Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: SkK8DYrIO7pH2O1PgQsxvSjyq1BD9Oz+54qCJCdFue4=
Subject key identifier: 4F:4C:D8:87:FC:19:00:C4:EF:C9:9A:60:12:C0:20:91:CC:22:6A:8F
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 019F9022FDF6A30FC51E3D63418317935802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 18:00:40 +0000
Manifest this update: Thu 23 Jul 2026 18:00:40 +0000
Manifest next update: Fri 24 Jul 2026 18:00:40 +0000
Files and hashes: 1: AmojMy3O0TzhYdnqQ_foiNeMfu0.roa (hash: NeSi6ZBMXloVln9cQN9LXVSt3sMQcF7jHdMdqk0HF3M=)
2: QxwdEpVgo81_-mwIpi91_VPBVXk.roa (hash: W+b58r8ZTGE9pnt5zsRnperhoba0alTWik9Mki5Rn8o=)
3: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: 8nGDxJ6P5KbZArvvQUFq+RxYbPHAFkF6ZpiVoIj1z+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:fd:f6:a3:0f:c5:1e:3d:63:41:83:17:93:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Jul 23 18:00:40 2026 GMT
Not After : Jul 24 18:00:40 2026 GMT
Subject: CN=4f4cd887fc1900c4efc99a6012c02091cc226a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:0a:96:47:3e:77:71:45:7f:09:49:0b:9f:
b9:9f:7f:39:c4:5f:97:ed:b1:03:16:79:38:0b:14:
0c:89:85:bc:0b:e9:99:e6:92:c8:93:67:42:6c:79:
1a:d0:84:f3:bd:1c:5b:d8:dc:42:d5:1d:72:7f:dc:
09:20:f2:b7:a5:f3:72:f7:c4:ff:5a:c5:98:27:14:
58:4f:aa:93:ff:af:16:d9:9d:e2:35:7c:a3:40:e2:
12:a0:9d:15:00:d2:b6:00:5a:c9:ae:f9:56:65:23:
79:90:5c:d0:f0:64:72:c8:d7:27:b0:ab:d4:07:2c:
d0:7f:f1:41:40:c8:00:90:1e:b2:dd:a8:77:d8:47:
1d:25:c2:12:c3:f0:6c:94:51:04:41:65:59:57:62:
0f:4d:5f:bf:9b:76:aa:f3:98:40:bc:0a:b4:22:a7:
43:1b:96:7e:4a:8e:d3:e8:7f:2d:70:92:3d:14:95:
22:a9:19:53:4f:97:1a:70:18:c2:27:44:4b:0b:28:
b3:37:b4:57:5d:62:83:80:de:b4:60:b7:20:87:60:
aa:09:69:25:65:68:48:82:b8:16:2c:46:c0:fa:ef:
df:4d:b6:df:16:ac:cf:52:73:4b:55:76:07:34:e8:
c5:66:9a:97:ee:48:0d:a4:d3:fc:16:78:75:16:2c:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:D8:87:FC:19:00:C4:EF:C9:9A:60:12:C0:20:91:CC:22:6A:8F
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:be:07:11:2f:25:1e:ad:62:49:8a:9a:4d:46:a6:4d:b3:03:
75:22:fc:4e:91:14:0b:48:43:56:ba:38:94:64:95:73:6c:96:
1c:b7:cc:66:77:27:d4:b8:b1:ac:b4:0e:4d:f4:f7:6b:4b:b3:
f4:a4:0d:77:c8:04:d7:27:50:f7:b8:47:5b:d4:3b:d8:86:ff:
dc:b9:ca:2e:8c:26:1a:7f:7a:0b:43:d8:03:08:03:d7:32:2e:
9f:7b:7e:f9:1b:eb:f8:1f:d2:d9:bf:a2:fe:b2:ea:c3:24:89:
ce:31:51:7f:4f:c2:c7:00:76:db:ee:0a:9e:ac:24:eb:6e:14:
d3:9a:e6:63:bb:32:b1:3e:6f:4b:0c:f9:ce:8c:1b:1b:1d:86:
cc:51:c8:f8:f7:64:dc:95:b7:42:7b:34:a6:0b:b3:2a:22:e3:
8f:14:cc:70:07:8a:a9:dd:29:36:cd:82:d3:08:a3:8b:a2:0c:
f4:da:95:fd:d1:16:80:5d:d4:03:fb:d9:4b:ca:bd:9c:31:77:
31:8b:d6:75:c0:4f:f9:c7:6a:42:a3:24:1d:84:f9:b9:08:9c:
18:1a:d9:0b:e7:3b:e0:7f:ca:33:d2:78:ad:6d:5f:98:d4:b4:
c1:30:1e:fc:dc:e4:0f:56:09:cd:9f:f1:08:8b:a5:af:ce:0a:
21:60:b2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:39:55 2026 by rpki-client