Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: jhnxHELSDFjRKLR/9SsA+kFLwVTctHPjiKqxVwmsoHc=
Subject key identifier: 53:DB:60:3F:80:9B:45:38:32:94:7A:E1:23:BE:D1:85:3D:EF:4B:13
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019F905A3497E16CAFAED1DC6D3134E26728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 107E
Signing time: Thu 23 Jul 2026 19:00:58 +0000
Manifest this update: Thu 23 Jul 2026 19:00:58 +0000
Manifest next update: Fri 24 Jul 2026 19:00:58 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: AlQc7HORxk9LkZF3iQ9VDxWWcqgDcyCj718Gyd1xrbs=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:34:97:e1:6c:af:ae:d1:dc:6d:31:34:e2:67:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Jul 23 19:00:58 2026 GMT
Not After : Jul 24 19:00:58 2026 GMT
Subject: CN=53db603f809b453832947ae123bed1853def4b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d2:36:c3:74:a9:16:77:5b:f3:61:2d:77:af:
d3:c8:f1:17:1e:ea:74:8e:c8:fd:f5:60:e8:2c:84:
28:4c:7f:56:66:c9:1e:61:ce:40:bf:3f:c9:65:6e:
c8:98:20:c8:46:5c:22:11:61:dd:3b:ee:ac:83:1c:
3d:48:87:f3:7a:ec:f7:5b:ef:aa:dd:29:0f:27:f5:
b5:9b:25:f7:c3:6b:ee:22:85:1d:cf:43:b8:45:02:
f3:e1:36:73:4a:de:a5:aa:22:00:61:be:a9:8b:63:
11:a0:49:3d:01:16:6b:6f:ad:8a:c3:f6:9c:c8:ac:
94:d2:dd:e3:8c:33:3c:2f:7d:ce:1b:92:c7:d4:8e:
bf:a1:58:09:77:03:f2:20:54:e3:8e:95:9a:01:d2:
fc:f6:a6:3e:79:69:01:46:e7:32:57:04:33:37:61:
59:15:a2:55:41:a2:76:86:54:76:6d:e5:dc:4e:3f:
77:c2:37:92:b2:f2:11:38:06:42:66:d7:14:94:d5:
31:cb:3f:b4:be:c4:8f:6f:17:60:e5:fe:aa:d0:54:
c4:60:10:c6:b4:20:5d:af:91:3b:c0:66:eb:83:26:
19:12:c0:e3:b0:01:e1:2f:9f:f2:b0:a1:93:ef:5c:
e9:bc:61:99:00:fd:02:45:9c:44:06:38:a7:82:ff:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DB:60:3F:80:9B:45:38:32:94:7A:E1:23:BE:D1:85:3D:EF:4B:13
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c3:22:5b:2a:e7:fe:c8:c7:9c:de:ae:98:61:67:ff:0d:39:
7e:a7:e3:90:10:fb:80:3f:ad:de:de:a9:c1:57:70:bc:8a:e2:
8a:cc:25:2b:a1:ea:e3:98:25:79:01:c5:44:85:15:53:38:ab:
4c:6b:30:b1:59:40:33:fd:7e:77:0d:36:51:96:75:29:28:b7:
86:52:d0:21:1c:84:25:e3:84:7b:c0:59:5f:03:67:38:92:03:
ad:07:5b:1b:6d:58:a7:17:19:af:54:d4:70:2e:da:a4:53:c2:
a1:0f:12:32:2d:fb:b0:54:85:28:1d:21:4d:1c:56:a4:87:71:
09:0a:12:c1:38:84:96:31:a1:1e:ac:6b:6e:75:4d:41:42:73:
4a:d4:f8:30:72:a3:46:bb:68:96:62:26:2b:f0:d2:f6:c0:7d:
ca:0d:1f:25:ed:d1:c8:af:79:b9:30:32:00:50:e1:aa:c8:12:
bd:4c:c5:86:93:e4:e3:03:ca:f2:d0:99:72:61:3f:ab:79:02:
3d:a0:8e:f5:89:91:a5:11:c1:c8:ec:49:16:e9:a5:d3:48:46:
b8:44:ef:b6:4a:54:8f:70:d2:59:67:a7:a7:cf:ff:99:66:3c:
aa:2c:84:b5:f1:e4:e3:40:b3:36:9b:dc:4b:ba:0a:aa:1f:72:
f9:81:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:38 2026 by rpki-client