Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: uw5upxKfb6phXbbl5LQwzueqZX/UIRUwA4VRok49U7w=
Subject key identifier: 2B:46:75:48:80:91:D1:2B:27:43:DE:39:3A:8F:89:13:6E:27:85:A8
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019F8FECAA9821E95BF975E21277CC6045C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 02F1
Signing time: Thu 23 Jul 2026 17:01:19 +0000
Manifest this update: Thu 23 Jul 2026 17:01:19 +0000
Manifest next update: Fri 24 Jul 2026 17:01:19 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: u+HHa+T0H+gywi96FmJhseUFjcztyWRv2opzZ60hOFs=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:aa:98:21:e9:5b:f9:75:e2:12:77:cc:60:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Jul 23 17:01:19 2026 GMT
Not After : Jul 24 17:01:19 2026 GMT
Subject: CN=2b4675488091d12b2743de393a8f89136e2785a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:c5:c9:fa:3b:69:7e:5f:64:de:36:6d:e8:
95:ba:ea:d1:2a:d5:7c:02:18:f9:9d:4e:fd:56:c5:
07:cf:c3:a9:68:a8:5f:8f:10:0c:54:3b:00:8d:57:
e5:d1:4c:1b:49:0f:cc:2d:4c:dd:ba:75:28:1b:f7:
a5:96:f6:8a:54:dc:94:58:af:bd:f3:8c:8b:5b:ad:
4a:b2:a3:e6:0c:68:2e:a7:42:fc:6a:f0:8d:6a:4f:
1d:20:bd:43:62:99:e2:bb:17:8e:50:3c:15:39:38:
77:05:c9:85:29:3e:57:0a:3e:fb:df:c0:f0:64:31:
d2:a4:9a:f5:16:a5:c6:0b:c8:ee:fa:19:12:7e:36:
ca:a7:7a:7c:f8:aa:48:df:49:c7:81:0d:7e:d7:f4:
ab:1a:74:15:95:84:65:f0:75:fd:ee:51:b2:90:f8:
59:d6:9a:e3:50:ae:c3:05:9d:f2:10:37:eb:ec:fc:
d1:77:33:cf:d2:5e:ba:0a:1d:b2:5a:44:2d:ea:29:
fd:02:14:ce:41:76:ef:f8:fb:c8:32:53:ee:f0:a1:
f7:80:13:d1:ab:3c:65:77:55:e9:28:e9:4c:8c:44:
33:c5:02:39:35:96:d8:37:5f:de:7f:15:1b:52:9a:
fe:aa:0f:b5:c3:88:a1:8c:08:f9:54:9e:6b:61:49:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:46:75:48:80:91:D1:2B:27:43:DE:39:3A:8F:89:13:6E:27:85:A8
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f7:6e:90:1f:d4:c9:52:8b:32:1d:79:12:3f:24:ed:d8:dc:
6a:95:24:8a:51:4d:af:a4:6f:41:bc:c3:52:b9:fd:16:78:69:
db:4c:08:0d:7e:60:cd:73:28:48:b8:87:09:3b:c9:aa:4a:ac:
3e:b7:1d:d3:79:8d:c3:c5:4d:38:92:3e:e9:cc:b7:6a:02:0f:
86:01:1e:49:d1:d5:23:e3:3c:2b:99:71:29:63:26:9e:8e:b5:
bf:d8:ae:d0:88:aa:6e:8c:51:63:61:65:3f:9d:60:e2:cc:fc:
1c:93:b4:67:7c:b3:1b:73:90:d6:46:03:9c:5c:f4:11:0f:41:
a6:09:4a:dd:db:1b:b4:8c:0f:a4:ca:08:4c:9f:61:6c:09:48:
d4:51:89:a9:14:45:54:6b:a7:28:17:d7:68:ae:76:05:16:32:
c5:77:30:16:49:fa:1d:b9:5b:87:51:cc:80:60:01:cb:4e:d0:
de:07:d5:1d:f9:3b:cd:8f:ec:74:88:ac:68:ee:e4:4c:47:95:
1f:0f:71:45:da:4e:5c:d5:d9:3e:56:ce:39:65:1b:72:f0:33:
07:eb:0d:66:93:cc:a8:8e:af:48:be:00:64:98:e2:1b:df:a8:
c3:d6:61:7a:2f:1d:2f:72:59:a2:b7:39:b8:2c:76:eb:2f:7e:
f0:b9:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:49 2026 by rpki-client