Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
File: R4urL0xbYpNYFZNPSoH1YNLXMsg.mft (raw, json)
Hash identifier: x2DRG13QLAQ4JqYudC6x8ZGJly5dLrs84r7ZjitI7Pw=
Subject key identifier: AE:4F:EE:BA:0B:DC:8C:85:5D:05:D2:51:35:AF:D3:9B:80:91:3A:5D
Authority key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Certificate issuer: /CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Certificate serial: 019F90C7CBEAE7EDFD2E948E78DE3F763817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
Manifest number: 95
Signing time: Thu 23 Jul 2026 21:00:40 +0000
Manifest this update: Thu 23 Jul 2026 21:00:40 +0000
Manifest next update: Fri 24 Jul 2026 21:00:40 +0000
Files and hashes: 1: OP4GnLmThCBFy87U3IPXWaJdkGA.roa (hash: CzHuhJNSL0fmMbMPkWZNZ3g6rBvAOQunuRNzTNwmsOk=)
2: R4urL0xbYpNYFZNPSoH1YNLXMsg.crl (hash: YTSRgRUrNweh25PxMZzRIdWyHKvjIgqno55cxDVhrWg=)
3: w9hMpn22nS31hORs4FbfAZ4nCN8.roa (hash: R5QWnTCvV96e97UtI23G1RgAIOStBivXSgOB+MvPMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:cb:ea:e7:ed:fd:2e:94:8e:78:de:3f:76:38:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Validity
Not Before: Jul 23 21:00:40 2026 GMT
Not After : Jul 24 21:00:40 2026 GMT
Subject: CN=ae4feeba0bdc8c855d05d25135afd39b80913a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:57:10:f6:c5:05:ad:68:50:d3:cc:49:94:
14:48:f2:34:5a:16:22:b2:b5:d6:8a:a5:19:bc:9e:
56:aa:24:c6:1c:1f:15:8f:87:74:9f:26:42:8c:63:
bf:7d:93:6f:d8:2f:ae:13:a7:de:70:fd:35:fd:06:
b9:de:3c:0c:e9:9b:8c:31:28:c5:9c:1a:8f:70:15:
bf:91:4e:a2:98:ec:7e:d7:74:cb:58:75:c0:46:c8:
70:48:30:cf:13:65:0f:af:80:42:71:a6:27:15:45:
2a:72:d6:fa:cc:d8:2c:73:bc:c2:61:87:47:2f:10:
c2:52:2c:11:96:86:06:76:c0:31:c5:41:b7:1b:c1:
23:5b:f1:6e:90:e6:6a:49:21:2c:4b:a4:12:00:05:
77:b3:d5:97:57:54:7e:79:e8:ad:53:11:9c:6f:7b:
33:f9:d7:b4:e5:38:25:84:e2:33:25:70:79:d5:e3:
30:8e:1e:f8:90:34:4f:37:7e:84:ab:a6:51:5c:f1:
38:ed:a9:2a:85:5b:4a:76:3a:49:61:be:9e:b5:53:
39:18:d8:10:28:b0:46:92:bd:ed:1c:89:e9:79:ff:
18:a7:d8:0b:f2:50:f9:91:c0:98:bd:45:65:6c:ff:
a1:2c:96:03:7b:4a:9d:2d:f4:ef:dc:ef:50:8d:fc:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4F:EE:BA:0B:DC:8C:85:5D:05:D2:51:35:AF:D3:9B:80:91:3A:5D
X509v3 Authority Key Identifier:
keyid:47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:93:40:41:e6:c8:51:5e:f7:82:96:20:a4:51:04:6e:00:6c:
43:cf:e0:ab:79:72:44:2b:3f:08:6a:ff:a4:81:f2:1c:bf:f5:
c6:9a:47:49:47:e4:0b:8d:79:bc:42:db:3f:a1:92:69:76:59:
e7:b0:b3:f7:28:88:f2:1d:52:4e:ee:1d:88:d1:4f:6f:55:5a:
54:33:af:51:9c:47:29:68:11:fa:cb:57:34:46:4e:b5:b2:6a:
80:f7:8e:e9:a2:95:7d:dd:ec:bb:5e:9f:c8:90:db:ac:4c:f4:
1a:0c:e4:e4:03:d5:32:d6:c1:80:06:1e:08:01:d1:16:e6:14:
fc:d8:db:57:3b:ec:99:ec:51:11:be:db:01:61:ef:92:43:91:
2c:37:92:2d:76:c0:2f:ed:b6:bf:8f:50:3a:6b:e2:7e:64:91:
7e:96:71:62:22:21:9f:4f:91:e8:f3:47:d0:40:09:da:f6:b3:
cc:34:5d:86:84:f9:de:d5:6c:af:1e:81:83:fa:10:c1:2f:89:
28:0b:82:7f:42:83:6c:5d:50:fe:6b:32:41:ba:1a:89:11:2d:
5d:da:49:c6:24:0e:7f:35:a2:c3:4d:63:b8:26:57:2d:cf:0c:
2c:f4:44:17:1d:89:58:0e:da:e9:3c:a1:10:1a:c0:b7:85:71:
c4:c2:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:08 2026 by rpki-client