Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: kJSsfEopwUKalyKEoVfKJ+7DHTobzvJ95LBVJpHD5e8=
Subject key identifier: C7:EF:53:BA:58:C9:05:8A:6E:BA:50:9D:DC:F4:DD:8D:B7:5F:D2:1C
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 019F8FEBEED85BD4C7668854EB2D0C8263CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 129E
Signing time: Thu 23 Jul 2026 17:00:31 +0000
Manifest this update: Thu 23 Jul 2026 17:00:31 +0000
Manifest next update: Fri 24 Jul 2026 17:00:31 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: h4nFTOsqtZnA+tpg05V0H/qzYi66RhsxGrHft5tHXVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:ee:d8:5b:d4:c7:66:88:54:eb:2d:0c:82:63:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: Jul 23 17:00:31 2026 GMT
Not After : Jul 24 17:00:31 2026 GMT
Subject: CN=c7ef53ba58c9058a6eba509ddcf4dd8db75fd21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:57:17:b0:25:09:4e:81:41:72:9c:0d:69:
2e:a0:d1:c1:e4:2d:40:fa:40:89:f9:89:01:e8:2c:
73:92:fd:56:52:d1:30:6e:8a:20:ea:f0:52:a9:72:
76:f3:29:5c:71:b2:12:4b:b2:52:43:3f:00:dc:0f:
d4:1a:42:b4:52:67:e0:4c:6f:4c:f7:3c:65:08:3e:
58:26:aa:c2:7f:50:da:51:8d:e9:fa:bc:87:d5:64:
72:ea:8e:59:0f:16:3c:6b:8a:57:41:64:6e:1e:d0:
8e:8f:37:ba:06:a1:21:31:95:93:0c:a4:cd:33:18:
0f:41:af:22:ad:53:50:79:b0:95:44:05:3f:97:27:
cf:80:b1:c6:47:57:87:1e:6d:17:1f:93:fc:aa:81:
af:bf:f1:25:e2:03:b7:83:21:e3:af:aa:e9:be:28:
ae:f3:93:e4:a9:b4:d2:c1:1d:f2:c0:98:b6:4d:10:
b4:dd:cf:5e:ce:cb:83:50:a8:d1:d6:46:bb:bf:61:
57:59:39:b8:aa:6e:89:12:f6:b0:56:64:13:f0:b7:
a3:da:56:4c:c3:a9:e4:c8:13:74:db:f5:9c:ee:7e:
af:dc:0e:af:51:ad:c9:a6:aa:d1:f7:0d:13:52:37:
4d:30:2a:6b:74:7a:49:8d:6e:55:8b:b9:be:65:79:
9c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EF:53:BA:58:C9:05:8A:6E:BA:50:9D:DC:F4:DD:8D:B7:5F:D2:1C
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:da:80:46:42:06:bb:4f:65:f5:e8:28:2f:41:82:af:52:
77:7b:84:cf:ce:79:02:f4:d7:cd:bb:70:58:c5:23:6e:69:be:
99:40:f0:38:0e:98:68:4d:16:11:69:60:c2:7c:02:8a:1e:44:
9f:03:55:e7:d5:f0:a5:76:59:a2:57:d0:f2:96:a6:f9:82:a6:
44:01:54:62:bd:61:e5:ea:45:1d:a0:ad:2b:ea:37:00:4b:38:
ea:42:6a:d7:0e:44:dc:79:df:8e:f5:54:6d:08:00:05:13:3f:
5b:da:06:77:35:e0:73:8d:68:54:2b:2c:db:a3:10:98:db:a0:
59:a3:83:7a:39:40:8a:7a:19:d1:26:e9:94:a5:8a:1e:52:10:
d0:e3:41:35:fc:d3:f2:0b:b0:55:16:01:89:98:48:f5:dc:12:
d3:95:fa:c1:2b:83:07:cf:e5:b3:f2:c9:9d:03:b0:97:72:d5:
7d:69:10:21:b0:e0:b5:5f:b0:a5:59:58:6c:34:51:3c:cd:b2:
8d:f7:08:7f:c5:3f:3d:9e:45:06:b2:6a:87:40:a6:6b:32:ab:
c7:b6:9b:15:ac:eb:32:93:a3:29:1f:16:04:6e:f0:80:83:eb:
74:9e:cd:81:dc:73:80:39:fd:1d:d5:7d:7c:8a:73:0c:63:a7:
a6:58:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:58 2026 by rpki-client