Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: l9l0+zcDlKZXoRmZi7D9YGIINZVxH0Zr7i8FOFG1qZE=
Subject key identifier: B5:92:50:F1:42:3F:E7:E1:EA:33:EA:E9:3B:95:79:CD:8A:D3:07:53
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 019F9090ADDACFFAB9446B9B162FFEA3E184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 05B7
Signing time: Thu 23 Jul 2026 20:00:28 +0000
Manifest this update: Thu 23 Jul 2026 20:00:28 +0000
Manifest next update: Fri 24 Jul 2026 20:00:28 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: A0+axCbzikwWmW1cd5Ayx4++rCKzb3DnIi9mXVpxHuw=)
2: 8J8jqfIBZIcDi5qcEjDOA-SS3uk.roa (hash: P2MosB3uZAItjOGMQglzm3PWOTUEZCA6IE9hN8uIIUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:ad:da:cf:fa:b9:44:6b:9b:16:2f:fe:a3:e1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Jul 23 20:00:28 2026 GMT
Not After : Jul 24 20:00:28 2026 GMT
Subject: CN=b59250f1423fe7e1ea33eae93b9579cd8ad30753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:d0:f3:54:bb:97:3e:47:3a:3f:df:64:98:
39:ac:14:15:02:54:46:2f:d9:d1:8e:89:1f:d0:89:
85:44:56:14:e8:af:63:65:7c:68:20:27:77:65:16:
6e:ec:21:b2:97:37:e6:20:1a:d8:54:67:76:c4:dd:
25:e1:32:a6:6d:9f:4a:13:f3:b1:b7:97:ef:72:01:
15:74:07:bf:a1:68:98:60:ce:88:1f:2f:d7:72:e3:
f5:62:ba:b7:d0:57:dc:75:18:83:aa:3f:60:de:0b:
88:23:c3:02:db:22:7f:8b:3b:96:93:97:ce:6d:7c:
33:1f:c7:f0:52:91:60:d8:fd:85:64:0c:0e:f9:56:
3b:19:c2:41:40:2c:a7:73:e4:35:9d:66:86:e9:23:
f4:0e:c3:4d:a3:6a:53:ed:09:4c:76:ad:0d:69:ba:
2a:8e:00:88:6a:0b:03:dc:7e:89:a3:6e:c8:c1:34:
f8:80:d7:db:e4:60:8f:4f:12:9a:0a:e5:a0:26:c3:
b3:eb:c5:eb:17:06:b5:27:36:0a:0a:af:4b:ed:79:
5a:6a:18:f1:ab:2e:da:b8:04:d4:27:43:aa:eb:5e:
0d:72:d7:54:39:7e:0f:92:67:5c:58:72:9c:75:7f:
9c:cf:f0:f6:06:1d:60:53:73:f3:62:11:64:9f:22:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:92:50:F1:42:3F:E7:E1:EA:33:EA:E9:3B:95:79:CD:8A:D3:07:53
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:61:a4:95:73:a3:6a:75:b3:2c:40:34:b2:7c:88:90:1c:ca:
c6:cd:40:db:67:d2:b2:17:8e:ba:a6:fd:64:aa:fc:e3:3e:0b:
b2:c3:1d:d1:7a:8e:f9:f4:1e:1a:4b:4a:91:03:08:b2:e7:15:
23:78:71:b6:73:5f:b1:45:59:22:a6:0c:a7:86:b5:2f:b4:31:
8d:ae:d1:4f:8e:2b:bb:1f:1d:8b:b6:cc:1e:5d:00:ba:de:72:
e6:aa:33:d9:49:f3:da:0d:e2:0c:cc:2a:eb:1d:dd:12:d9:18:
08:f7:7f:80:37:17:7c:8b:83:3c:7f:84:68:b0:5e:91:54:2f:
73:12:0a:a9:b4:4c:bf:12:7a:dd:ee:cd:80:fa:48:27:37:46:
25:2a:06:ee:42:d2:3b:b2:8c:2c:e8:32:5e:0a:69:89:2a:57:
7b:ad:51:a9:4c:19:90:5b:18:56:07:80:a8:aa:09:fd:7b:03:
0d:dd:02:fa:a7:d5:d8:da:55:48:80:14:4e:ae:ed:84:86:b4:
f8:b5:2f:a4:eb:18:fd:a3:64:c2:08:30:3f:4f:44:43:33:2a:
79:e0:7c:dc:67:00:55:cc:c3:7d:24:ff:40:66:b3:3d:40:04:
7c:41:48:89:1f:f6:a0:76:1b:fe:6a:de:fc:c3:fd:6e:7f:d2:
0b:89:75:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:08 2026 by rpki-client