Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: /fkOgAULPsuw41q/K25sge2R1+NQ6YUrxTEq9M7WC3c=
Subject key identifier: 38:FB:3E:51:F5:B2:21:7E:85:40:2A:2C:1E:53:70:6B:89:71:20:9E
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019F90233FE20CB7404350D2CD57A0FDF7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 0A8C
Signing time: Thu 23 Jul 2026 18:00:56 +0000
Manifest this update: Thu 23 Jul 2026 18:00:56 +0000
Manifest next update: Fri 24 Jul 2026 18:00:56 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: BgowbZRyvYcUT4dvgfmenU0z6kcHJGW6ggBdx1DoybA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:3f:e2:0c:b7:40:43:50:d2:cd:57:a0:fd:f7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Jul 23 18:00:56 2026 GMT
Not After : Jul 24 18:00:56 2026 GMT
Subject: CN=38fb3e51f5b2217e85402a2c1e53706b8971209e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:03:c0:07:2b:87:78:ee:11:a3:54:74:3e:
60:c6:8e:a2:e7:ff:93:57:0d:1c:43:a6:54:b1:bc:
b7:26:04:b4:52:b8:31:28:5f:fb:f9:8f:d4:ea:3d:
99:04:cd:c7:f3:76:5f:51:4d:89:5c:a5:b5:e8:e6:
f3:ce:3f:e9:bd:33:fd:9a:1d:ad:4a:83:9b:a7:f8:
81:a5:ca:a7:55:a0:47:b9:a9:47:9a:f1:a2:26:c7:
55:fe:02:3b:0e:97:4a:6c:9f:be:4b:3e:dd:ed:cf:
1c:e4:93:7c:b0:9b:eb:1c:e9:b8:92:af:e5:50:c2:
b7:de:03:fe:0c:2f:2b:e6:41:34:97:b3:62:42:7f:
96:2b:0f:c7:be:ba:e4:2a:eb:16:a4:ac:86:e0:66:
31:24:c9:ca:fc:21:44:33:6c:ef:4a:85:a0:6e:51:
5b:97:c8:42:f2:3f:b9:b7:e5:e3:f2:a5:80:2e:88:
74:22:ac:f8:5c:d5:be:48:9e:98:17:b1:97:18:56:
a8:ec:ae:b4:d4:c8:7b:8c:32:4e:9b:1e:09:b7:c8:
52:5a:e1:8d:1b:95:d5:e3:56:64:15:8c:fd:ed:8b:
36:83:ac:ba:50:e5:4c:24:26:b5:a6:a6:5d:2a:22:
4a:1f:af:6d:c0:2f:8d:41:db:e8:a8:6c:e5:68:fa:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:3E:51:F5:B2:21:7E:85:40:2A:2C:1E:53:70:6B:89:71:20:9E
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1a:58:45:15:ef:6f:10:47:7a:eb:79:01:60:0b:21:4b:3a:
27:49:5a:b7:c2:13:0c:02:e8:35:45:d5:68:b9:a0:4b:7e:a7:
1d:71:f7:94:22:9f:ec:18:a4:e2:89:bd:5d:ed:07:97:20:53:
57:88:47:dd:47:82:a4:63:e5:a7:24:93:50:91:aa:82:16:20:
92:45:07:d1:d2:ab:33:87:80:5c:f5:6a:02:27:fd:d1:49:a2:
15:eb:c4:08:e7:91:f8:7a:04:00:89:aa:07:ef:8c:37:cd:35:
cd:93:2a:bc:c4:65:d5:00:d1:92:f9:10:6d:80:bb:3e:3a:60:
1e:b5:3a:3a:7a:38:a5:55:a6:ce:15:46:05:3f:76:f3:93:8b:
27:e4:ba:42:30:fc:ff:54:ca:80:dd:ac:8b:82:ee:16:f4:54:
ff:f7:30:aa:03:04:63:d9:f0:1e:ec:bb:19:09:7d:1e:33:18:
5a:71:e9:18:b6:d6:e0:21:9a:6f:16:10:db:92:b4:bd:10:2e:
44:da:ab:ae:bd:41:b8:02:24:ff:9b:d1:21:d0:f2:3f:b6:4b:
bb:da:71:39:35:4b:8a:94:37:82:65:fb:c3:78:1e:d9:3d:bf:
1f:de:54:31:f0:5f:d9:19:c3:33:39:7b:8a:bf:2e:d4:3c:c7:
e0:1f:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:43 2026 by rpki-client