Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: 0Jmx3FG2sinETKKjUALs6KLpuWrb74S0Gx7LO/Nxxug=
Subject key identifier: 6B:8C:77:28:2A:BB:62:1F:90:B4:15:7F:B8:0B:2D:47:69:C9:D3:73
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019F935ADF2947C070BFF15075B6CD58AD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 19D0
Signing time: Fri 24 Jul 2026 09:00:33 +0000
Manifest this update: Fri 24 Jul 2026 09:00:33 +0000
Manifest next update: Sat 25 Jul 2026 09:00:33 +0000
Files and hashes: 1: 2KPw1cvbm50f0LYM14wl1jqJ9og.roa (hash: A1Jjz4VQ5P7K7cWtSDzEEjwDvup5VASHzuFeW68IpQ8=)
2: 4DjthTFuBFBUicM1fyQrr1R-zpA.roa (hash: /khTTdB4MFujwhgprh1GKjQ5sevdR189YyvZSZEdlvw=)
3: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: daIz0VvXWKMnLto2q3KYy90Hhrb7eBb0s+2HMvo2RxY=)
4: 7pxmMXSw-HkZG9cAZnnYN-vEkfQ.roa (hash: mEU3VRJ8fuQ7izupJUqVvL0qdRuIxFLkUNg5UpgN7ss=)
5: 8OlOEZgObzEvy1E8VmktgWUdQi0.roa (hash: vpY2iql20BkJOzJyUWVMsBYvSfuAgM3xo1h/baltqkw=)
6: IbI54r9UQEycQUhSG_R7IhAl23w.roa (hash: Xsth8W4XkRG829Saw23qV/fuk3mylDa5vQqSxMBq6Os=)
7: kaNSS3H8CcGwyEb9L0LHfodkCbI.asa (hash: w3bZtfnN5MHgcG0AWFUlSLsnuz4fMXs0k06prQh3OWE=)
8: mxy-X6DSpF8ZztbUQjMZo4HUfAM.roa (hash: 8VsFON9Y1Ltuj+mPJYLJdGhQhe4GbTQ4L4kgjue4VFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:df:29:47:c0:70:bf:f1:50:75:b6:cd:58:ad:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Jul 24 09:00:33 2026 GMT
Not After : Jul 25 09:00:33 2026 GMT
Subject: CN=6b8c77282abb621f90b4157fb80b2d4769c9d373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:0e:0d:88:21:c8:e6:3e:ea:0d:02:9b:b0:
f0:42:e3:f3:89:c4:47:d5:eb:2e:09:8b:49:80:11:
43:0c:09:e4:b3:d1:8d:85:ce:bc:8c:ed:65:2c:84:
11:ad:12:de:0c:9e:d6:50:2b:06:12:06:77:74:ad:
a9:9e:30:3e:a4:52:af:04:41:3e:d6:5f:ea:50:bd:
53:45:64:19:0c:56:37:6e:eb:d0:c0:6f:89:6f:19:
7d:0d:82:ce:4c:02:ee:13:13:db:57:85:3b:bc:a8:
97:1d:a2:87:75:b3:d9:27:ae:55:d8:cf:0b:c8:69:
c9:84:da:1a:d1:3c:55:47:39:6a:7d:32:02:13:cf:
9b:df:13:d6:06:f5:4d:d2:a0:a6:ea:df:b4:b1:b2:
16:2d:fb:cb:6b:f3:1b:9c:73:13:c5:29:f2:b2:2a:
3f:18:f3:07:4a:de:e6:0d:8e:75:8e:34:d0:2b:73:
cf:4c:69:12:6c:b4:9e:75:46:a1:7b:a0:f4:c7:31:
c2:3c:7c:50:27:0e:ed:2f:27:34:29:f3:50:76:ea:
2d:bb:fe:61:16:ac:a0:d2:c4:2e:b9:56:84:8f:26:
67:09:21:d9:47:00:c1:ac:30:51:20:fc:7e:47:22:
ea:96:86:bf:ca:d4:4e:10:77:e5:cd:67:34:bd:56:
88:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8C:77:28:2A:BB:62:1F:90:B4:15:7F:B8:0B:2D:47:69:C9:D3:73
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:22:fe:f9:4b:d5:37:bb:5b:f3:fc:54:09:74:4f:1b:d8:6a:
9e:2a:84:8b:11:f4:a2:90:e0:3b:ee:e5:62:0c:e0:c5:e0:89:
49:05:77:93:03:3d:5d:a3:22:ba:0a:22:98:fc:4b:10:56:51:
ee:c7:c4:65:8c:99:ed:35:d1:7e:53:73:ae:98:75:6d:2d:f1:
c8:91:5c:b4:7c:bb:2b:e3:9b:94:b5:de:3b:ad:02:20:57:a1:
31:bf:db:df:f9:8e:bc:95:2b:42:05:34:26:90:8a:eb:b2:d6:
79:48:2e:b2:e2:71:1f:83:e8:f9:ee:ed:21:d7:52:ec:e1:de:
e0:8d:fb:7e:bd:00:62:94:45:3c:87:ac:17:8c:c4:23:e6:41:
19:29:73:25:0d:80:d1:68:ab:e4:88:59:23:b3:a2:37:af:4f:
a5:56:32:9f:3f:f0:47:98:62:6d:a4:b6:d2:4f:82:9e:60:ee:
e9:62:c6:e1:a2:ab:45:80:3d:f1:a6:dd:9b:18:a9:23:3c:91:
8f:e5:f6:82:d8:e5:ad:bf:5e:99:6d:74:85:1a:18:91:dd:31:
92:53:cd:63:b2:5b:61:f8:ca:b3:43:04:a4:38:09:58:d6:35:
9c:9e:ac:6d:36:7a:16:1d:4e:1f:dd:3b:81:fd:9e:91:ce:8b:
34:2a:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:01:00 2026 by rpki-client