Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: e25EiBdzsF1MJ1X5dF00MjQehZze0uxOtTxCBui8IF4=
Subject key identifier: 14:B3:D4:33:9D:98:43:1E:47:1E:4B:F1:F2:A5:6C:05:81:54:3B:D8
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 019F9022F0CA676C027717F64007C9525D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0ED9
Signing time: Thu 23 Jul 2026 18:00:36 +0000
Manifest this update: Thu 23 Jul 2026 18:00:36 +0000
Manifest next update: Fri 24 Jul 2026 18:00:36 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: RNuYgZA6cnNU+RUDyHeRuPEH6yBXlPQh8JWv1eaKC5M=)
2: PrQ9lga9Ki2nMKZgqqoUsecApCI.roa (hash: wgW6ob7p1bWzADPUesI+OZalVcxaNSlVibSRrGZpWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:f0:ca:67:6c:02:77:17:f6:40:07:c9:52:5d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Jul 23 18:00:36 2026 GMT
Not After : Jul 24 18:00:36 2026 GMT
Subject: CN=14b3d4339d98431e471e4bf1f2a56c0581543bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:83:9d:f2:9a:ba:53:b0:a3:f5:2a:0c:20:
76:c1:ad:55:fa:8d:82:ae:be:8a:88:a8:d8:63:c6:
8d:ed:7e:d9:21:08:a7:05:45:0c:10:d0:fb:43:97:
2f:00:e9:bc:2f:87:00:99:11:34:76:77:9e:57:d7:
58:e1:d8:e1:1b:e8:be:44:99:23:eb:25:30:c1:e8:
7b:d6:a9:0e:84:58:76:44:7d:ba:e7:46:8c:9f:36:
05:49:80:79:d0:9b:7d:28:df:5b:fd:e9:8f:f8:d0:
c3:e5:4d:d6:a4:36:f5:67:86:24:3d:4b:98:bd:48:
99:92:4e:f2:50:cf:82:e9:3b:e8:b2:23:da:8f:c9:
c1:e4:33:dc:63:a3:43:14:94:70:ca:37:c3:6d:00:
79:22:2f:b3:75:02:14:a6:2c:11:81:40:e8:1e:ae:
02:e1:76:e3:d9:72:6b:3c:e7:81:59:4a:1e:bf:db:
f6:07:f2:80:ce:ec:8f:a0:42:58:f6:bf:3f:f5:b7:
69:82:a5:d5:7a:44:a8:31:e1:1b:33:90:f1:5c:c8:
60:ba:d9:2e:b5:5d:d8:00:21:82:50:6b:43:8a:d6:
d3:77:c5:03:7e:c9:1e:be:18:86:83:31:89:7a:e4:
75:a3:9c:d2:86:11:f0:82:ee:30:53:cb:49:15:8d:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B3:D4:33:9D:98:43:1E:47:1E:4B:F1:F2:A5:6C:05:81:54:3B:D8
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:92:43:31:15:54:6c:c6:63:db:74:be:97:8d:3c:9a:b2:51:
be:5c:f8:16:00:93:f7:6d:93:95:f9:c1:f7:3a:2b:f2:20:a9:
57:e6:0a:0a:3e:a0:9f:98:8d:64:bc:66:74:22:72:23:6b:f4:
49:cb:64:df:af:e1:d0:ac:da:5c:f6:39:2b:34:ff:dc:6a:8a:
03:22:62:47:9a:59:9f:6f:13:86:28:08:f8:8d:a5:8b:91:1e:
f4:79:66:ee:01:ff:68:b3:97:3d:72:0f:7e:26:5f:2f:2e:4c:
a0:e6:5a:ea:b9:c4:93:1a:ad:23:9b:f9:c5:51:4d:d5:e7:f4:
00:34:88:18:07:f9:c1:db:fc:6e:af:03:04:b7:af:4d:c1:fd:
ab:c6:d1:d1:37:6b:39:f9:c4:a5:b1:35:c3:f2:ca:eb:f5:32:
9b:a5:3f:a9:dd:fb:d5:39:a8:4e:0d:5d:2d:3f:80:2f:29:c5:
06:06:7a:e6:87:a3:be:d3:56:05:b9:a5:21:b3:4f:9d:56:b0:
f3:79:54:16:f6:e8:c7:3f:f0:f3:79:4d:d8:46:2f:73:d7:5b:
78:de:8e:57:dc:82:82:40:3c:22:b2:63:4f:87:ea:2b:f7:55:
5b:cb:77:d5:5b:53:cb:34:c9:62:40:d1:3d:9e:6d:38:3d:e7:
d4:90:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:48 2026 by rpki-client