Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: 8wR5+pP/2xxVyslA3+R9Clz2obQ75vE+EpvYXNYY3Ts=
Subject key identifier: 65:F3:CE:74:58:12:FA:D9:6E:B3:68:36:B1:1A:B9:C6:66:D8:55:7A
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 019F8F7E20B5E1F105E68C08888C02F3BBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0EE0
Signing time: Thu 23 Jul 2026 15:00:35 +0000
Manifest this update: Thu 23 Jul 2026 15:00:35 +0000
Manifest next update: Fri 24 Jul 2026 15:00:35 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: DDANGkujU4Bk+sq9WabkSXLMqqXpOTAcEXwG5MChZnQ=)
2: emclNVVbrOSgwEekW1bHsSKyOAU.roa (hash: umsW/YEVV8b6bDEdAr61c5AeNAQYb7n62AaiTl4HN1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:20:b5:e1:f1:05:e6:8c:08:88:8c:02:f3:bb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jul 23 15:00:35 2026 GMT
Not After : Jul 24 15:00:35 2026 GMT
Subject: CN=65f3ce745812fad96eb36836b11ab9c666d8557a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:30:b3:26:4b:21:6d:6c:23:71:5e:8c:bb:
5f:f5:fd:fa:d1:a9:fe:32:92:97:c8:0e:99:59:79:
44:34:c4:7c:35:8a:4b:0f:2c:40:ba:d4:6b:b1:c9:
b6:23:e7:d2:57:bc:ab:fe:28:a9:44:55:9b:f1:74:
42:ad:25:95:f0:f1:dc:f0:75:95:8a:bf:8f:eb:f3:
32:11:81:96:7e:18:85:01:d4:4d:96:64:5e:88:fc:
10:c6:3f:47:1c:1a:e5:7d:89:9a:06:91:3b:57:b7:
10:97:d5:8e:57:55:eb:14:0f:0e:f0:0e:fa:35:50:
78:76:be:7a:bd:22:b5:fd:06:83:11:24:46:4e:e6:
7c:57:4c:41:c6:07:c0:52:01:eb:2e:ae:86:d8:3d:
52:03:c6:12:03:7b:33:ad:1a:5e:38:fe:00:71:8d:
61:89:64:84:c3:11:0a:1f:a6:94:5f:af:f6:21:7b:
cf:2f:93:5e:00:06:cc:35:06:6d:35:fe:6e:95:4a:
66:56:46:2a:5d:58:3b:bb:17:44:c0:11:02:75:66:
43:96:fb:5e:a9:49:62:c3:27:24:ec:59:ec:ee:20:
57:35:8b:2c:bd:83:73:26:43:a8:f2:fd:30:7d:4b:
1d:a2:4d:24:a9:34:db:c9:2d:34:55:c5:22:a8:85:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F3:CE:74:58:12:FA:D9:6E:B3:68:36:B1:1A:B9:C6:66:D8:55:7A
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:03:f0:3b:a2:21:89:60:17:5f:6e:f7:f5:94:19:21:9b:48:
62:13:38:39:4d:3c:99:d3:01:f6:ce:f8:8e:07:59:c9:d2:85:
ca:8e:ac:1b:80:93:b2:f4:66:f5:8d:74:41:d2:76:3e:a1:4c:
3f:58:7f:f6:2f:43:36:0b:be:53:60:60:76:c6:4b:28:a1:d6:
20:6f:71:ac:eb:e0:7c:3f:db:8e:fe:4c:90:92:02:e2:a8:80:
da:6f:25:a1:04:98:e2:27:9a:20:38:3e:2b:9c:52:d7:a2:18:
61:7e:46:1b:ed:a5:11:80:6e:c8:a7:eb:f0:45:4b:58:97:6a:
f7:8e:96:8b:df:d3:b9:a7:48:f2:6f:30:44:a6:a2:c1:de:dc:
33:c3:86:cf:76:55:27:2b:ec:e3:41:2a:c5:e4:a8:40:92:15:
45:f3:cd:b8:7c:9a:8e:8d:bb:e4:4d:dc:78:fe:a8:c5:29:70:
67:48:0f:2e:5d:59:98:cd:62:58:0d:dc:1c:69:ce:fa:92:ea:
88:38:55:a6:1d:c0:a7:6d:b9:78:1e:df:27:df:33:80:6b:7e:
30:04:dc:c6:a8:88:a5:73:1b:81:f2:b9:08:25:62:06:f2:26:
ad:cb:d7:9d:ff:58:3d:91:f6:35:9a:51:07:99:27:b8:11:da:
91:af:ad:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:06 2026 by rpki-client