Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: 13yt9ZdRTZJjujd0Cav+uiWDAD9iU46i9CrqK3jygiA=
Subject key identifier: 91:1A:8E:C0:41:79:6D:1B:34:E1:DF:52:A9:9B:99:22:C0:C0:E9:89
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019F8F7F20D29A501CD032C7249F460A4584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 15:01:41 +0000
Manifest this update: Thu 23 Jul 2026 15:01:41 +0000
Manifest next update: Fri 24 Jul 2026 15:01:41 +0000
Files and hashes: 1: 2KPw1cvbm50f0LYM14wl1jqJ9og.roa (hash: A1Jjz4VQ5P7K7cWtSDzEEjwDvup5VASHzuFeW68IpQ8=)
2: 4DjthTFuBFBUicM1fyQrr1R-zpA.roa (hash: /khTTdB4MFujwhgprh1GKjQ5sevdR189YyvZSZEdlvw=)
3: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: 68bRJMScM1TVhBBQ7HGxP+5plqHmb7pwWChdi8U4CBo=)
4: 7pxmMXSw-HkZG9cAZnnYN-vEkfQ.roa (hash: mEU3VRJ8fuQ7izupJUqVvL0qdRuIxFLkUNg5UpgN7ss=)
5: 8OlOEZgObzEvy1E8VmktgWUdQi0.roa (hash: vpY2iql20BkJOzJyUWVMsBYvSfuAgM3xo1h/baltqkw=)
6: IbI54r9UQEycQUhSG_R7IhAl23w.roa (hash: Xsth8W4XkRG829Saw23qV/fuk3mylDa5vQqSxMBq6Os=)
7: kaNSS3H8CcGwyEb9L0LHfodkCbI.asa (hash: w3bZtfnN5MHgcG0AWFUlSLsnuz4fMXs0k06prQh3OWE=)
8: mxy-X6DSpF8ZztbUQjMZo4HUfAM.roa (hash: 8VsFON9Y1Ltuj+mPJYLJdGhQhe4GbTQ4L4kgjue4VFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:20:d2:9a:50:1c:d0:32:c7:24:9f:46:0a:45:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Jul 23 15:01:41 2026 GMT
Not After : Jul 24 15:01:41 2026 GMT
Subject: CN=911a8ec041796d1b34e1df52a99b9922c0c0e989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:97:bf:f8:d2:f5:d4:eb:48:14:98:d4:ec:
2b:a4:b7:cd:af:8e:fc:5e:3d:2b:f4:06:d5:ad:25:
36:2c:7a:ca:b7:ab:80:d5:b1:59:de:88:88:77:96:
7d:d3:1a:d4:2a:98:fb:0a:75:f0:a4:a1:d9:e1:85:
48:2f:76:41:8d:83:74:4e:b7:36:54:03:94:98:d6:
7d:5d:a0:d2:c9:fc:bf:2a:a5:ea:e7:5b:60:34:e5:
ef:8b:6f:de:c0:07:7b:70:10:5f:dc:dc:3e:cd:57:
c8:22:5f:8e:4d:56:2d:da:6c:57:87:19:04:57:40:
ef:0d:7e:c7:db:9b:f5:a6:dd:f9:e1:1b:be:c5:17:
4f:27:b1:e8:e5:74:e1:74:39:eb:09:d6:00:e3:c9:
5e:fc:af:b8:0b:f9:7a:7e:63:4b:8b:e7:00:e4:44:
18:a8:b2:99:ff:cc:a3:bd:26:e4:c5:2e:a2:7c:4e:
57:a4:75:f8:a9:ee:08:f8:81:20:31:cb:7f:dd:07:
a6:93:b5:f9:03:07:4c:5c:bd:e7:2d:dd:30:6d:68:
80:71:8e:9b:3c:63:66:d0:32:2d:c4:dd:00:f7:98:
07:20:c7:af:c7:11:2a:e1:a8:8f:15:61:87:b2:0f:
9a:28:d3:79:b3:dd:38:ee:d2:6b:bc:f7:d0:2d:21:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1A:8E:C0:41:79:6D:1B:34:E1:DF:52:A9:9B:99:22:C0:C0:E9:89
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2f:74:56:9d:bb:7c:68:13:b3:a7:1a:62:0c:63:3d:df:37:
6d:78:17:35:08:c5:da:05:3d:2e:4f:16:a0:75:63:5e:8c:35:
f5:23:17:3a:7c:88:e1:de:bb:ce:c2:bc:c2:e7:04:2b:28:4c:
35:f3:63:9a:33:46:84:d9:da:66:09:2f:72:a3:08:4f:9c:fb:
41:d6:7c:71:9a:e1:5a:d2:b0:41:0d:11:94:5b:57:e5:3b:d9:
85:cd:15:18:0b:91:95:fa:b0:97:3d:fc:38:7d:20:72:bb:cd:
83:00:ef:c7:75:71:a2:c1:3c:ac:73:fb:d3:7d:35:96:bb:ad:
72:12:be:25:f0:0b:f6:26:26:ee:c7:b5:b9:87:e9:34:4c:2a:
e5:5b:56:6e:61:1b:2d:bc:10:fb:2d:c5:ac:55:af:67:a7:2c:
e6:d6:29:6a:fb:6b:87:ea:c9:d9:b6:33:ac:8f:ff:cc:f3:cf:
a7:1e:9f:10:00:c8:c5:7d:19:ae:ea:2e:b5:5b:41:7c:8a:14:
2c:c5:a3:ee:5c:89:32:eb:a5:72:e3:52:a4:7a:6c:10:11:c4:
fd:34:d6:71:b4:7b:3c:27:2d:37:d0:ac:9f:da:e9:49:23:c6:
7a:bc:98:6c:b0:4f:9c:a7:68:93:1c:d2:62:7b:59:72:8d:9e:
fb:b7:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:14:33 2026 by rpki-client