Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: +jlbQNUi8bOPMQrkjYlrWrRW8QlU7dEWhM/m1rxdVV4=
Subject key identifier: 16:07:E1:C7:4B:B7:A3:62:6C:9F:9D:53:18:84:1B:AA:A7:46:78:C2
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 019F93FFCA43988766B8B470FA3B290AB014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 12:00:41 +0000
Manifest this update: Fri 24 Jul 2026 12:00:41 +0000
Manifest next update: Sat 25 Jul 2026 12:00:41 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: 5UdbJLoXMZk5zkiBatm0p38tlu6ComS5TTpoV9XHq9M=)
2: nQKy6e2LccKKfVdgMJiI4DoR9BU.roa (hash: DkQsbrxnTq1yHz8jrN75m8LOYNoDRbUgrzZnY6/SqN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:ca:43:98:87:66:b8:b4:70:fa:3b:29:0a:b0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Jul 24 12:00:41 2026 GMT
Not After : Jul 25 12:00:41 2026 GMT
Subject: CN=1607e1c74bb7a3626c9f9d5318841baaa74678c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:07:65:e5:16:36:6c:68:fe:e0:d5:c5:f3:
36:19:73:70:e7:44:e5:89:54:46:52:b9:26:1d:ae:
9b:00:07:98:c1:d8:10:98:f8:6d:7b:17:e1:b9:0b:
dc:0e:6e:da:16:e4:af:b1:09:ea:ae:34:0f:3a:5c:
51:46:99:e8:33:40:0a:bf:06:d6:75:18:12:3b:69:
86:2d:a4:e0:c9:be:00:92:74:ec:46:33:73:5a:83:
f7:24:29:48:cb:8d:4a:0b:9c:06:82:e7:b8:79:e8:
fb:86:4b:79:37:5d:ea:dc:7e:69:f2:6a:7e:23:83:
12:cc:05:35:17:d8:a8:10:5e:b7:b5:9c:3d:60:65:
0b:06:bb:a5:a0:31:6e:9a:ec:c2:f1:b5:67:86:0f:
ee:76:10:3e:99:56:0a:ae:c0:e2:0d:f4:24:a8:55:
c5:39:ba:13:ab:5f:5c:24:bb:33:a7:b8:bf:54:55:
26:86:22:12:1f:83:4b:45:1d:ce:d1:2a:02:f9:5b:
60:b9:b0:8f:94:49:f7:02:16:c4:5d:3a:a3:74:95:
a0:79:ca:54:35:38:58:d7:fd:19:48:4b:b5:60:b5:
e5:c0:c8:1a:8b:a4:de:e8:04:77:93:a3:32:c6:3f:
a3:de:b9:1d:46:2b:5a:bf:64:86:f1:c6:ce:3a:94:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:07:E1:C7:4B:B7:A3:62:6C:9F:9D:53:18:84:1B:AA:A7:46:78:C2
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:68:e1:06:5c:85:43:51:93:b2:8f:eb:f9:a2:9a:de:5a:14:
56:3a:1b:c4:5f:08:af:36:2e:a3:5a:51:38:41:5a:66:72:9d:
62:f5:a7:43:7e:2c:69:b1:90:bb:fd:fd:97:9f:e9:ec:6c:17:
22:8a:c2:d1:85:24:d2:02:fc:c8:01:5f:e4:bc:9b:2c:34:cb:
14:c6:d0:ba:63:5f:0c:96:1b:d0:c6:1f:2b:55:fc:c8:bf:09:
b0:e3:2e:c8:6d:28:eb:07:0a:26:01:73:98:a6:6f:14:65:68:
3f:31:a7:38:77:cd:58:f7:62:43:64:c0:62:07:7b:8d:23:5c:
78:72:66:3a:24:c5:2a:16:88:9b:82:3d:98:a8:45:b9:75:6b:
b0:87:fb:56:9e:c5:59:f0:db:43:ad:f9:3c:df:30:6d:9a:22:
a0:95:1b:05:a8:5f:4d:72:c8:07:be:85:3c:dc:0c:2c:d3:f5:
9a:cd:b3:c1:dd:0d:0a:6c:ab:90:1c:c5:47:8d:a4:6a:fc:c3:
34:95:c0:1b:69:d1:15:4c:b9:1d:64:86:ee:17:56:7d:f7:50:
51:55:29:16:49:03:f2:0a:01:e7:90:16:07:74:0c:1f:f8:27:
3f:65:89:36:05:43:d0:ca:69:cf:a0:98:8f:bd:de:fb:4e:b2:
bc:76:3b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:52 2026 by rpki-client