Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: uDYjeJDc1/grDL/QAAi1V5hKS1VgozC7Lgwp+9aNL7o=
Subject key identifier: F0:62:A0:43:F7:98:FB:C6:12:6A:26:D3:DD:A8:A7:7F:B1:AA:0C:07
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 019F916D627E1CAF5510DC364926584FF216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 191A
Signing time: Fri 24 Jul 2026 00:01:32 +0000
Manifest this update: Fri 24 Jul 2026 00:01:32 +0000
Manifest next update: Sat 25 Jul 2026 00:01:32 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: 76O2qJgbYH6RpaKgUyeYWGTIt8jJl9ncQ46xYZ38/Ic=)
2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:62:7e:1c:af:55:10:dc:36:49:26:58:4f:f2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Jul 24 00:01:32 2026 GMT
Not After : Jul 25 00:01:32 2026 GMT
Subject: CN=f062a043f798fbc6126a26d3dda8a77fb1aa0c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:3e:8a:32:4e:e7:39:08:f2:85:cb:04:41:
02:8b:b1:90:4a:dd:5e:1b:60:de:46:fa:6f:e8:29:
19:51:81:0b:14:de:fe:c6:ed:56:0f:39:7e:47:13:
49:51:ea:5b:81:5d:34:5d:2c:6b:75:69:a3:1c:92:
20:0f:dd:3c:d5:56:8a:1e:7d:5b:78:f0:c6:09:e5:
e1:94:f8:81:cc:3d:cf:e2:c5:9f:0a:46:c6:fb:2b:
d4:91:0a:8b:a1:81:28:4d:db:b9:9d:c8:0c:89:83:
9f:e8:af:86:90:0b:db:69:60:80:49:ff:4c:34:45:
a5:be:ce:60:29:23:e3:bc:36:90:b4:ae:96:45:6e:
aa:e3:0a:f5:cc:5d:35:aa:c5:59:8b:89:a9:09:84:
33:bb:2f:bc:20:9a:96:ce:20:e1:14:6a:88:ab:1b:
9b:65:6b:3d:c5:60:9a:e2:90:57:95:cb:df:65:54:
34:18:bf:e4:e3:dc:d8:58:47:6f:7b:11:87:e3:0f:
95:97:60:c2:9b:49:01:b6:f4:c2:ff:84:c5:36:f9:
b8:9f:12:b2:61:c4:e3:b8:91:e9:7e:39:7c:10:fb:
06:47:55:ff:9b:b1:27:7a:2d:9d:0d:19:97:c6:b3:
a8:8f:66:14:3a:6c:04:62:52:db:53:5c:c2:28:4d:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:A0:43:F7:98:FB:C6:12:6A:26:D3:DD:A8:A7:7F:B1:AA:0C:07
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6a:17:de:71:36:30:9c:e7:e0:ff:47:d1:45:27:fc:57:f8:
6b:3b:3b:8f:2f:5f:3f:a7:fa:0a:1c:64:b0:f2:96:fe:b7:37:
2d:6d:97:b3:84:3c:39:c3:94:37:c9:dc:83:55:76:91:03:0b:
56:6d:e7:ca:8c:ec:12:26:7d:da:cc:a5:9f:f1:5a:39:4c:f6:
23:46:38:72:2b:ad:69:fa:f3:75:51:94:d2:2b:4e:21:e2:29:
28:21:f0:22:bd:90:9e:3d:78:7d:98:db:49:28:5d:75:e7:34:
e2:8a:cf:d4:c5:dd:5b:4e:26:88:b4:dd:df:4d:03:f7:fd:e4:
c2:20:01:94:40:85:b3:ae:9c:5b:d3:b8:4b:c0:39:50:6e:70:
f1:7b:92:7f:89:8d:88:4d:b6:70:0a:ab:95:8d:fb:a5:b6:b8:
a8:26:2a:53:c3:bd:7d:b7:ae:a2:6c:a8:2d:81:96:b4:26:9c:
6d:a6:3b:ed:ac:74:3b:89:8e:33:76:82:c4:f4:5f:41:a6:f1:
b7:c1:53:ee:e3:d6:75:8d:e6:c0:5e:ef:19:43:66:4d:de:c4:
01:2b:9b:08:de:71:32:7f:7b:27:23:8b:0e:c4:b6:83:cd:8a:
30:4d:52:83:8e:5e:58:c7:cb:0b:1f:45:9c:90:81:1f:aa:61:
17:c9:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:08 2026 by rpki-client