Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: LOTKeEYE27Qaob+fvxW/SsstTuFdDULvVNkM0u/sIIs=
Subject key identifier: E8:E3:E7:A6:3D:8E:82:6D:66:ED:95:B8:CC:C0:CB:A1:DA:0F:F7:08
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 019F91DB01833CA7A328B29AD56DE5087BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0FBA
Signing time: Fri 24 Jul 2026 02:01:16 +0000
Manifest this update: Fri 24 Jul 2026 02:01:16 +0000
Manifest next update: Sat 25 Jul 2026 02:01:16 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: ZExvKeSZJ2bn7O2LW/CBE5meUDbnG5dZT1i3YL2KQuM=)
2: k6jNcpaTNPSlXj617Gg3gS62Bto.roa (hash: 8LQYJjtnAC4ChUuR0xJhVpC5xdVYrcixNySIFaow6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:01:83:3c:a7:a3:28:b2:9a:d5:6d:e5:08:7b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Jul 24 02:01:16 2026 GMT
Not After : Jul 25 02:01:16 2026 GMT
Subject: CN=e8e3e7a63d8e826d66ed95b8ccc0cba1da0ff708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:28:a6:4a:ca:fe:c5:92:50:5f:d9:1e:8f:
4e:ef:c8:3f:4e:9a:c4:f1:99:f3:4c:19:21:62:18:
df:f6:1c:2d:26:b4:81:6f:b2:e0:9b:e0:da:3d:ea:
38:2a:3f:e3:d6:70:60:da:a1:73:5e:5e:a6:1b:bd:
53:b8:8f:99:bc:75:35:4a:4a:aa:4d:52:ae:b7:3b:
a6:6c:1e:6c:7a:1b:eb:26:0e:a0:ea:30:d9:9b:be:
6f:c7:a0:56:7f:61:5c:a0:2f:98:06:b4:0b:1a:67:
dd:3f:01:07:2a:68:e5:1e:b5:de:ba:4b:f8:92:e5:
9f:17:2d:63:1a:48:c4:ec:06:70:3a:ba:35:90:e8:
7d:aa:be:eb:b9:5f:b8:17:cb:95:60:5b:b0:f9:10:
2a:93:61:36:ff:18:01:5b:57:db:aa:b4:20:82:f0:
0a:30:2e:33:5c:28:ca:1b:b5:43:8a:a7:16:94:6a:
56:b0:d5:bc:d6:84:5c:44:0c:7d:35:b4:dd:67:87:
32:f0:1c:fa:b1:7d:9d:c9:4f:c2:c2:41:fb:3d:fc:
37:d6:89:cf:c7:7a:f3:cc:90:c0:7d:37:82:ea:22:
85:9d:b5:c3:e2:c9:41:54:66:b6:92:cf:96:62:02:
4e:3e:42:ca:e9:bc:ac:57:f8:c0:0c:e4:bb:2a:09:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E3:E7:A6:3D:8E:82:6D:66:ED:95:B8:CC:C0:CB:A1:DA:0F:F7:08
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b0:9c:fb:f0:44:dd:12:ec:a9:ef:c3:61:6e:85:85:c5:3f:
4d:69:0b:ef:97:2f:7c:57:fd:df:f3:b0:b1:c8:62:69:38:48:
7b:05:f2:e9:47:7b:b6:07:af:89:22:cc:ae:2f:50:0f:92:93:
74:ab:9e:ee:70:13:d6:dc:e3:fe:a7:6a:4e:03:de:7d:ce:df:
6e:92:ce:83:9c:09:01:a9:a2:6b:d1:e9:d4:48:b9:f3:94:4f:
01:ed:8f:45:8e:63:b5:c6:56:8a:60:54:2c:a4:e1:73:b8:15:
03:64:67:73:f1:91:94:9a:ab:90:7c:d0:ff:51:f2:d1:76:2b:
07:1c:d2:08:94:90:2a:e1:14:90:d0:8d:4d:62:c0:58:9f:c9:
20:fe:b2:ea:92:ca:25:8d:fe:77:ac:39:89:8e:01:ed:b8:3d:
ae:c4:a8:f7:ed:74:5a:88:c9:7e:7f:47:83:15:ac:14:45:bb:
e6:5e:dd:5c:bf:dc:ea:2e:71:d1:78:7e:8c:e1:25:c6:15:d3:
1b:84:03:0d:cb:0f:34:45:66:27:38:5f:f4:5f:46:98:2b:e8:
6c:f9:e5:c3:65:84:00:8d:46:bf:90:13:06:28:69:c2:a5:d9:
cc:8d:78:b2:f7:81:8b:dc:01:f4:bb:de:96:c2:7d:16:13:a9:
01:7e:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:25:57 2026 by rpki-client