
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
File: 4ecyzbRE2qPWyXo6p-olYWNppfo.mft (raw, json)
Hash identifier: X74T4E05PlSoGDe+oRsA9EjdkGAAtRcfqi8D890GsHQ=
Subject key identifier: 4A:92:8D:E3:52:AE:5D:A1:A2:7B:3D:FF:6D:88:F6:FE:5D:D6:08:BD
Authority key identifier: E1:E7:32:CD:B4:44:DA:A3:D6:C9:7A:3A:A7:EA:25:61:63:69:A5:FA
Certificate issuer: /CN=e1e732cdb444daa3d6c97a3aa7ea25616369a5fa
Certificate serial: 019F8F7EF47610C523FD8156F6F965932DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:29 +0000
Manifest this update: Thu 23 Jul 2026 15:01:29 +0000
Manifest next update: Fri 24 Jul 2026 15:01:29 +0000
Files and hashes: 1: 4ecyzbRE2qPWyXo6p-olYWNppfo.crl (hash: iRCOoXfY5uWxPSnoYAxKooF4KJ4+BNbHgkSEhsXsd1c=)
2: mjiRG8iFcsWQeCKhA3dhU2YaGKI.roa (hash: 5JnrHqDc3rO9SelwcHZJMNUvDbp6VX6tnoZGgqUo1zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:f4:76:10:c5:23:fd:81:56:f6:f9:65:93:2d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e732cdb444daa3d6c97a3aa7ea25616369a5fa
Validity
Not Before: Jul 23 15:01:29 2026 GMT
Not After : Jul 24 15:01:29 2026 GMT
Subject: CN=4a928de352ae5da1a27b3dff6d88f6fe5dd608bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:c0:7f:4d:2f:c7:19:08:c5:93:c0:c2:f0:
ee:60:f8:47:71:5c:9e:bd:42:f3:ca:1f:b6:c0:0c:
c8:74:f4:7e:3a:b0:61:65:fa:cc:40:7d:46:23:6f:
93:b2:1c:a1:f6:8b:9a:84:3f:64:98:9a:56:d9:c0:
4c:4f:40:4d:96:a2:39:dd:fa:b3:3c:04:24:a6:a9:
24:b6:15:01:09:a5:df:7d:2e:cd:1b:2b:05:6e:ca:
d5:4c:e8:23:d7:91:0d:bc:e7:98:a3:6f:b4:95:72:
dc:da:90:36:09:aa:89:cf:8d:bf:0b:00:b2:c9:d6:
4f:b5:ad:aa:2e:bf:bd:69:de:c4:21:2f:47:18:57:
6f:7c:6b:b0:cc:71:49:89:fc:06:45:a1:71:7b:d7:
cf:ac:57:80:ab:d5:cd:01:be:8c:9f:5f:fb:52:6b:
46:34:a8:6e:8d:ab:64:1f:98:d7:a1:85:c3:fa:1c:
89:6c:9a:e7:ae:6f:ff:6c:c8:d6:3b:78:dd:d2:c5:
ad:9a:c2:c3:2f:cc:81:81:3a:bb:94:d9:43:ed:eb:
e7:e1:44:ec:dd:b0:ca:f4:45:05:f8:d5:92:99:15:
50:5c:21:34:c2:a2:f9:a9:18:fb:11:1e:68:2a:6d:
bf:c5:f9:46:cd:84:66:1e:65:a3:0b:d8:38:41:b2:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:92:8D:E3:52:AE:5D:A1:A2:7B:3D:FF:6D:88:F6:FE:5D:D6:08:BD
X509v3 Authority Key Identifier:
keyid:E1:E7:32:CD:B4:44:DA:A3:D6:C9:7A:3A:A7:EA:25:61:63:69:A5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ecyzbRE2qPWyXo6p-olYWNppfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/4ecyzbRE2qPWyXo6p-olYWNppfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4a:9d:a9:b7:84:da:cf:b2:ea:f7:8d:a8:14:89:70:c9:0c:
84:fc:9e:5b:5a:bb:4c:51:5b:e1:46:75:f7:8f:2f:27:12:09:
7c:89:b3:3b:72:85:e9:be:1b:35:0b:28:27:a5:cf:d0:d7:e3:
ae:e1:44:74:e1:1b:97:41:a3:ad:08:8f:15:ac:87:6b:95:71:
30:82:4f:d7:4e:b8:08:20:84:c6:9b:d0:00:55:e2:bc:db:64:
c5:5a:be:48:3a:64:f7:f1:e9:f5:92:67:83:f2:3f:cd:3e:c7:
26:e9:c9:73:ea:34:30:ff:0f:ef:f4:61:71:aa:07:89:1e:01:
c2:50:e2:a2:e8:f3:21:de:56:88:52:c0:60:da:3a:35:91:a2:
c4:f2:5b:86:a7:b1:8b:fb:b2:ac:ad:16:78:c9:92:9c:2c:f3:
ca:87:3b:77:b4:cf:6f:1e:07:e7:be:ba:57:d4:dc:56:86:4a:
a4:85:28:7e:78:1b:c7:1e:05:cf:b1:b9:0e:f5:07:1b:21:3d:
e0:10:08:99:33:70:76:5a:39:4e:ef:36:9a:4f:46:b1:0a:45:
5b:d4:11:49:9b:e6:8d:30:1b:8a:ab:3a:9d:54:e1:e7:b6:b9:
be:0d:10:7d:96:b9:e2:95:c9:a7:0d:e5:a2:ee:9c:52:41:61:
04:c8:6f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:22 2026 by rpki-client