Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
File: 4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json)
Hash identifier: qKkBNEG/QanTMWw4agz980BixCFHJFxzvUZHwHqDO2k=
Subject key identifier: 85:BB:3C:56:5D:93:7F:7A:24:7A:83:D3:37:C0:38:41:AD:56:5E:7F
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Certificate issuer: /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial: 019F8ED9C32CB9EE6021E1DC3D3ED488BD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
Manifest number: 12AD
Signing time: Thu 23 Jul 2026 12:01:03 +0000
Manifest this update: Thu 23 Jul 2026 12:01:03 +0000
Manifest next update: Fri 24 Jul 2026 12:01:03 +0000
Files and hashes: 1: 1-y5p00WqseAoyfR1Xb3OpBa8Qo.roa (hash: MZ8SkQwPQ/dW94e5Edm+tzoRtiWBbXIlUo3K5SfuLcU=)
2: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: WPBk8W6cHObMzm+6oIOJ5dNKQaOSRKIXZbjD4ua9Cto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:c3:2c:b9:ee:60:21:e1:dc:3d:3e:d4:88:bd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Validity
Not Before: Jul 23 12:01:03 2026 GMT
Not After : Jul 24 12:01:03 2026 GMT
Subject: CN=85bb3c565d937f7a247a83d337c03841ad565e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:7a:b6:bb:9d:27:2e:4e:4f:a8:24:4d:7a:
56:ca:ec:e4:3a:8e:97:78:a4:d5:39:19:d7:22:8a:
d7:6e:85:dc:87:94:f1:57:6e:c0:1b:81:05:94:4f:
bd:92:28:02:2d:a3:b4:f2:bc:b2:96:f7:c6:27:9d:
6b:18:8f:b6:0a:13:df:09:0a:27:8a:8c:d6:59:91:
80:4f:27:b3:63:a0:40:49:2d:77:06:06:61:ee:9e:
d4:65:88:49:1e:aa:21:05:40:86:75:bc:5b:a8:f9:
f9:ec:9c:93:2e:a3:02:c9:f1:41:a6:0e:50:fa:99:
e7:93:1b:50:f2:8d:41:90:dd:52:f8:4d:56:67:26:
6a:e9:17:d2:31:ca:46:3f:30:97:40:c7:30:66:8a:
88:01:e9:63:b2:91:6f:f5:8c:ae:b3:74:ff:40:b7:
03:48:bc:85:40:64:e5:01:87:2e:94:b1:b8:db:be:
a0:b5:f0:88:f1:ff:7d:5b:79:aa:4f:fd:1f:11:ee:
03:5f:5a:12:cc:3d:00:2d:70:ed:98:82:b6:f3:90:
80:c7:f2:5e:96:7a:64:67:a2:bf:f1:80:e7:90:94:
16:f2:b6:36:19:15:57:83:2b:b4:61:e9:4d:00:91:
2a:3a:a6:5b:ca:6f:b4:5f:31:8a:3b:69:6b:a5:84:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BB:3C:56:5D:93:7F:7A:24:7A:83:D3:37:C0:38:41:AD:56:5E:7F
X509v3 Authority Key Identifier:
keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8b:0f:da:60:10:ec:4c:3a:75:3a:d4:31:9b:ad:09:dc:7e:
73:34:90:9d:e3:e4:62:17:b7:be:4a:bd:83:78:c4:67:d0:cb:
e1:f0:d0:3b:61:74:c8:6e:19:1c:2b:86:e4:b5:63:0f:18:d0:
30:5f:f4:ec:28:7c:cb:0d:1a:86:5c:cb:d1:55:6d:13:7b:2c:
bd:65:ba:c1:34:be:1a:fb:03:10:c3:00:7a:37:fe:f3:85:4e:
be:54:68:65:b0:e2:42:48:3d:c8:1b:98:81:c5:43:5c:ea:0d:
c3:a4:34:cb:a2:55:4e:dd:d4:91:fa:2e:13:6a:c3:47:be:ee:
ab:63:9e:f3:30:34:98:a2:23:05:20:1f:ac:1c:d2:cc:67:0d:
5d:ff:cc:5c:e7:67:a9:87:7d:4b:3f:52:67:9c:c5:9e:89:6e:
1a:4e:3e:97:ce:2e:d8:ab:4b:04:bf:90:38:6b:d1:8c:2c:ef:
65:9f:c9:2b:20:1b:71:a1:34:07:09:c3:80:2f:41:e3:cd:3b:
dc:38:16:fb:90:a1:cc:5b:e1:a2:af:3d:7e:9a:8f:87:81:98:
aa:9a:be:9d:0e:88:c9:6e:d4:68:a6:3a:be:eb:de:35:02:c0:
4d:32:3d:2b:04:c5:6a:ec:b5:50:67:b0:1c:d4:e3:af:92:fa:
f1:af:21:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:28 2026 by rpki-client