Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: xX4EicgpVeLizs6me8LQbOAniUaQGP4f4iIqTFh8f4Y=
Subject key identifier: FA:61:09:98:D3:EA:16:EF:DC:8E:A1:B5:C2:61:86:85:B4:CD:67:09
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019F93C8AB4F0AD2411685DCAAC7B2069779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 13B7
Signing time: Fri 24 Jul 2026 11:00:29 +0000
Manifest this update: Fri 24 Jul 2026 11:00:29 +0000
Manifest next update: Sat 25 Jul 2026 11:00:29 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: txz/qRAnncy1z1TBoNUiKqlWZWmiV3qLQOy7i9rvukA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:ab:4f:0a:d2:41:16:85:dc:aa:c7:b2:06:97:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jul 24 11:00:29 2026 GMT
Not After : Jul 25 11:00:29 2026 GMT
Subject: CN=fa610998d3ea16efdc8ea1b5c2618685b4cd6709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:a2:f3:a8:83:2c:1a:20:32:b4:15:b4:a8:
78:f5:9e:45:4b:fa:67:6e:17:a7:67:d9:fa:db:b1:
32:d8:89:99:bd:11:93:a5:1c:73:53:11:aa:0e:90:
9a:84:32:7e:67:11:ed:92:ab:35:e4:83:72:a8:8f:
4b:ae:5e:0a:f8:76:1c:08:36:46:98:ab:b1:c6:06:
66:1f:7e:61:b5:0c:23:b6:02:4d:61:d6:3f:d5:54:
d1:fb:e8:e9:c2:45:f7:e4:95:54:27:0d:03:3e:e1:
26:f5:bd:bc:35:28:7b:64:52:73:02:ed:de:f2:9b:
c0:98:1b:90:8e:ce:7c:5b:8a:9c:64:fb:7e:c7:c2:
73:17:86:7f:27:a1:66:3c:12:cb:7b:e7:ed:71:37:
91:de:dc:39:8a:8b:bd:8c:25:7f:ca:5c:05:95:23:
a3:f4:2e:c0:35:b8:c3:bc:a2:7a:a2:3a:39:4e:73:
a8:1d:de:2d:fa:9f:13:39:78:f8:da:85:26:32:03:
12:51:03:ae:bc:f4:8a:82:8c:c0:37:5f:78:96:dc:
e9:8f:b7:ab:db:0a:5f:2b:4c:9b:ac:06:1d:7f:77:
9a:0f:05:31:05:ed:55:ec:80:54:83:76:24:50:85:
ba:07:71:85:0b:99:7d:99:46:8a:f2:70:22:70:06:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:09:98:D3:EA:16:EF:DC:8E:A1:B5:C2:61:86:85:B4:CD:67:09
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:29:a4:22:13:e8:45:e0:1b:a6:c0:8f:d1:85:53:e3:3c:64:
02:e1:02:29:a9:72:42:8a:d4:54:5a:6e:d4:1d:2f:cb:5b:50:
f0:ea:f8:51:51:9f:ff:e3:76:b0:21:ea:25:df:70:81:e7:d0:
fc:c2:3a:99:36:cb:53:a3:be:d2:77:43:03:9a:b5:a0:79:a0:
76:10:f9:50:b2:9f:5e:a4:38:19:d9:d9:47:8e:a1:e2:1d:05:
20:6d:da:84:d8:e2:d2:b1:3c:d3:7e:87:5b:ac:53:5a:02:c9:
3a:f8:a2:ee:ce:b8:d9:80:ca:bc:fb:77:3a:3d:a2:4f:54:9c:
f1:0d:61:90:ab:15:57:64:56:22:c4:20:c2:02:17:bb:a5:08:
5d:44:49:ac:58:3d:b2:22:1d:ce:a5:bb:6e:79:b7:a6:7e:a1:
5d:c0:57:b7:eb:c1:b7:a0:30:d6:cf:8e:9d:89:89:18:f7:07:
79:7d:fb:40:ab:90:76:3b:c2:79:5c:60:d6:ce:31:f6:eb:b3:
61:0d:89:8e:87:c9:c1:4e:3a:92:8e:7a:8e:c8:fb:a7:8e:0b:
df:69:20:86:5a:08:18:bf:9f:b8:21:92:84:5c:35:75:e3:0f:
c3:56:34:cd:1c:b3:34:08:aa:e7:81:7f:67:76:98:68:65:66:
1b:0b:75:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:42 2026 by rpki-client