Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: cWrdNHezanDWgiR9LaUldf9oZ94nL3Sg0esXzIMGPAk=
Subject key identifier: DF:6A:38:0D:73:45:A2:B0:07:6F:FC:E8:CC:EE:77:F3:75:9F:F1:5A
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 019F9090D80AAFC8B91C58E600F500DF8C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 06EF
Signing time: Thu 23 Jul 2026 20:00:39 +0000
Manifest this update: Thu 23 Jul 2026 20:00:39 +0000
Manifest next update: Fri 24 Jul 2026 20:00:39 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: pGNUxYIpB3kY6VNrIB/tKykOikX38wYXS+X77kpYnsI=)
2: JqYIovUOhpMaXbCswunFuuxrXZA.roa (hash: pzyg9bet0YZqCdKyQjx/ZoPH6pBnBtJrgE7rSpscrOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d8:0a:af:c8:b9:1c:58:e6:00:f5:00:df:8c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Jul 23 20:00:39 2026 GMT
Not After : Jul 24 20:00:39 2026 GMT
Subject: CN=df6a380d7345a2b0076ffce8ccee77f3759ff15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:9c:96:2b:45:3c:34:5b:9b:40:35:47:6c:
6f:5e:ff:bf:15:79:10:a2:d4:c7:9a:bd:dc:f4:9f:
4c:f1:fd:93:8c:49:11:45:8e:70:f5:43:ba:88:11:
3e:25:25:11:ab:41:e4:5d:fc:f3:49:1c:19:a2:24:
52:a6:fa:51:28:9b:96:23:17:28:39:fa:36:10:63:
7c:1e:88:5c:ec:fd:6a:97:95:79:8f:93:02:9e:ac:
34:0a:58:76:6c:c2:b4:a9:9e:38:16:e4:2c:fb:ca:
39:3b:ee:28:82:36:fc:ee:0e:01:6c:d3:15:69:54:
f8:3e:ec:98:36:29:af:18:e9:f1:07:93:ca:be:c8:
05:52:d2:0c:58:c4:05:6f:01:db:f8:ed:5e:da:a2:
e5:5f:83:d7:67:45:b7:5b:08:0e:aa:01:ed:3f:87:
61:d7:e8:11:37:dc:d7:e6:68:b0:2f:e5:82:53:d9:
6a:c0:68:17:40:de:3c:26:e9:23:25:83:8b:f2:c8:
b3:ea:d7:45:32:0c:df:03:1b:47:1a:e4:c1:a5:8e:
ef:84:1e:bb:cb:8c:b8:51:5f:1d:4f:64:69:99:07:
3e:9f:37:7a:5a:8e:b7:c6:c1:ed:e4:a5:bd:43:c7:
86:36:20:1a:f9:2a:72:aa:93:65:22:05:95:ad:28:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6A:38:0D:73:45:A2:B0:07:6F:FC:E8:CC:EE:77:F3:75:9F:F1:5A
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:dc:29:4b:31:4c:3d:1d:fb:59:39:3d:9f:5e:b9:64:50:a9:
ee:18:42:5e:c4:3f:dd:c8:92:44:88:32:52:f1:5b:a8:23:60:
0a:e8:00:91:c8:7a:3c:b7:a0:38:77:bd:3a:c0:90:fc:a4:47:
30:bc:c4:91:a4:0a:27:18:bd:93:a5:9f:36:73:d8:a0:6a:b3:
60:47:84:42:75:cf:69:5e:85:4d:4b:b8:45:18:d8:dc:a8:fa:
b1:16:b2:cb:1d:0b:81:77:d9:42:96:ad:7b:41:c5:87:57:5a:
1f:ad:55:e1:29:9e:31:42:4e:8d:75:c0:e6:a4:dd:73:ad:2f:
e1:77:56:44:d9:e2:4f:b8:f5:77:d9:2d:78:3b:e4:9a:95:9e:
cd:4b:c8:c1:48:be:f5:bd:38:95:fd:56:a0:8c:42:4f:5a:18:
76:f8:f1:b3:4f:ac:c5:9b:91:93:ee:40:54:a9:3a:b3:ef:e3:
7d:fc:b7:63:4d:31:9f:2e:e8:b5:fe:a9:80:a0:39:4d:1c:86:
59:06:e7:a8:c9:77:f5:d4:50:93:20:a5:f8:e6:e3:32:bf:59:
40:d1:f2:d6:27:fc:dd:da:95:25:4c:92:11:10:fb:c0:c4:c6:
19:5e:62:81:35:f0:ec:69:0b:bd:02:93:04:3c:ad:62:99:ed:
1f:1e:7e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:58 2026 by rpki-client