4f:72:18:de:dd:bf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Jul 23 14:01:04 2026 GMT
Not After : Jul 24 14:01:04 2026 GMT
Subject: CN=ca9109d30659e08afd293530bebfd3c1cf0defce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:20:a8:67:ae:cd:4b:a1:08:b1:02:6a:e5:
da:d5:33:b1:6e:d7:79:d7:08:04:bc:c9:91:78:76:
6d:43:b7:3f:23:2e:cc:aa:eb:88:87:2c:61:0f:55:
3c:26:73:db:79:2d:a7:8d:c7:97:bf:9e:69:12:eb:
2d:6e:6d:5f:83:47:e3:45:2a:31:b2:7b:47:20:ad:
34:59:be:e4:fc:4f:58:ef:69:4c:42:0a:f8:f0:f4:
b0:21:96:68:c6:89:b3:88:01:fe:96:6a:af:c1:d6:
35:af:5e:17:b7:bb:cb:ae:aa:97:91:27:95:c9:f0:
69:9d:c0:53:2f:f2:15:96:4f:0d:b5:7b:64:70:76:
25:82:73:71:25:4b:30:5e:d5:95:eb:3f:b7:15:ae:
2b:25:08:8b:0e:31:f1:0e:c3:cb:fe:e5:5c:ac:de:
a9:9b:b5:9d:f1:17:a7:e4:31:18:b4:ab:53:cf:9e:
99:36:bf:44:15:97:5f:5c:ba:c7:8b:8c:4e:20:be:
aa:6e:bd:37:ae:83:08:7d:7f:7e:0b:9d:d2:d0:7c:
a0:dd:ab:a8:d6:ee:36:51:f9:ad:b1:57:93:a1:36:
18:24:59:df:b1:07:48:43:56:fd:2d:b5:5c:5a:91:
df:c6:e7:16:5a:92:42:b3:cb:89:e2:ed:5d:c2:fb:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:09:D3:06:59:E0:8A:FD:29:35:30:BE:BF:D3:C1:CF:0D:EF:CE
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:27:f8:c9:db:a9:94:c3:9e:e6:7b:d2:e3:61:b2:9a:38:
04:b3:24:4d:ef:da:7b:a0:70:d7:ba:3e:42:ba:08:39:0f:42:
38:db:6b:6f:2b:b9:03:05:4b:52:e1:ce:2e:a3:8c:94:26:93:
04:2e:b5:a8:7e:b2:b3:65:7e:2c:31:e5:2e:44:f3:14:f5:1e:
6c:cb:02:7a:5c:f2:00:d8:24:f7:82:ce:5d:c3:e2:ad:c0:a7:
01:14:df:8d:c4:55:13:74:0a:a9:66:51:9d:92:f5:f3:92:19:
82:26:8b:92:a2:05:42:d2:6c:77:68:13:a2:6e:3e:9d:31:8a:
23:ed:c6:ac:0f:55:52:f7:0c:27:4d:40:80:87:43:4a:4c:54:
0e:c3:3a:9d:df:80:5d:d1:8d:5c:e8:e9:ad:30:4a:b3:26:a7:
b5:0e:e8:70:31:95:25:4a:aa:81:d8:3e:15:d6:17:4c:59:0f:
15:18:57:1b:64:f6:b6:44:93:01:47:99:84:c6:9b:7c:b2:7c:
d1:6f:58:85:a9:f0:22:2c:d3:12:8d:dd:5c:8a:b9:7a:bc:93:
07:54:0e:14:6b:4a:fe:e1:1b:3f:3f:c1:03:b0:6e:7d:d4:ea:
85:3f:ec:bf:80:69:b2:63:ba:30:c1:12:ab:e3:d8:ff:b9:20:
64:dc:fd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:42 2026 by rpki-client