Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
File: RSsOTTKQu-kEcHOua_f3Gik60vo.mft (raw, json)
Hash identifier: Lx33/twCMYeSPvizCOv2J9NtojtxDvCMjVLIr9eU5/k=
Subject key identifier: E0:C8:10:92:6E:CF:A4:D8:AF:E9:1B:35:DE:A7:FF:FA:5D:C3:00:9F
Authority key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Certificate issuer: /CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Certificate serial: 019F935B3E94F628E4939C57181863129D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:58 +0000
Manifest this update: Fri 24 Jul 2026 09:00:58 +0000
Manifest next update: Sat 25 Jul 2026 09:00:58 +0000
Files and hashes: 1: RSsOTTKQu-kEcHOua_f3Gik60vo.crl (hash: 9vO85uKmb/Y/s8FSlKM9h1Uq9Bvvza2O3LhoLhc4LYk=)
2: exbERZ2VE3H_IUCLP_voeLboHP0.roa (hash: JPKk8iUpWJU1p64IlQPmjoNyJZy0+8MtOgNIjDKxPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:3e:94:f6:28:e4:93:9c:57:18:18:63:12:9d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Validity
Not Before: Jul 24 09:00:58 2026 GMT
Not After : Jul 25 09:00:58 2026 GMT
Subject: CN=e0c810926ecfa4d8afe91b35dea7fffa5dc3009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:1b:2a:10:b6:f7:c6:46:d9:c1:a5:94:41:
45:69:9f:6c:f7:35:00:3a:f3:3c:5f:ed:af:e5:22:
82:dc:49:a4:32:72:9f:88:8c:13:18:b1:72:d9:83:
87:7f:fe:27:04:e0:91:2f:6c:35:07:77:e8:4b:82:
83:53:ba:65:2a:0d:82:fc:02:0b:62:5c:db:5d:dd:
a4:e1:45:fa:c1:cf:99:17:3b:75:31:ff:4d:96:81:
47:18:33:f6:c8:b8:0e:51:68:da:dc:76:a0:d8:7f:
e3:f1:fb:4f:60:e0:9a:ab:ed:f1:b2:59:6e:5a:ee:
69:71:d4:14:30:40:51:24:67:f1:9a:d7:41:65:d5:
77:c2:93:a0:9a:78:16:12:31:b9:90:42:72:1c:d2:
fc:93:fa:8a:9b:33:b6:d6:84:a7:4f:6a:da:bb:77:
5d:61:0f:15:a9:8f:eb:76:90:2a:af:d8:a8:69:53:
3a:73:f1:b5:6d:28:7a:34:68:70:b5:c7:c7:25:ec:
59:f9:c3:fe:e9:9f:d9:03:39:17:a1:21:5c:53:20:
07:ed:85:ab:32:06:ad:fa:de:e7:63:e3:59:7f:e4:
21:e7:75:31:10:05:f2:35:dd:4f:81:5a:58:5b:f7:
22:88:6b:70:11:5b:7d:ac:3c:77:1f:92:2d:df:f4:
fa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:10:92:6E:CF:A4:D8:AF:E9:1B:35:DE:A7:FF:FA:5D:C3:00:9F
X509v3 Authority Key Identifier:
keyid:45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bf:c3:22:05:11:ee:ca:a9:77:fb:66:2b:cb:ba:73:4f:9c:
36:63:75:a2:17:68:2f:a4:67:aa:95:f2:e7:ed:06:0a:4d:e1:
65:09:48:94:62:84:94:55:92:ad:cd:44:32:82:a0:ac:16:62:
c3:27:60:2b:ce:29:d3:a6:7a:b3:48:c7:17:88:20:9d:93:8c:
b4:e9:74:3a:d0:f2:05:fb:3d:06:70:5d:f1:77:63:a9:df:71:
9b:a7:d1:c9:76:a8:13:a7:61:3b:4f:b8:e7:b1:1a:c8:d1:70:
ee:12:2c:04:f3:dd:2e:57:69:c7:0d:7a:3a:b5:d2:fa:df:1d:
ef:67:d6:bf:7d:ba:ea:48:d5:3d:e4:aa:5f:b5:c1:81:b6:8f:
2b:80:c6:08:d1:49:6d:91:64:bd:84:69:68:71:3b:56:f4:81:
61:7d:7e:57:05:cb:c7:28:13:7b:d6:a0:07:0b:d3:55:c5:44:
d6:87:45:40:c8:e1:7e:fa:12:50:ce:94:2d:e4:9c:db:52:79:
56:d6:45:0b:be:4f:87:1b:2f:3d:3f:31:06:1a:80:59:6a:ae:
c6:c4:43:96:46:14:fe:cd:f7:ab:50:6c:cb:80:33:16:6b:86:
a5:59:fa:0d:cb:fe:08:21:f3:13:34:35:74:a9:a2:2e:09:17:
3f:14:db:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:11 2026 by rpki-client