Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: r0rqgx3jfnsOcj3YaJ/VAv+0kW4ZiARHLqg+6XZ2Tkw=
Subject key identifier: B2:B8:ED:2C:30:AA:F2:1D:5C:A7:E1:8A:79:2A:09:47:84:1C:DC:6C
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 019F90FE969F86481E316DF72F3864F75C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 22:00:31 +0000
Manifest this update: Thu 23 Jul 2026 22:00:31 +0000
Manifest next update: Fri 24 Jul 2026 22:00:31 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: lEp4SxfejgMNYdI9Oa4olwc9d02Y7wXmM3qByg3NyjY=)
2: MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (hash: X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:96:9f:86:48:1e:31:6d:f7:2f:38:64:f7:5c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Jul 23 22:00:31 2026 GMT
Not After : Jul 24 22:00:31 2026 GMT
Subject: CN=b2b8ed2c30aaf21d5ca7e18a792a0947841cdc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b1:48:fc:f1:b7:0e:b8:78:2e:0e:3c:aa:75:
a7:ab:82:04:68:19:36:2f:a2:0e:19:47:b3:98:a2:
85:d3:f6:00:c6:18:f4:00:f0:a9:b3:27:2c:30:d0:
1e:58:7a:91:29:cc:44:99:d1:76:7a:5b:da:db:04:
3a:63:66:06:35:0e:1b:6c:64:c3:76:14:dc:f4:d0:
47:e1:bc:b2:fc:4a:9a:f3:7b:bf:84:72:a4:f1:f5:
b0:55:f0:c0:5e:b5:c5:8b:ef:3c:26:d2:b1:77:91:
d0:c0:81:9b:3d:e4:9e:8a:5d:46:b1:16:d0:bb:70:
6d:af:e5:15:0b:4d:1c:f5:a8:5e:26:74:a7:dd:28:
9d:59:42:d1:67:74:74:46:9e:bc:3a:73:f5:49:d2:
27:52:4a:95:bf:ac:34:26:41:f0:b1:e7:a6:4b:ce:
bd:12:95:e6:5b:d9:1d:dd:62:a3:df:19:8b:70:ee:
c6:14:8d:f0:16:a9:fd:c1:3c:c1:c2:34:01:75:6b:
26:66:63:af:01:af:7c:29:08:19:84:36:f0:d8:82:
72:c1:d4:d8:90:45:49:b6:38:fb:05:28:0e:71:74:
34:fc:2e:b5:91:25:5a:db:eb:bc:5a:b5:0f:1d:40:
52:55:08:6f:b9:88:d2:6f:10:1e:2c:d0:be:65:e5:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B8:ED:2C:30:AA:F2:1D:5C:A7:E1:8A:79:2A:09:47:84:1C:DC:6C
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:a7:0e:dc:9d:4b:25:24:2e:bd:95:56:02:f7:88:a4:93:
cc:c8:0b:61:f3:05:6a:66:cd:f5:2f:b2:c8:c1:08:4a:05:d8:
55:cd:4d:97:11:9c:c7:21:1b:51:9d:4d:a9:e6:98:c8:6f:6d:
3c:f5:de:39:3a:6d:4c:83:4c:53:0d:bd:6e:24:26:cf:8e:8e:
fe:60:c3:50:29:1a:cf:23:07:22:d6:51:c2:b7:63:8f:fc:6a:
a8:42:ff:e1:e8:a9:1a:91:67:48:41:f3:82:82:a3:0e:e1:8f:
c5:5e:6e:ac:f7:a4:4f:3e:0b:4b:c0:de:59:fc:5d:5f:93:19:
d0:92:0c:b3:7a:af:90:65:29:48:1d:80:94:6e:4b:ab:bb:39:
1a:bb:73:45:5c:a3:0c:0c:30:50:76:39:b1:81:06:6a:eb:70:
01:a8:7a:f5:38:b2:b3:6d:8b:8d:36:2c:83:c1:15:3b:90:f2:
1e:9e:b9:28:4a:06:5c:e4:9d:c1:69:8f:b3:7f:e3:36:31:0b:
a8:29:b7:49:8b:b7:89:b0:91:60:3a:64:40:63:c5:56:16:db:
c0:f4:d6:d9:27:de:9f:39:91:db:25:7c:d8:5b:46:30:e6:81:
28:65:c9:a8:e8:1a:04:64:71:a6:f4:c0:e5:70:3a:72:2b:35:
0d:ba:e5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:26 2026 by rpki-client