Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier: tgmHD9TYDxjROww+JnEsSAuzHzYs6zDb1s6KqCyKAmc=
Subject key identifier: 22:8E:43:32:CA:42:23:35:26:BA:49:EC:D5:5C:07:C7:9F:51:BC:AA
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 019F8E6B6BF2441C759252E922A3DF03FAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number: 0486
Signing time: Thu 23 Jul 2026 10:00:32 +0000
Manifest this update: Thu 23 Jul 2026 10:00:32 +0000
Manifest next update: Fri 24 Jul 2026 10:00:32 +0000
Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: dpNb8FeCHai0K6c0n1Es/WHeL6TxbYPdNnVteebPHd4=)
2: SnAngvJCVw89Xk2g4LS33E_cZqk.asa (hash: FEtOy9BdGUDpBihDpdg42cvdy/bIT+6dlxvJ4W17938=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:6b:f2:44:1c:75:92:52:e9:22:a3:df:03:fa:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Jul 23 10:00:32 2026 GMT
Not After : Jul 24 10:00:32 2026 GMT
Subject: CN=228e4332ca42233526ba49ecd55c07c79f51bcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:fd:a2:bc:cc:c7:ad:6f:16:38:34:77:88:
73:ac:f0:ba:78:c6:8b:48:8f:e4:20:2a:37:c2:49:
1e:6d:6d:bb:be:4e:a3:41:2d:13:ec:9e:d6:6d:05:
45:87:93:04:8b:35:d6:70:b0:8a:a2:a2:bb:bb:35:
30:48:b6:7c:cf:24:a6:83:94:3d:dd:4e:8f:92:c0:
0e:a3:b8:03:3f:67:c1:62:6f:ad:4f:8a:4f:76:1a:
80:08:5c:0f:c4:19:b7:73:55:bd:b1:1d:12:62:2e:
85:b6:70:c2:35:35:b5:22:f3:24:64:a8:ca:c7:fb:
e6:3e:88:e2:36:47:86:2d:70:3a:50:9f:39:17:0f:
27:af:1f:42:06:39:34:29:e4:eb:2c:03:9f:c9:9a:
bf:2a:82:e7:b0:c9:4d:76:f2:e7:b8:e0:3b:93:a1:
b5:66:c6:a8:cd:c7:f0:1f:90:4b:5e:68:6f:2f:6a:
7c:9c:e1:92:fc:1d:c8:bd:aa:4a:99:91:ae:ad:de:
ef:c5:55:81:7d:dd:ec:8b:14:57:a4:c8:90:4b:c1:
38:b4:fe:54:49:5e:bc:aa:47:43:16:e8:f6:90:43:
54:61:fe:e7:26:dc:a4:01:6c:c7:6a:8b:97:5e:2c:
60:83:bf:9a:7d:d2:f5:ad:09:2b:1d:6a:53:4b:d1:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8E:43:32:CA:42:23:35:26:BA:49:EC:D5:5C:07:C7:9F:51:BC:AA
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:07:3a:a1:35:98:dd:02:db:dd:18:cc:7c:1a:59:24:0e:c0:
13:aa:6b:4e:df:63:db:f5:27:7c:63:34:e8:7c:d5:11:65:13:
9c:77:12:a0:f0:9a:c7:fd:58:56:32:b0:19:45:76:e2:08:3d:
98:fd:8e:73:80:c8:b9:db:83:bf:a3:8c:26:07:e8:d1:68:a3:
ac:c8:b1:63:8e:03:87:98:f8:88:17:0d:30:12:b0:cb:f8:cc:
0e:96:29:95:44:d1:fb:f8:70:46:fc:bb:5b:49:7f:d6:0b:fe:
50:20:ce:b7:96:02:45:9c:f1:28:57:35:6d:da:d1:a5:c2:53:
ea:b5:f6:5e:3c:ef:7c:7b:05:be:77:6e:c3:a1:2d:c5:14:d0:
7a:4e:73:57:20:0f:37:cd:ac:1b:13:f8:5b:2c:33:65:d7:0a:
f6:b6:3e:4a:7d:a3:22:b0:c7:7c:95:41:6f:66:16:0c:8b:3f:
d4:f9:d8:0e:ae:83:7b:13:9f:32:1e:ba:48:9a:3d:ce:e3:fe:
83:4d:8e:5f:81:b1:bf:08:b4:ba:0f:14:3c:93:8f:c3:8a:d3:
a4:ce:1f:03:bf:80:2a:30:99:41:04:a1:34:a0:bb:d9:2b:62:
98:50:11:e3:c1:e1:8a:fc:5e:53:21:b3:cf:10:73:2e:59:17:
3c:ce:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:02:58 2026 by rpki-client