Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: OjWhgXXPHXe1U6qB1QgPOK3Pe0BS4YfGH6UsLY2LmMM=
Subject key identifier: 28:01:6C:D7:30:32:4F:A3:13:E7:E8:47:79:7F:9C:F7:F1:F4:5C:C3
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019F905A1896E99EB15F69C20E7ED444746C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0CFE
Signing time: Thu 23 Jul 2026 19:00:51 +0000
Manifest this update: Thu 23 Jul 2026 19:00:51 +0000
Manifest next update: Fri 24 Jul 2026 19:00:51 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: pvR5HtVwbWCEeQ+Yx/x5Xt4NLqRHJMBXYOnQpuffcXY=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:18:96:e9:9e:b1:5f:69:c2:0e:7e:d4:44:74:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Jul 23 19:00:51 2026 GMT
Not After : Jul 24 19:00:51 2026 GMT
Subject: CN=28016cd730324fa313e7e847797f9cf7f1f45cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:c4:63:47:56:44:ee:39:ab:da:e1:9f:25:
65:c5:da:16:31:0a:ee:11:d8:1d:2c:d7:59:c4:73:
21:97:2d:7b:2b:b0:fa:0b:da:13:31:ba:8d:90:08:
e1:74:3a:5a:02:24:6e:37:de:bd:7b:fe:8e:d7:cf:
82:2b:48:b5:4c:56:8d:ae:03:e3:20:ab:48:16:e6:
87:5c:70:8b:2e:3e:28:11:f5:84:d7:b6:01:ca:ec:
72:ea:3b:73:39:22:57:4b:03:00:8c:e5:b8:91:52:
4f:6d:8d:be:d8:0f:c9:9a:f8:d4:5e:c5:b8:1d:37:
89:8d:c8:cc:56:3c:f2:4b:1d:e1:5f:ae:cf:b7:69:
16:24:2a:2c:c2:aa:fe:d6:24:de:83:3b:6a:ce:a3:
1f:33:0d:81:5e:f2:cb:e3:d2:cf:d5:d8:80:e0:4b:
e7:37:4f:05:83:41:cf:eb:2f:42:e2:8a:80:7b:ef:
9e:1c:15:d2:72:49:3a:2a:c2:be:0c:8d:a5:da:38:
5f:ba:81:1e:b3:1d:45:82:b5:7f:77:e5:67:dd:0c:
11:f6:42:c6:80:fa:ab:86:01:8d:35:e6:b8:a0:ff:
fe:8e:0b:35:2b:a4:61:14:b2:f8:3d:bb:0c:92:d5:
d7:70:32:da:5d:ea:55:62:75:a4:5d:1c:af:36:94:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:6C:D7:30:32:4F:A3:13:E7:E8:47:79:7F:9C:F7:F1:F4:5C:C3
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bc:cf:44:ab:07:ca:f0:94:3b:a5:36:87:de:6a:0f:5c:f7:
bd:68:09:1e:5b:21:cc:aa:e5:5c:a9:6c:bf:45:96:3a:aa:2b:
7d:73:c3:d6:5d:5c:89:35:ec:24:7d:19:7c:8b:57:a6:44:df:
cb:52:af:90:1e:20:92:6d:ba:94:14:7a:0a:32:d5:5a:4b:df:
95:89:55:70:2a:4b:27:5e:bb:a7:01:e6:31:b0:bd:3e:e0:7a:
f9:3a:32:bd:fc:4e:26:ad:a2:2e:e1:98:14:e8:7b:65:9d:76:
0f:a7:e5:d6:f9:ba:d7:7c:4f:13:17:2e:5d:1e:82:e0:4a:b3:
61:76:79:68:b7:06:60:82:0f:33:5b:52:ca:91:2a:57:92:7c:
b6:3a:70:b8:15:ed:e5:90:f0:87:82:17:df:f6:2f:a4:d9:33:
da:75:0a:19:28:9b:fb:27:61:e6:fa:86:db:7b:9e:91:3e:08:
de:0a:06:2c:cb:7e:50:17:65:77:ee:f2:6c:fa:4d:2a:1f:d6:
dc:e3:fd:22:72:47:7d:f9:67:12:6a:02:70:cb:c6:4a:3a:d0:
bb:84:2c:2e:c7:b6:e1:cb:12:1c:80:08:93:33:62:e5:61:3b:
4c:46:a7:8e:17:af:a0:8e:12:f1:99:b3:e6:7e:14:af:ce:66:
ec:42:e0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:40:17 2026 by rpki-client