Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: KoT0c8dVh2TQR1PKbSTDxbuShsNy2b3hA3Xjd9eUxaI=
Subject key identifier: B9:74:6B:B5:FA:03:88:E2:FE:13:4F:21:E2:0A:01:F3:94:4F:C2:10
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 019F90C78939E378FEF8F0D4F7B24968C32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0CE1
Signing time: Thu 23 Jul 2026 21:00:23 +0000
Manifest this update: Thu 23 Jul 2026 21:00:23 +0000
Manifest next update: Fri 24 Jul 2026 21:00:23 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: +gZLFR5JN8QFNqZ8m0nnledCdENJHpAI17Ljz+0Xxas=)
2: G_3AbkBvxlIP88eiGt3CS6nBjms.roa (hash: HxmAkTnKX1MXFmf40b0A8DoHMlH+AhQxL52OcvMUs9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:89:39:e3:78:fe:f8:f0:d4:f7:b2:49:68:c3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Jul 23 21:00:23 2026 GMT
Not After : Jul 24 21:00:23 2026 GMT
Subject: CN=b9746bb5fa0388e2fe134f21e20a01f3944fc210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:39:fc:98:b0:51:13:df:43:35:57:25:9f:
55:ce:10:10:03:79:96:47:2c:f3:99:84:7b:68:5f:
df:5a:33:95:2a:45:90:39:4f:ec:95:ed:c5:06:a7:
c6:28:c2:09:e6:73:5e:3e:e3:03:b4:c3:18:67:8d:
6c:cb:43:00:28:73:b5:d0:aa:5f:2f:39:0d:4b:27:
55:4d:ed:26:01:30:10:c1:b8:23:96:fa:ef:82:02:
c9:c6:0f:cb:8d:c8:13:7e:d4:b3:9f:5f:9d:76:a0:
e8:68:c3:82:f1:d8:47:90:d7:f1:16:ed:e2:e0:c1:
2e:7b:49:2b:de:ae:b0:b3:b8:82:32:84:bf:9e:a9:
32:c9:1b:a8:95:25:7d:c4:05:94:f9:e3:ae:4b:3f:
19:8e:a8:19:33:40:92:b9:b3:55:75:03:cf:37:53:
f5:4f:88:e3:c9:4f:f1:ef:17:4c:9a:f9:f2:d6:09:
1d:a0:a8:89:95:77:8b:52:1d:fa:12:84:7e:c2:83:
e2:a5:79:55:ba:6e:01:8c:48:f3:93:6c:02:14:c3:
e2:65:f6:bf:6e:f3:1d:dd:dd:e7:7d:a8:32:ea:a0:
80:88:ff:25:2e:92:72:db:e2:67:45:81:32:0a:97:
d9:b9:e0:f7:aa:07:ea:20:e9:7a:24:1b:84:24:e1:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:74:6B:B5:FA:03:88:E2:FE:13:4F:21:E2:0A:01:F3:94:4F:C2:10
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:11:65:40:c0:d7:6f:c9:67:71:77:c6:68:47:6e:c6:f0:19:
cf:46:9b:8d:99:e3:ed:a8:33:1d:74:31:c8:b4:b8:1a:33:32:
8d:09:b6:c0:33:46:5d:17:3e:60:c8:04:0f:27:12:2b:c4:ee:
f8:96:5f:5c:45:a1:a5:32:82:b8:87:a3:11:d9:a5:88:19:fa:
da:5b:81:41:3d:e4:17:35:10:d1:6d:35:ba:c8:54:ba:70:fe:
95:86:d1:cc:1f:05:cf:62:49:19:f1:4b:40:7c:24:49:19:45:
43:3a:5d:da:69:a5:3d:14:9d:43:c4:bc:ce:9a:cb:cb:a3:bd:
60:f0:d0:f7:ba:04:05:6a:f3:c3:f2:5d:6a:d2:e9:51:af:11:
8d:fc:aa:37:64:43:77:cf:fd:cc:e4:cf:6b:85:ad:9f:80:f0:
87:0a:dc:03:39:70:50:d1:60:e8:65:52:00:ab:aa:4f:45:5f:
99:c9:76:bb:a3:58:a9:d4:fe:e6:ff:75:ff:3c:ee:72:5a:68:
2c:8e:7e:49:36:8f:51:96:0f:54:72:73:09:11:ea:37:a4:dc:
37:f6:45:55:c8:fe:44:aa:86:03:90:f4:12:32:b6:c9:9a:f5:
39:58:39:41:cd:b4:15:c4:42:30:01:76:57:e8:e6:58:ba:65:
80:7c:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:43 2026 by rpki-client