Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: 6mOry7I6TQjt2VK+7dk+ILAFL8A9YWSZ15UiWrQtW9o=
Subject key identifier: 7D:35:43:97:41:A0:5E:35:FF:1A:03:A6:1F:ED:01:14:DE:90:5F:9B
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019F91DABDD9296BA320C5627D39CCC1F26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 1097
Signing time: Fri 24 Jul 2026 02:00:59 +0000
Manifest this update: Fri 24 Jul 2026 02:00:59 +0000
Manifest next update: Sat 25 Jul 2026 02:00:59 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: MScdsmaLO0PI2hLiHqpI/h7hy2cTb+Uc28cXU27yKNw=)
2: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (hash: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:bd:d9:29:6b:a3:20:c5:62:7d:39:cc:c1:f2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Jul 24 02:00:59 2026 GMT
Not After : Jul 25 02:00:59 2026 GMT
Subject: CN=7d35439741a05e35ff1a03a61fed0114de905f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:e7:de:20:2e:1f:7f:0f:45:ce:16:62:25:
52:32:3d:c6:ad:37:65:a4:36:2f:28:e0:66:c9:84:
6e:9d:29:e3:de:ac:7b:e8:37:59:cc:7b:05:a6:80:
8d:05:95:7c:92:51:9d:04:e4:68:29:bf:51:be:f1:
64:65:8e:83:22:67:c3:47:2d:25:5e:8a:ee:41:be:
e5:57:20:a0:1d:a0:a0:6b:11:aa:cd:a8:d3:9a:a7:
35:42:70:a0:35:d5:23:ec:f3:75:b8:fb:83:c2:fb:
5a:83:3e:dd:8b:5d:23:94:fc:18:23:e8:5e:02:a8:
d4:32:b4:60:78:6c:90:d6:1a:8d:dc:88:19:33:2b:
ff:75:ed:72:e9:99:30:71:44:b0:9e:7e:99:76:b3:
4b:88:09:1d:bd:f4:c2:31:5f:a4:ab:85:a0:28:65:
ec:a5:a2:09:9d:46:f3:e0:d5:a0:f7:36:76:3b:5d:
c3:9f:cb:3e:b4:e3:da:cb:db:6a:11:87:fc:5f:94:
ea:d8:7f:38:0a:c1:4d:f6:22:e9:4c:70:69:35:7f:
c2:b5:80:4b:c9:fd:24:02:8c:8c:17:d2:47:34:60:
a0:65:04:fd:88:d6:8a:56:6f:e9:df:91:10:c8:0f:
e6:c8:f7:ac:2a:a9:a9:4c:f4:50:85:b6:09:4c:ca:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:43:97:41:A0:5E:35:FF:1A:03:A6:1F:ED:01:14:DE:90:5F:9B
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:04:f9:8a:a2:93:1f:b7:ff:c9:62:12:7b:d5:af:1b:89:3b:
f7:7d:1f:63:97:7e:29:26:fd:6e:ad:80:53:2b:e9:d9:d2:de:
b5:3a:e9:8a:d3:fb:b9:2b:44:22:e4:24:a8:c8:f7:1c:da:f4:
12:2f:4f:6c:4f:72:a1:23:66:39:65:9b:d8:a6:d3:13:7b:55:
be:72:1f:41:5e:cc:76:05:6d:73:e5:5a:46:26:e0:66:63:56:
c4:80:ab:69:e5:21:71:90:38:d2:7c:ff:91:1d:ed:c7:c5:a1:
c7:da:82:fc:55:30:40:5c:64:7e:57:6d:71:1b:d5:54:a6:5c:
d7:09:af:3c:4d:e6:e2:84:db:f1:23:ba:87:af:69:97:14:09:
fb:a4:86:46:ad:9a:05:2e:c6:78:b6:33:ff:d6:0f:f3:5c:c2:
e4:ff:da:e1:e8:ac:58:5e:05:28:c6:d0:e5:66:cf:25:11:57:
e7:ba:d9:aa:01:fd:58:8f:89:8f:7f:2d:68:eb:12:49:7a:d8:
f8:64:52:d0:0e:87:86:09:22:cb:ec:ce:6b:83:46:2d:5c:b5:
5e:9a:32:0e:21:b9:3b:09:e3:3d:19:90:28:02:0a:cb:a0:61:
90:b4:b3:6e:bb:30:10:2e:dd:09:51:f9:c2:a8:b2:43:6c:d1:
ac:61:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:43 2026 by rpki-client