Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
File: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft (raw, json)
Hash identifier: B/VF81nZfjZ30iIdyCS0L0ZOkqN8eJOoXz9ozN0FDx8=
Subject key identifier: D2:25:7B:D7:36:00:61:2C:9B:FF:56:BA:5E:F5:86:B1:93:53:C0:06
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Certificate issuer: /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial: 019F9022DEEFC148B1FF5855B0810EB65198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
Manifest number: 40
Signing time: Thu 23 Jul 2026 18:00:32 +0000
Manifest this update: Thu 23 Jul 2026 18:00:32 +0000
Manifest next update: Fri 24 Jul 2026 18:00:32 +0000
Files and hashes: 1: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl (hash: mbtu2NtvdHnO/V4N+S6Fwu1Vxzl9yPSTS3BoFAdRxGk=)
2: IcOnjr-4gR9WTPCT4pZwTUDGeEY.asa (hash: tub1Ik2wRN8xHgbk6v42CqaDh13KKYgCWxQMPgag7TY=)
3: R8Y7NwZ0Su2ei_m0GxBRPUQ-Dys.roa (hash: zenFNShckmIAOaun4ZoUOs7+2YwOPciW4C0Re8niBMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:de:ef:c1:48:b1:ff:58:55:b0:81:0e:b6:51:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Validity
Not Before: Jul 23 18:00:32 2026 GMT
Not After : Jul 24 18:00:32 2026 GMT
Subject: CN=d2257bd73600612c9bff56ba5ef586b19353c006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:31:39:43:72:27:4e:37:cb:9b:d7:d4:e1:
f2:4e:ce:2d:de:a7:b8:30:c5:9c:e5:1a:87:7a:57:
dc:3a:a2:47:7b:af:ea:5b:79:66:9d:e5:6f:6a:3e:
54:7b:bf:4a:e9:f8:a6:4c:0f:83:52:27:d2:36:76:
b1:32:62:8d:9f:0c:11:cf:fc:fa:74:11:d6:a5:c5:
65:02:b9:9d:f3:e0:72:f8:b4:25:93:20:99:b9:e0:
6d:43:d7:56:fc:15:69:95:ac:ca:d7:be:8b:ef:11:
04:1a:e7:62:c8:0d:2e:ff:69:7e:7e:28:9f:7c:12:
dc:54:0f:d6:cc:ca:bb:7a:09:34:22:bb:a6:ae:13:
65:5d:08:06:77:1d:29:50:65:f8:b6:cc:8c:54:0d:
e8:00:b9:00:0d:75:f6:0b:2e:f6:c6:be:bd:d7:b0:
fc:77:59:35:a0:a2:64:88:79:b4:c3:1b:05:bc:00:
b6:f1:c5:f6:11:13:2a:b7:3b:63:97:bc:b0:c1:15:
ab:b3:55:1e:68:b5:9c:49:da:4a:a4:10:cd:f1:82:
80:f4:c9:32:e8:56:b4:2a:89:6b:fc:47:4a:ba:f2:
e6:08:6e:fc:d3:eb:1e:de:30:68:0e:13:d7:62:7e:
e8:60:01:d5:d7:15:48:cd:ec:18:37:f7:b5:37:46:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:7B:D7:36:00:61:2C:9B:FF:56:BA:5E:F5:86:B1:93:53:C0:06
X509v3 Authority Key Identifier:
keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9f:6b:df:4a:fe:86:15:80:83:90:3d:a1:67:8c:81:b5:44:
af:87:8f:51:0a:a6:b5:b5:e9:f8:22:0b:86:00:b5:5c:08:f1:
fc:c9:48:c2:36:0c:40:b9:da:60:7f:45:1c:82:2e:67:6e:79:
95:a1:69:dd:fe:e6:71:4c:dc:dd:1f:de:53:52:cd:b4:4c:0b:
2b:b4:fd:96:dc:cc:25:e1:5f:ad:2e:be:ea:33:0a:04:22:3c:
31:25:46:85:d8:5d:62:f7:4e:97:b0:c9:76:64:ad:45:a2:01:
fc:72:37:5a:7e:d6:98:48:6d:6d:a5:d7:4f:16:d4:91:15:e9:
a8:f2:90:f8:65:15:08:83:30:8d:b8:0c:23:4b:3d:e8:f1:bb:
04:9b:e0:f2:b9:bf:28:bf:81:36:53:36:6b:b0:b8:4e:3f:73:
e9:13:25:c0:a8:35:04:7a:82:56:cd:99:cb:3e:ca:e9:94:37:
85:5f:49:16:45:ae:28:fe:14:f9:09:98:f1:71:f8:73:59:dc:
dc:c6:07:be:1e:bd:ca:43:59:88:3d:59:78:1e:af:c4:67:3e:
72:c0:7b:cc:5d:61:c9:6d:2a:bd:73:04:46:aa:be:90:26:c4:
94:7e:4a:f3:ba:7c:aa:1c:fa:58:66:62:90:1d:e4:17:b5:0e:
63:e4:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:58 2026 by rpki-client