Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
File: 4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft (raw, json)
Hash identifier: 6rhcowHvSdymoa+M/GW2EzNtyqUkxCOmXZFeYi9rWeE=
Subject key identifier: 57:04:59:C2:7E:6A:25:D1:91:D7:44:6D:C3:25:A3:72:B0:A6:D3:08
Authority key identifier: E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
Certificate issuer: /CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Certificate serial: 019F8F7E28656A7E6097EB233443D94DDDB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:37 +0000
Manifest this update: Thu 23 Jul 2026 15:00:37 +0000
Manifest next update: Fri 24 Jul 2026 15:00:37 +0000
Files and hashes: 1: 4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl (hash: RpnwjEDg4oQe4X4ls0j8XKMoAkXOlq/5ttyFzmrv6/Q=)
2: HOa--BbyyWw8Rnz_PAkB1Aps5cM.roa (hash: ndFzc/hujYQnkxG1NYpbo75mbyjjpHmzYedQL970LIc=)
3: qwDOnP6AdU_tAQtZsLWw5wfBxDo.roa (hash: kQx1jz2DL7OQVFnj/XJkVTFzESJhS+h25gCtn8yqidk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:28:65:6a:7e:60:97:eb:23:34:43:d9:4d:dd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Validity
Not Before: Jul 23 15:00:37 2026 GMT
Not After : Jul 24 15:00:37 2026 GMT
Subject: CN=570459c27e6a25d191d7446dc325a372b0a6d308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:43:36:fe:30:20:1f:a4:26:6c:e0:49:e1:
ff:92:dc:b9:d1:4c:0a:7b:1a:e6:9e:69:32:8d:3f:
40:3d:24:94:18:15:2f:ac:56:00:e7:57:2a:24:bb:
80:4b:bb:2b:7d:74:38:fd:06:bb:2a:94:79:dc:24:
f9:2f:28:4a:f7:f3:c3:7e:55:ed:98:f3:ea:5b:3e:
97:c8:f3:85:eb:22:1e:77:29:d6:b3:f5:8f:fb:a2:
ae:40:71:ef:28:75:ef:a2:9b:ec:1f:87:c7:a8:b0:
1d:96:09:c9:87:64:71:98:f7:27:cc:3d:65:f8:21:
e4:e4:c0:b4:bb:1b:d9:af:07:97:18:c6:47:f9:91:
64:c4:01:25:1a:5e:ab:05:a8:f8:0a:1c:e6:ad:fd:
4d:1a:c0:b0:07:55:10:89:7b:d5:d8:5d:ab:6d:62:
73:a3:bf:ba:16:8d:42:69:8a:b6:75:c2:e1:41:f3:
40:91:2c:ac:96:ce:ae:e0:8f:d1:85:7a:15:ce:0e:
e9:cc:89:a8:e4:d0:d7:ba:ab:28:23:2c:cb:92:9f:
18:94:6e:4e:7c:de:0a:2d:2d:61:fd:32:44:e5:95:
9c:43:ac:21:8b:f6:44:a8:2d:d5:63:ac:63:b1:2f:
e3:52:5f:2d:3f:0a:2f:db:e1:95:0c:d3:95:60:06:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:59:C2:7E:6A:25:D1:91:D7:44:6D:C3:25:A3:72:B0:A6:D3:08
X509v3 Authority Key Identifier:
keyid:E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:42:d2:0d:54:a3:de:af:27:ff:5d:51:b2:93:2e:7d:d1:83:
67:a7:22:c2:74:ac:6d:1f:ac:64:50:48:bc:b6:7f:88:61:c2:
a3:0a:a5:58:53:40:8f:de:ff:90:ed:11:f1:10:ef:df:c0:69:
07:ed:5f:ad:a5:23:a5:db:1f:b7:6b:56:db:72:e2:b2:cb:68:
7b:50:cf:29:dd:ff:12:c6:8e:83:d4:2c:f6:5c:50:1e:1c:77:
07:9b:4d:17:d2:e1:96:65:1a:3e:43:ac:2b:22:81:cc:5e:54:
2d:34:ac:1a:7b:ed:20:d5:f7:25:29:d7:e1:a9:4b:9c:13:ea:
31:7a:bb:ce:6a:38:6f:da:2e:a9:68:e2:d7:7d:84:13:b3:4c:
56:22:c1:a3:69:b8:64:f6:68:4b:68:cd:2e:82:bd:1e:3f:2a:
da:e2:c7:2e:c7:46:e9:93:c8:46:67:c8:74:23:e1:7d:71:15:
37:eb:49:ca:95:85:61:f0:35:c0:88:30:40:a1:57:b0:82:ab:
8c:7a:47:6a:6e:c2:4f:a2:c2:96:b8:cb:e7:aa:e5:74:4c:97:
98:fb:02:bd:a1:02:23:c1:f1:1f:3b:74:7e:af:48:56:18:9e:
c9:58:11:c1:5f:c3:e1:bd:4c:c7:6b:bb:01:15:c1:55:cf:80:
78:59:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:10 2026 by rpki-client