Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: 1L7P714ArZov16Z+8QzZHay2BiKURjIRJhzmbux3DW8=
Subject key identifier: 56:6F:EB:B2:FD:B9:7C:BA:53:B5:F2:38:09:C9:F5:31:3A:C5:72:73
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019F92B66D4C567E56A41A11B55B27F42BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 06:00:56 +0000
Manifest this update: Fri 24 Jul 2026 06:00:56 +0000
Manifest next update: Sat 25 Jul 2026 06:00:56 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: 5zmXlQ2YqaIzIA+kWUrO16hDE7vB7uFdD0YCFCJWNMo=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:6d:4c:56:7e:56:a4:1a:11:b5:5b:27:f4:2b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Jul 24 06:00:56 2026 GMT
Not After : Jul 25 06:00:56 2026 GMT
Subject: CN=566febb2fdb97cba53b5f23809c9f5313ac57273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:f8:f2:05:07:1d:7d:04:a2:f1:b3:61:d0:
31:8c:a1:7d:84:c5:64:69:e5:21:f8:5d:4d:95:07:
90:df:4a:c8:bb:5b:04:ab:ea:98:9f:ed:11:18:02:
17:08:51:ce:db:ed:bb:b9:84:9f:84:a3:54:f3:24:
49:ef:8e:97:67:f4:9b:4d:cd:3c:6b:7f:37:98:17:
57:4b:55:1b:a7:f4:fa:fd:85:b9:04:37:2f:4f:89:
78:2a:c4:f0:89:0a:11:45:87:09:14:c1:1a:9e:94:
ca:51:f3:b7:be:71:9d:7d:98:a6:a1:21:55:8c:fa:
ba:a8:75:0c:25:b5:ae:6c:79:ee:9b:f5:40:a1:05:
52:5c:ed:04:9f:3f:b2:90:e7:cb:64:b1:f2:fe:2d:
55:83:cd:2c:d7:d2:6f:9a:1c:3f:a6:b7:dd:05:72:
23:4e:fc:a8:91:4c:3f:a9:14:89:4d:10:64:ee:70:
bf:25:6b:81:8a:35:a3:a5:32:8f:44:88:29:c1:ef:
80:44:e6:dd:4c:0c:ce:3c:0f:df:e3:47:dc:60:05:
46:86:1a:5c:76:96:03:09:e7:80:1a:5a:47:91:e8:
1e:f4:e2:3b:1f:a6:fe:8c:51:57:87:24:8c:76:b2:
36:07:ba:ad:84:4f:36:74:50:cc:53:80:44:cc:84:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6F:EB:B2:FD:B9:7C:BA:53:B5:F2:38:09:C9:F5:31:3A:C5:72:73
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c0:19:38:a2:48:95:a5:a1:ef:3c:4a:2a:b2:2f:1e:89:b8:
10:32:c9:af:ca:26:d5:cd:09:aa:5e:5f:03:0c:d9:e0:90:4a:
a4:29:95:54:82:31:10:bd:4b:60:d8:a2:63:8b:31:59:e0:a6:
3c:b0:fb:47:42:3d:b3:8b:d8:0b:91:29:4b:fc:c9:b1:9f:50:
25:ad:0d:7e:6e:19:07:ab:22:3e:69:e1:73:33:48:f4:6b:5f:
07:c2:f5:18:13:4a:e6:45:f5:16:ca:dc:97:e0:02:7b:57:76:
d8:97:6a:94:ac:1c:e5:0f:ed:fa:0e:46:e5:73:09:b8:6c:07:
e0:94:2c:0b:19:b2:00:67:64:9e:17:77:5c:3e:2e:5a:bb:f4:
87:b9:a8:12:5d:96:55:d4:e6:c0:cf:1e:be:ad:9f:2e:9a:bc:
f4:cc:2b:30:75:74:c0:2b:68:84:06:43:7a:51:10:90:6d:99:
e0:54:c9:82:1a:ea:71:01:0d:34:ae:28:d8:17:0c:fe:46:9b:
af:dd:55:c1:bc:76:23:ae:70:e0:19:91:90:70:0d:3f:aa:00:
fb:f0:80:4c:05:90:87:35:16:50:8d:1b:cc:fb:89:7b:b8:76:
92:a6:13:c6:fa:aa:15:b2:40:b3:0d:31:ee:e0:e5:2e:25:fa:
8d:93:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:33 2026 by rpki-client