Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: S/71O3UWOshe1R1WvDTOXofNCx56+ac8GnqMrTC8yx4=
Subject key identifier: 84:86:4F:E6:D8:B0:7E:16:D2:E4:00:74:7E:5F:78:33:A5:1F:29:C5
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 019F90233365BD695163EC57EEB0D9D4B2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 0949
Signing time: Thu 23 Jul 2026 18:00:53 +0000
Manifest this update: Thu 23 Jul 2026 18:00:53 +0000
Manifest next update: Fri 24 Jul 2026 18:00:53 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: L7ZofZpwhOeOoMhM7oWCRLKliH7ZnX1LHIc9XisOFBY=)
2: PhborNJW4v901OmJBHlugkCPu9Q.roa (hash: Woe0vtydZEfAzh9wNFeDl+e4gU+OEGllk8tizf6C77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:33:65:bd:69:51:63:ec:57:ee:b0:d9:d4:b2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Jul 23 18:00:53 2026 GMT
Not After : Jul 24 18:00:53 2026 GMT
Subject: CN=84864fe6d8b07e16d2e400747e5f7833a51f29c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:d0:47:91:18:74:eb:06:6c:0f:f5:94:59:
e4:f0:54:aa:8c:a6:a2:dd:9a:d9:45:bc:85:e2:5d:
d9:7d:35:e9:c4:66:49:30:93:b2:bb:1d:0d:4a:db:
c2:b8:5d:c2:21:22:67:bd:0b:52:98:09:d7:98:d4:
c6:e4:f8:68:cc:ba:98:2e:91:c2:f2:29:56:41:c0:
ed:38:85:f9:a3:19:6c:c4:eb:7c:68:5b:ac:a1:57:
4c:67:f5:c8:d6:a6:4b:76:cd:2a:ad:f4:89:d5:e5:
cb:bb:5c:14:fb:dd:de:f2:51:07:22:38:f9:0e:a5:
9d:74:f0:4a:86:36:7b:6e:26:b4:17:94:15:cf:ed:
46:80:c0:fc:c5:d3:70:e7:e5:51:56:f7:82:27:e4:
cb:5c:18:40:dc:13:54:2a:1f:b1:3f:43:cb:03:18:
45:c9:3d:69:e0:c5:89:5c:7a:4a:ef:4c:eb:af:97:
e2:e9:04:00:e7:94:ca:6c:d7:98:5f:da:9a:84:c1:
84:29:20:30:55:49:a9:ca:39:e5:d4:22:86:ff:8c:
99:4b:b0:45:bb:60:27:98:c0:a8:51:22:90:bf:41:
74:ed:6e:77:c0:27:dc:28:3f:a7:14:6d:a4:62:79:
8a:6c:f9:3e:1f:e9:6f:b1:55:1e:62:26:ae:5a:30:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:86:4F:E6:D8:B0:7E:16:D2:E4:00:74:7E:5F:78:33:A5:1F:29:C5
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:52:02:5c:eb:ae:9d:f9:fa:50:d4:83:71:14:46:30:3d:8f:
19:c4:1b:62:62:e7:81:32:bb:f8:77:87:b2:7c:fa:8b:f6:38:
61:fc:a8:a5:71:69:c6:82:65:d1:20:51:36:15:70:85:c0:2a:
7d:49:33:bb:c1:d6:aa:43:6e:af:53:24:6c:ae:f9:8d:3f:29:
97:50:80:2e:cb:b3:10:13:85:d0:4c:c3:37:9e:0d:72:98:cd:
c2:8e:19:99:f1:1a:03:03:e3:3e:50:31:28:90:5a:8e:55:42:
4f:de:43:b3:30:44:7e:bf:61:22:0d:36:fb:70:a6:0f:c3:38:
2a:7d:c7:45:26:81:03:d9:ce:ab:dd:96:31:ba:af:95:65:b2:
48:5f:0d:67:ec:b9:e0:15:fd:23:41:4a:57:56:ba:d3:eb:27:
2b:b1:58:bc:af:b9:9b:36:21:71:43:d1:a9:a3:fe:4c:62:e8:
1f:0b:8a:da:0c:48:c9:ff:ee:09:1d:85:a3:df:2f:82:a6:af:
10:e6:24:55:e8:99:2f:8a:c8:e8:7b:e2:29:8c:ec:80:3d:32:
e2:27:4f:2d:40:ba:fd:43:62:0c:96:bf:61:fe:84:a8:d8:8e:
88:9a:3c:f9:30:c3:7b:19:94:07:79:ca:c6:7b:71:81:30:76:
cd:33:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:08 2026 by rpki-client