Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: sSENLWanWsQNke/mj90PlNEZiDSu76N4Bu9l3vdSdlw=
Subject key identifier: CF:DD:29:B4:5F:30:AD:65:F2:16:0B:FD:3A:9E:FF:FF:63:76:0A:A5
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 019F9248E911EB7F8DADFB9076EEDDF97788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 1680
Signing time: Fri 24 Jul 2026 04:01:19 +0000
Manifest this update: Fri 24 Jul 2026 04:01:19 +0000
Manifest next update: Sat 25 Jul 2026 04:01:19 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: h4gzJxjARW4owt7LnSOPEGsiXhNVcovamKBI+6CbWcw=)
2: fJgYZ4ej2JhPoX-SwafXWVTllE4.roa (hash: oBfl5sq0NvI5C3NZdb3K0ESRoAncOv9TLGKLm+7rmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:e9:11:eb:7f:8d:ad:fb:90:76:ee:dd:f9:77:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Jul 24 04:01:19 2026 GMT
Not After : Jul 25 04:01:19 2026 GMT
Subject: CN=cfdd29b45f30ad65f2160bfd3a9effff63760aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:61:03:b5:70:b7:98:3b:86:a0:1f:57:fb:
7a:05:3a:b5:50:f5:c5:db:3a:f4:16:da:52:64:62:
2c:91:ef:c1:1d:25:aa:34:df:65:8e:f5:04:62:43:
1c:c0:5a:d2:52:e5:3a:76:c3:c3:0f:da:eb:f2:84:
dc:27:e0:ce:63:6f:ca:3f:d4:8d:2e:d9:66:d3:bb:
30:43:b9:37:18:ff:ca:08:da:ce:03:96:70:b3:74:
2a:5a:b9:15:5d:2a:13:72:b1:0e:b5:1c:41:4a:a3:
46:d9:04:e3:59:af:c1:26:84:42:52:4f:9b:f8:ad:
45:b4:14:d9:f1:2a:b0:58:d7:9c:04:21:3e:ce:ae:
ec:59:2a:c1:0d:7f:43:2c:53:e0:5c:f6:9d:2e:9a:
94:93:24:2c:b1:6f:7e:9f:17:c7:cf:67:2f:81:64:
c6:04:9e:ca:9f:dc:78:b9:81:bd:48:ff:f4:67:66:
e0:a9:b7:9c:67:16:aa:18:fc:36:24:41:2d:ba:df:
89:71:32:f8:ce:f6:ca:53:d6:0f:c3:14:33:25:9a:
cb:c8:17:37:36:af:0d:24:69:3b:0e:02:36:47:9e:
5b:af:f7:08:d9:f8:8e:82:24:cb:7b:ca:bd:65:ab:
f2:90:44:de:8c:34:fe:03:f4:3e:7a:c0:cf:f0:18:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DD:29:B4:5F:30:AD:65:F2:16:0B:FD:3A:9E:FF:FF:63:76:0A:A5
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cb:b7:1b:c5:ad:60:36:56:4e:e5:20:65:f2:90:07:0f:e4:
5a:76:94:3c:94:2a:00:1c:d5:e0:33:1f:d0:59:55:2c:e2:be:
79:bf:32:01:b2:3e:e2:f1:d8:75:2d:ac:15:4c:58:c0:e6:56:
08:a2:c4:ce:09:29:7c:7e:bc:ee:99:1d:cc:b2:d2:93:b0:c5:
ae:ae:f4:d8:0b:a9:c5:a3:27:f4:96:1c:44:51:71:3d:42:93:
fd:e6:66:4b:c2:0e:f1:61:75:f0:4a:55:65:79:49:9f:7c:ff:
9f:91:4e:b5:8d:34:e4:ce:d1:72:3c:6c:c3:ec:f9:7d:c5:00:
37:45:d3:83:f7:17:4c:b8:75:37:57:6f:18:38:f5:e4:c7:98:
c3:f1:be:19:83:c0:2b:95:37:95:9a:b4:5b:f4:7b:8d:49:b8:
c7:2a:bd:d0:fb:4d:d3:b9:2e:b6:91:a1:6e:02:5b:05:ec:bf:
22:c8:96:8b:6a:d7:fc:24:26:09:e5:81:29:f4:43:57:fd:31:
9e:b6:21:8e:29:52:37:0c:f7:8a:fa:eb:a4:3e:01:46:8f:6e:
4e:ff:1b:ed:f8:95:56:5c:92:a2:66:44:49:e1:f6:20:bf:d3:
de:c8:13:9c:c6:35:dc:c2:db:39:4a:1e:cb:63:ce:20:50:fd:
eb:81:ff:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:58 2026 by rpki-client