Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: 61qcqB5RkORLpSNJ212C9PBTHx7OZqBeX13ctQreVRA=
Subject key identifier: AA:72:3E:55:00:73:89:F8:4D:7A:97:1C:C4:67:9E:FB:D6:B8:27:E8
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019F9091262394FBD46C464C7C77CD0E9EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 20:00:59 +0000
Manifest this update: Thu 23 Jul 2026 20:00:59 +0000
Manifest next update: Fri 24 Jul 2026 20:00:59 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: TbtzHrKGsneSrhGH3qpM/jdnNwyVvGwbRUzJsHMj0nw=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:26:23:94:fb:d4:6c:46:4c:7c:77:cd:0e:9e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Jul 23 20:00:59 2026 GMT
Not After : Jul 24 20:00:59 2026 GMT
Subject: CN=aa723e55007389f84d7a971cc4679efbd6b827e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:7f:1d:4d:a5:8b:9b:1a:ed:27:ab:09:19:
1e:d9:9e:49:d2:7a:d0:5d:c7:2e:73:94:5e:05:30:
e1:61:69:be:b1:4f:8c:ee:b0:35:7f:a4:f1:22:c6:
bc:be:4f:dc:2d:c4:b7:f6:dd:1d:46:8e:1a:fe:35:
35:4e:b4:2d:69:88:61:8c:66:53:7c:ba:6c:71:61:
d7:92:b8:13:b6:81:57:f2:6a:a6:b6:b3:8e:32:25:
5b:47:89:7f:08:4f:c7:1d:7f:70:e9:82:6a:91:f4:
f3:25:2f:36:6f:51:5f:4b:5e:b5:88:de:9a:a5:7b:
e6:cf:69:8b:df:bd:57:3b:d3:20:32:28:ca:c1:13:
ea:4c:fa:6d:39:7f:0e:11:fd:23:76:d9:6d:6e:ff:
c9:fe:0f:ec:2c:e0:07:24:5b:28:43:71:df:a3:4a:
2a:4c:95:39:9d:62:7e:69:28:a9:6b:5a:3a:f6:15:
0a:74:46:4e:a8:bc:8a:a8:2c:4a:e4:71:5d:1e:2c:
c9:38:52:51:f5:ed:2b:c9:d1:90:ae:c7:15:fd:21:
0c:68:5e:e2:d8:b7:2e:0d:ec:f0:de:d4:e6:94:aa:
d9:52:6b:b4:dc:ae:57:06:34:66:34:30:8d:ef:2b:
c6:ad:d7:a4:9c:96:b0:1f:3a:51:76:98:d5:c1:75:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:3E:55:00:73:89:F8:4D:7A:97:1C:C4:67:9E:FB:D6:B8:27:E8
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:52:f6:bc:91:0d:4a:84:e8:98:98:64:f6:99:42:dd:f6:c9:
f1:95:66:5d:f1:ef:0d:ea:e8:ec:55:69:c9:4e:b1:9d:1f:3d:
38:b0:21:e0:f6:89:a3:53:83:ce:be:1f:ef:dc:92:42:bb:39:
7e:5d:e9:01:05:c3:1d:f4:0a:d9:03:08:33:30:e1:68:63:95:
98:f8:37:f0:9c:2a:cf:6a:fa:dd:9b:09:42:86:7d:18:22:8c:
6f:36:2c:cb:f0:1b:35:b8:63:90:a7:9b:41:f8:d6:57:ac:16:
9b:71:3b:10:73:00:cd:9d:2e:06:8b:ce:fa:82:99:e8:15:03:
58:c7:c5:5b:6a:de:07:a7:e8:3d:ba:6a:3e:71:70:a2:3c:46:
7a:f8:97:69:da:47:bc:b3:7a:38:8e:3a:96:f0:a0:af:30:cf:
c6:5b:43:6d:a4:54:78:00:73:64:03:a4:9b:06:97:61:ed:93:
e7:9a:53:76:2d:81:1f:97:67:ef:25:72:83:9b:d5:7a:d5:e3:
99:69:6e:d5:ea:8f:54:96:6b:63:92:3e:fa:86:aa:3f:05:85:
31:e5:35:04:b6:50:90:ad:fd:e6:44:43:61:e7:c9:2a:14:fe:
d3:31:c1:a0:58:8c:86:e5:a9:13:a7:63:c8:79:81:78:8a:24:
eb:ac:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:35 2026 by rpki-client