Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: ozItWCoeYiZdR0hOy8p7YWumh8kYUY45o/tI737uATc=
Subject key identifier: 31:62:C0:3B:2F:3E:F4:86:94:B6:33:12:28:75:2F:02:35:85:D6:D8
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 019F92481E9DEE0F9F13C94BE11AD2431C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 114E
Signing time: Fri 24 Jul 2026 04:00:27 +0000
Manifest this update: Fri 24 Jul 2026 04:00:27 +0000
Manifest next update: Sat 25 Jul 2026 04:00:27 +0000
Files and hashes: 1: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: ss8AfcjniXyOIy0RsrZJw8CfovEW6Ch/SfxNhElG7MQ=)
2: P8lLsIJFaz5OtjjsvyeSFKNA-G0.roa (hash: pK1WHbm9edlGMAEyCeOYN0vXHVxBHzJs1SGDL7Mo6QQ=)
3: agPmj-1yZOqdW-zJe9GpIqUN03w.roa (hash: ToCg4vQlYxypC6RWyLP+F3bLTdA7lp0Hnkzv9RyJf4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:1e:9d:ee:0f:9f:13:c9:4b:e1:1a:d2:43:1c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Jul 24 04:00:27 2026 GMT
Not After : Jul 25 04:00:27 2026 GMT
Subject: CN=3162c03b2f3ef48694b6331228752f023585d6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:27:e0:2c:24:3d:eb:87:45:15:12:5d:1d:
71:9a:f5:80:a8:e1:58:bb:37:47:71:d3:4c:89:2c:
d5:48:24:d4:cd:fe:ae:06:7d:d3:d4:78:b8:8d:a7:
4d:c8:fe:76:55:d8:01:ec:3c:1a:8e:d2:c0:2e:8f:
05:6c:ff:d4:e8:ba:ce:10:bd:66:22:0b:d5:bf:a3:
81:f6:4c:15:ea:b7:74:9b:82:ee:46:9c:3d:87:7b:
cb:d5:b0:e3:10:6a:6b:c9:4c:93:5f:9c:73:2e:31:
7c:bf:04:4f:73:0d:73:4e:2f:13:12:bf:cd:52:f0:
e4:69:d2:cb:c2:21:3a:b1:50:c8:8a:a8:b3:1b:e5:
15:89:9f:4e:fa:b7:9a:70:8f:93:cd:ce:8b:ce:e7:
b8:0d:82:72:8b:15:f9:74:7b:3b:7e:d3:c0:f4:25:
77:00:f4:15:b7:e7:d4:5e:eb:94:94:17:ae:53:a0:
cd:c3:ed:51:11:f5:db:d5:39:e0:d2:b2:8c:6d:cf:
ce:a7:81:c0:9d:64:10:7d:a8:d8:0d:94:b8:db:b9:
0b:6d:8c:36:c7:a1:90:d6:c7:8a:b6:17:15:26:0c:
ff:8b:0e:bb:ae:40:b3:34:a3:32:32:b3:51:f2:ae:
cb:fe:61:fb:ac:c9:48:49:fc:20:75:e6:5e:28:95:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:62:C0:3B:2F:3E:F4:86:94:B6:33:12:28:75:2F:02:35:85:D6:D8
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:42:63:d8:30:37:9e:7a:55:a8:96:53:03:ab:96:3e:ca:17:
a7:2b:84:80:14:09:8e:32:00:a6:b2:98:3a:5c:99:0f:66:ae:
ec:6e:60:3a:90:07:41:c5:9a:e9:74:90:3b:8b:cf:cd:ab:d2:
7f:e4:d1:99:38:0a:82:e5:da:cd:c7:18:be:a8:23:6a:ff:21:
06:97:ab:77:79:52:be:c7:e4:c2:64:ce:b0:ee:21:28:48:ea:
3b:a1:ac:99:bd:bf:2a:0f:6a:58:61:55:b4:89:22:2e:9f:57:
2d:bb:94:e4:64:cf:2f:d2:11:1e:56:45:9f:3c:88:ae:ac:3a:
84:01:88:69:84:7c:4a:04:b6:fd:46:2f:05:67:5d:2a:e4:72:
66:6a:46:99:51:4c:06:64:5a:23:38:2c:b1:56:09:a1:0a:79:
0f:f0:35:a0:41:06:16:2a:db:06:9f:e4:23:10:84:be:85:c3:
0f:39:da:f6:ef:e8:35:bd:68:e6:c1:f1:f4:1b:dc:14:8b:ed:
54:7d:ba:ec:76:4d:b9:0f:6a:cd:4b:d8:45:3a:59:be:62:9f:
e6:26:be:d2:73:f3:5d:df:3b:fa:f9:00:fd:ea:d2:1b:a9:0b:
44:77:ea:8b:4c:fa:01:aa:73:fb:68:2a:34:95:df:39:56:64:
ee:bc:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:05:21 2026 by rpki-client