Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: kOYyT9pAC6unEaF8g5TclqNy5/ss0pgKqSANTMUo+30=
Subject key identifier: 6A:95:BF:E1:5E:E4:B3:33:41:7B:4E:F2:20:B7:77:B4:C7:E3:EB:B3
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019F8F46FABD285ED4612EB2B49037782895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0B4A
Signing time: Thu 23 Jul 2026 14:00:21 +0000
Manifest this update: Thu 23 Jul 2026 14:00:21 +0000
Manifest next update: Fri 24 Jul 2026 14:00:21 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: hfFXzhD+awHK3iXr5k1tkjh+sVj1+jCECZ3aVqU9Ryk=)
2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:fa:bd:28:5e:d4:61:2e:b2:b4:90:37:78:28:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Jul 23 14:00:21 2026 GMT
Not After : Jul 24 14:00:21 2026 GMT
Subject: CN=6a95bfe15ee4b333417b4ef220b777b4c7e3ebb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:1c:f9:6c:6a:3c:48:d4:29:b7:72:1a:e9:
8d:eb:6f:78:e7:23:75:b8:0a:3f:10:66:b8:b2:db:
34:aa:b1:e0:c3:cb:bf:92:a9:80:72:f1:05:18:40:
fc:17:11:1a:03:da:ab:bb:c3:ff:5a:37:79:0e:6f:
3b:39:c7:0c:08:b0:5e:5e:76:2a:fa:8f:6b:0e:4c:
06:e6:06:ea:c8:9b:78:61:d5:d4:1c:fc:ec:34:9c:
86:9f:84:06:d9:34:34:fd:2e:2c:4a:e9:a0:05:51:
b9:e8:97:f2:a5:b0:38:3b:c7:fb:de:69:41:89:18:
a9:c2:1a:c9:4f:7e:13:bf:ce:18:64:64:d2:83:9a:
ef:27:fd:66:92:ae:f5:7b:9f:b9:54:81:72:51:90:
9a:3b:70:4d:ae:21:86:4c:aa:3b:46:03:68:4d:49:
5d:25:13:2f:87:f7:aa:49:c5:cf:c2:c8:82:ac:fe:
a3:e4:3a:d3:4f:33:e2:68:8f:b8:ed:02:d2:33:31:
9f:f9:5c:84:ac:f5:59:4e:de:5e:34:d6:18:c8:f4:
c9:1b:b8:01:18:dd:51:30:78:06:fc:5c:51:2e:dd:
74:d0:11:e1:2a:61:7a:cd:5d:c9:82:59:36:02:c7:
24:42:28:48:9a:8d:91:9d:1c:a8:52:f6:49:cf:8b:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:BF:E1:5E:E4:B3:33:41:7B:4E:F2:20:B7:77:B4:C7:E3:EB:B3
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fc:59:62:c8:ff:52:a3:96:14:47:01:62:0d:9f:95:eb:38:
4c:0e:31:6f:0f:9e:5f:7e:46:27:e0:23:e7:1d:8f:41:c0:6d:
a6:f4:3e:18:89:28:2d:03:2f:ec:08:3e:49:75:eb:cc:e0:f1:
3b:71:3e:5a:43:83:d2:b9:d4:aa:76:1e:4b:8e:58:c2:b4:ff:
d0:d2:28:e8:44:c8:c8:ad:88:ec:9c:b5:c5:80:d4:11:57:65:
39:a0:ed:68:a6:aa:8e:ac:28:c6:2d:31:e5:1d:3c:e7:d0:5c:
4a:c7:5c:01:8f:aa:c1:e6:67:60:6e:9e:22:d0:fa:97:1a:86:
04:42:9f:20:a0:97:b3:8e:14:e1:f3:f9:dc:89:db:a5:40:f9:
da:02:3a:c2:75:70:f4:cb:9f:cc:4b:12:5f:b0:9f:d9:07:e5:
b4:3e:b0:dd:aa:19:cc:dd:46:8e:80:97:17:15:54:cb:68:7c:
99:90:14:08:0c:b3:bb:43:d2:37:e7:73:e3:26:50:7d:63:8b:
fc:dd:47:d2:59:01:bd:35:23:b4:84:bf:bd:d5:65:8b:89:78:
a1:65:b1:33:3e:18:eb:e6:b9:64:a2:e4:3e:a4:27:ee:5b:40:
a6:b1:ca:12:4c:a1:c2:4f:2a:b0:85:95:0d:c6:d4:03:e5:98:
bb:58:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:57 2026 by rpki-client