Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: 8wrmPW3RYK9zbs4oyKEKfD2Jz9IFzsCX7+FJdizdeMs=
Subject key identifier: 6D:60:8C:EC:BA:42:6D:5C:BB:07:C2:C3:24:2D:B0:A3:0A:4F:AF:6C
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 019F90913423DAC4A9D7894C527B2C4EAD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: 019E
Signing time: Thu 23 Jul 2026 20:01:02 +0000
Manifest this update: Thu 23 Jul 2026 20:01:02 +0000
Manifest next update: Fri 24 Jul 2026 20:01:02 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: Kf01RW8C5SE2xmHa//Lu+cg2rrZ8GbkH9pzIbgy2Y2g=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:34:23:da:c4:a9:d7:89:4c:52:7b:2c:4e:ad:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Jul 23 20:01:02 2026 GMT
Not After : Jul 24 20:01:02 2026 GMT
Subject: CN=6d608cecba426d5cbb07c2c3242db0a30a4faf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:d7:06:9d:d2:7d:fe:49:af:44:32:25:52:
39:ae:9f:6b:2e:3c:37:3f:60:67:a6:42:88:59:32:
0b:7f:67:24:28:45:0f:5d:c5:96:47:ef:3d:2a:cc:
07:06:d6:af:86:a0:74:e2:12:6d:0b:e3:e0:01:e0:
a8:8d:f8:68:5b:36:62:d5:9b:96:6a:c9:fa:8c:1e:
a0:0d:2e:35:62:bb:4b:e5:fe:1f:68:1f:2a:ab:71:
fb:6d:64:ab:6f:2f:45:0a:1c:44:c9:90:f0:79:a2:
50:e8:1b:f2:84:e9:36:5c:cd:99:53:e4:62:72:95:
bf:08:c0:5b:02:fc:09:bd:02:46:c7:be:20:b5:4a:
50:8b:50:54:de:ef:18:8e:86:4e:fb:a0:5a:ef:1e:
9c:6a:c3:fe:ea:72:8c:4f:78:38:5b:ed:3f:5c:fd:
da:51:d2:d7:76:02:45:88:62:8c:d8:53:66:4a:0d:
54:9b:6b:ae:ad:82:ba:db:5b:d7:6e:09:dd:57:05:
4b:e6:8e:2e:10:7f:3c:0f:2e:95:a1:82:93:40:dc:
a0:07:5b:f8:cd:27:d3:13:27:af:2d:0e:aa:00:c2:
08:69:87:09:a1:37:17:64:7c:06:af:a9:d8:f2:57:
70:3c:e5:70:c2:d6:04:f2:e6:83:b5:b9:2a:d6:63:
63:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:8C:EC:BA:42:6D:5C:BB:07:C2:C3:24:2D:B0:A3:0A:4F:AF:6C
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:93:c5:33:46:dc:d3:b7:26:4c:1c:2f:58:e0:87:23:68:9a:
2d:17:c7:a4:ca:3a:56:38:53:73:cc:7c:e5:d2:35:89:a9:79:
8d:90:19:50:de:55:f3:82:27:db:b1:c6:d4:52:4a:65:0e:3a:
c3:8e:dd:53:51:ce:de:d8:7f:3a:28:8d:44:4a:ec:68:fd:f7:
fb:d8:98:f7:ba:de:93:de:15:8d:39:9c:bb:fb:56:1d:e1:a4:
36:ad:ea:86:c0:d3:f7:dc:3c:b1:8e:99:5e:0c:44:d6:62:4c:
60:64:ea:63:19:98:47:ee:f6:08:91:e8:c3:f5:8f:92:43:a8:
d2:d7:95:1f:86:73:86:01:0b:37:ce:2f:7f:34:37:98:ed:75:
3e:ca:f0:34:18:23:58:63:e8:c7:06:f4:f7:dd:51:cc:10:1b:
bb:79:3a:fb:f2:5e:b9:3f:ec:59:5f:ba:a5:70:1f:7f:41:39:
ca:0d:f4:ad:47:3f:72:6c:34:c5:84:60:3f:2e:93:8e:05:a0:
d4:6e:02:3a:ee:b0:70:85:6b:ef:8a:10:6c:d1:8f:4e:a7:34:
05:31:07:82:c4:dc:a7:94:e7:53:4a:39:6f:e6:b9:af:c2:5d:
5d:28:aa:e0:ee:2c:37:d7:6e:c3:a1:ec:79:16:ee:00:49:a1:
5d:f1:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:54 2026 by rpki-client