Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
File: 4nHbgOZwKYw5jUhSzsWPhcZw77A.mft (raw, json)
Hash identifier: VXttw4oFt+3PLBxi8uZZ+r6E7N7vhB+ofzk/vBHQaAA=
Subject key identifier: 88:F5:81:FF:F7:4B:BB:62:8C:CF:2F:98:C3:63:54:E9:98:27:4A:8B
Authority key identifier: E2:71:DB:80:E6:70:29:8C:39:8D:48:52:CE:C5:8F:85:C6:70:EF:B0
Certificate issuer: /CN=e271db80e670298c398d4852cec58f85c670efb0
Certificate serial: 019F935C1D81658D856008E6D455C4EA3642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:55 +0000
Manifest this update: Fri 24 Jul 2026 09:01:55 +0000
Manifest next update: Sat 25 Jul 2026 09:01:55 +0000
Files and hashes: 1: 4nHbgOZwKYw5jUhSzsWPhcZw77A.crl (hash: 4IFDpYE/xKBGtY8+ffVuoirl6oxRYAEAhcMp7G2TwSE=)
2: ZM__6ZrfQ4R-HkxAG3J8qUNVltU.roa (hash: liqMP4aaz7aIvcCZqU393aEcnVlxYIM+DKJpFlpZRtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:1d:81:65:8d:85:60:08:e6:d4:55:c4:ea:36:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e271db80e670298c398d4852cec58f85c670efb0
Validity
Not Before: Jul 24 09:01:55 2026 GMT
Not After : Jul 25 09:01:55 2026 GMT
Subject: CN=88f581fff74bbb628ccf2f98c36354e998274a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:42:fe:52:df:16:6a:ae:9a:30:6f:dd:d2:
36:ea:94:2f:9c:c3:63:d0:73:08:e7:ab:28:54:20:
41:b4:13:11:bf:9d:1a:92:b5:c8:3d:1b:52:16:ce:
a1:98:9e:3e:89:5d:89:14:93:8c:d5:c9:73:75:ef:
0f:41:4a:ef:d4:c8:62:be:25:c2:f9:74:d4:cd:c6:
5e:ca:5d:20:d8:63:9a:67:ca:33:9c:59:94:f5:63:
08:f0:45:26:44:82:6a:63:39:ff:47:f2:ef:b6:70:
49:08:e3:69:e2:2a:f5:e3:11:21:28:a8:f3:ea:58:
bc:a8:df:df:ac:36:3d:c6:be:44:b3:63:4a:41:10:
cf:67:d0:77:f3:c7:f2:b1:bc:c3:ae:f7:9e:56:bf:
2c:4d:ef:fb:40:63:5b:d0:3a:63:e7:8c:64:1c:d6:
f0:cb:b7:0e:54:4f:7e:6a:1d:f7:c6:da:5f:4f:b1:
8b:3a:fd:f0:2f:b5:26:8a:e6:08:15:1a:a3:ee:e7:
fc:91:f0:21:c9:07:1d:a0:e1:ac:e3:fd:d8:f3:ee:
17:2e:8a:f9:47:f8:92:a3:e6:0d:4f:45:8a:01:f5:
3c:ae:a5:1f:05:28:69:02:af:fd:02:20:bf:8f:be:
70:34:7d:8b:8a:14:cb:da:f5:bc:ce:66:b0:8c:88:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F5:81:FF:F7:4B:BB:62:8C:CF:2F:98:C3:63:54:E9:98:27:4A:8B
X509v3 Authority Key Identifier:
keyid:E2:71:DB:80:E6:70:29:8C:39:8D:48:52:CE:C5:8F:85:C6:70:EF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:48:77:f4:85:2e:d3:bc:77:bb:ed:21:ac:27:20:7d:25:3b:
0d:de:51:61:bf:ae:16:0f:28:0b:2a:0f:36:b6:db:bc:e4:76:
6d:a1:49:aa:fb:a6:4d:af:0b:57:48:bf:b4:78:bb:1a:29:2a:
27:d1:24:bf:fb:3c:c8:a2:0a:67:60:d5:9e:1e:df:8c:7a:6c:
c9:f6:09:cf:32:bd:33:18:f6:0e:bf:c2:68:00:30:31:83:1d:
02:86:3d:21:1f:3b:9f:5c:39:3a:8f:55:48:7c:73:3b:0a:63:
7e:fb:66:51:10:7c:27:25:95:dd:24:11:1d:bd:fe:7b:3e:44:
df:b7:d0:ba:38:6d:3e:37:31:6e:7c:9b:fd:5f:8b:b8:12:04:
93:91:c4:6e:51:83:19:3c:00:b1:c8:1e:09:35:50:fd:28:6b:
0b:ef:7a:be:5e:9b:76:40:f8:5b:da:11:7c:06:da:5c:5d:96:
42:f1:76:55:60:80:2a:6c:55:08:83:03:55:6d:ad:1e:0f:ae:
ca:11:6b:e8:b9:3b:c3:52:6f:b3:7d:e0:9c:92:63:09:99:61:
70:58:0a:b1:4f:39:8a:82:ee:4a:0d:e6:48:1b:72:c9:53:aa:
ce:6c:3d:e8:6c:7e:07:69:c3:91:63:a3:b4:bc:8d:48:15:81:
34:04:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:42 2026 by rpki-client