Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: +HhbsnxWODO3vBFHlCX90MDgGRjIav325kmCWk+PiTM=
Subject key identifier: DA:A4:63:B1:DB:62:2B:2C:32:3C:6F:30:F3:25:C1:E6:B5:DA:DA:75
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 019F91A4456A9D52CCC24ECA24D2DE8CB27F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 01:01:29 +0000
Manifest this update: Fri 24 Jul 2026 01:01:29 +0000
Manifest next update: Sat 25 Jul 2026 01:01:29 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: 40DsL1SwWvj/JQk9o2fgngX+IfQG5s+ez21HSCWgSuA=)
2: D3RzDDZgPLG3UCsxVx6Q8ZzLm1I.roa (hash: kVx9KqwTwAznM+coaQfniQbA9ErAhmA+cdao1OKFFKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:45:6a:9d:52:cc:c2:4e:ca:24:d2:de:8c:b2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Jul 24 01:01:29 2026 GMT
Not After : Jul 25 01:01:29 2026 GMT
Subject: CN=daa463b1db622b2c323c6f30f325c1e6b5dada75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:e4:70:bd:d3:c0:60:e8:d0:32:d4:70:0a:
eb:e8:09:ac:28:b1:33:3a:b6:25:cd:8c:33:7e:62:
30:0e:ae:b5:bb:45:26:76:e5:1c:97:9f:98:2f:8b:
8b:55:cd:ab:91:fd:ac:25:d2:00:88:39:c2:3e:9c:
03:65:93:1b:c6:07:85:f3:09:3d:25:aa:0b:15:c5:
6c:6b:fb:c7:e6:27:86:97:ac:ef:7f:45:cf:0c:94:
f9:5c:bb:f0:b6:ec:0a:7b:65:bc:f6:2b:62:f6:04:
c8:05:8d:26:43:3b:93:f1:9b:7d:2e:b6:17:dc:f1:
53:14:40:2c:ef:3e:cb:b9:93:4c:cb:ff:a8:22:75:
a6:f6:7c:86:00:31:fb:d6:60:b9:88:0b:34:12:bb:
ad:f0:56:58:0d:9d:9e:bb:45:ea:2b:0a:46:b7:4d:
77:b6:0d:f6:13:73:4b:9b:ba:2d:eb:d9:64:c9:36:
e1:cb:4e:7f:94:cc:dc:90:32:c5:cc:32:2c:79:3f:
2d:03:8f:10:e9:6c:38:a0:9d:d4:70:fe:e4:d2:da:
b5:81:a9:59:2d:60:fd:c8:6d:95:42:b7:14:e5:6c:
79:cd:36:b8:00:0e:9e:d9:ea:ce:f0:1e:73:12:8c:
80:7c:33:33:18:16:a4:3a:64:9c:eb:49:13:36:9d:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A4:63:B1:DB:62:2B:2C:32:3C:6F:30:F3:25:C1:E6:B5:DA:DA:75
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:15:c4:06:78:3e:f3:38:f6:25:d7:00:a4:59:6d:60:0b:c3:
4b:7d:c3:3d:26:d7:a1:d6:b8:63:6a:5f:a5:46:e6:9d:42:7e:
38:55:30:dc:bf:30:1b:2b:31:bd:ac:96:bf:42:01:93:a7:7a:
60:ea:0d:ec:9a:02:a7:7a:a7:63:f9:76:89:c0:7a:99:80:bd:
d6:d2:9e:72:19:a8:b2:f8:15:8e:af:a9:56:fa:69:ba:56:5f:
97:ff:57:fc:14:3f:de:6e:24:bf:b9:6e:c3:50:53:fb:36:3a:
23:d5:dd:96:f0:08:63:07:8c:1a:9c:5d:63:0f:be:45:b7:ff:
ef:53:f4:60:bc:b6:cf:27:7c:0b:2c:84:87:63:80:f8:5f:56:
da:4f:1e:3b:fd:e0:29:60:47:0c:1b:4e:01:7d:f5:ae:ca:87:
29:0d:02:12:4a:db:df:d4:1c:3d:e8:da:10:f8:60:98:88:2e:
e5:f3:39:10:b4:75:fc:a7:0a:6b:66:28:5f:4d:52:e6:14:fb:
5d:ff:52:8e:b3:b8:f9:46:0d:68:ec:6d:53:92:d5:b6:70:ab:
41:76:84:69:16:f5:fd:1b:32:b1:dc:28:77:59:b2:16:fe:fb:
38:83:3e:b0:d9:a6:18:db:35:00:ee:c0:87:f5:b9:69:ca:ef:
b1:12:be:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:25:37 2026 by rpki-client