Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: 1FxwEhl8QBICUOAIG5QD74kSiFeGH3M1gsLrmYLofOY=
Subject key identifier: 3C:A0:8A:65:C8:6F:B4:06:EC:E8:86:1C:40:CB:C0:D1:44:E3:FA:DB
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 019F8FEC57C6438F67980FAE4730DAAAA540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 0840
Signing time: Thu 23 Jul 2026 17:00:58 +0000
Manifest this update: Thu 23 Jul 2026 17:00:58 +0000
Manifest next update: Fri 24 Jul 2026 17:00:58 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: noNSSkXfBDBfE0/mfOtq2+suZuTerYK/pNF1LLXtIJU=)
2: p_0XKV3exhd9uWdO5Cc3FmTs35I.roa (hash: vHzaqcFQuYBAr6NOnDqMX/4qIu/wE1PoUiKrWppcY/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:57:c6:43:8f:67:98:0f:ae:47:30:da:aa:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Jul 23 17:00:58 2026 GMT
Not After : Jul 24 17:00:58 2026 GMT
Subject: CN=3ca08a65c86fb406ece8861c40cbc0d144e3fadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:43:34:ca:e2:c0:35:55:44:75:a6:4b:ad:
93:26:20:b1:1c:37:b9:80:7f:22:44:88:47:40:35:
73:fc:78:d2:a0:d1:61:9e:07:27:2a:a1:ec:f6:3d:
71:77:c3:59:8a:7d:08:87:d8:cc:ca:7f:c3:1c:01:
0b:64:1c:6b:09:bb:f9:22:57:e3:15:7d:4a:35:dc:
cc:68:b1:48:e6:7a:29:71:93:01:36:4e:da:ea:9a:
56:eb:32:b4:e3:16:da:6c:3b:fc:0b:a7:b0:f7:bf:
85:40:35:5c:65:43:67:e8:c0:3d:81:9c:e7:6b:42:
dd:56:e6:25:45:52:0a:d6:cb:57:00:b8:6b:63:b9:
e3:30:4f:5d:0a:59:6c:f4:a3:06:b2:14:7f:0f:fe:
39:af:1f:07:40:2d:02:92:4d:3e:01:29:c4:b8:49:
08:b4:f5:df:a6:1c:77:ad:40:27:0a:07:11:a5:85:
61:1b:9b:7b:0a:ff:29:d0:81:d7:75:9d:09:ad:cd:
40:3f:78:19:45:5d:e8:7f:09:fb:ec:42:84:1c:41:
0e:d8:a0:e3:f1:52:c1:50:4e:07:7d:e0:51:06:ee:
c9:1b:e5:a5:c6:fb:c0:79:87:9a:48:d8:5d:5e:f7:
0c:1a:82:39:c1:9d:c7:5d:d7:ea:cc:a2:36:35:aa:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:8A:65:C8:6F:B4:06:EC:E8:86:1C:40:CB:C0:D1:44:E3:FA:DB
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d5:ef:4d:66:ee:fc:1a:8f:e3:3a:7c:4e:81:bc:f3:b4:f6:
39:51:28:6a:b5:bc:df:96:65:4e:ce:5c:21:a6:58:55:06:ee:
ee:08:9c:aa:dc:59:0b:b6:b4:56:65:3b:8f:ac:31:cf:5d:d4:
c1:95:39:08:45:40:d2:71:09:24:92:49:61:63:f9:49:92:2f:
4c:f3:0f:30:41:54:fb:5e:24:1d:cd:a3:8b:b4:14:d4:27:45:
49:95:ef:11:6d:8f:dc:3b:66:37:99:f0:86:7e:0e:93:92:ff:
87:1b:aa:d1:81:f3:8f:ed:84:59:19:4f:85:c3:30:d4:34:dc:
94:28:39:c9:a7:c7:c5:4f:95:63:5a:52:5f:e2:66:7e:67:e0:
16:55:9d:5b:98:16:99:db:70:db:7e:69:aa:df:b4:02:24:3b:
41:77:07:b9:f2:aa:58:8c:30:6f:91:b5:22:6d:3a:2b:22:f1:
d8:17:c5:d7:8f:71:7c:b8:75:9f:c2:5d:18:7f:45:87:82:4e:
0f:37:53:6e:4e:5e:61:e8:d4:a8:d4:73:25:55:a4:3d:8a:dc:
4e:86:98:00:d2:56:20:f1:0e:59:10:c1:2a:1b:dd:aa:78:84:
2b:5c:f6:22:4a:ac:5b:06:0f:76:f1:f5:f5:3b:0e:73:e3:91:
e2:8c:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:33 2026 by rpki-client