Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: 6Ogk0ztO19+tuYaG9OAQ7lKdcN7oQqGyoQmU5UG6eI0=
Subject key identifier: FF:0C:33:F2:7C:9B:3E:F1:AD:45:0E:5A:34:0B:36:D5:33:89:8C:2A
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 019F935B11E7EDDFA7688C327004C9097CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0E3F
Signing time: Fri 24 Jul 2026 09:00:46 +0000
Manifest this update: Fri 24 Jul 2026 09:00:46 +0000
Manifest next update: Sat 25 Jul 2026 09:00:46 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: tvTJkqxVgcykiljqU7ZwaQ08QNdOGawg91XhNQf/zjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:11:e7:ed:df:a7:68:8c:32:70:04:c9:09:7c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Jul 24 09:00:46 2026 GMT
Not After : Jul 25 09:00:46 2026 GMT
Subject: CN=ff0c33f27c9b3ef1ad450e5a340b36d533898c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:cc:3b:eb:d4:40:da:e4:56:3d:ca:7f:8b:
87:22:8b:f9:58:4f:e7:5a:fd:ea:96:25:18:9b:e7:
c8:49:f3:7a:16:4b:1a:c8:96:75:16:c9:f4:c0:b4:
4b:49:64:58:ff:ee:f4:c9:12:37:66:22:d9:79:17:
96:fd:a1:10:ee:89:fb:0a:0a:d7:11:c3:1c:7f:9c:
68:b5:97:50:8c:30:d8:ca:bc:86:79:ab:d7:0d:01:
4e:0f:a4:b0:ea:a9:e3:a1:57:17:cd:8c:aa:f8:a4:
40:a9:44:2e:51:b9:e7:68:c4:98:b0:f1:01:6c:e1:
d7:e7:9d:2f:66:bb:20:39:11:2e:95:0a:cd:38:6b:
35:b7:0e:63:6b:cc:9c:84:81:3a:14:34:14:35:fa:
32:72:83:4f:72:8c:e4:23:b6:14:74:26:c9:ba:cf:
7e:d2:54:d9:e8:02:8f:1b:80:6a:84:19:03:24:3f:
ba:d0:a2:a7:a2:02:18:30:f2:3a:5c:06:be:2c:ed:
09:b9:08:89:48:cb:95:15:9c:a5:31:39:8d:f3:fc:
47:be:d6:f4:e9:06:36:c8:ef:a3:13:5a:08:a8:a8:
a9:9c:86:51:39:74:82:a5:0d:48:95:fc:39:f6:02:
16:16:c9:c8:25:fe:4d:d4:fb:1f:e3:16:04:49:cb:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0C:33:F2:7C:9B:3E:F1:AD:45:0E:5A:34:0B:36:D5:33:89:8C:2A
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d7:8a:3f:5f:80:78:53:61:3e:19:89:1f:f8:63:1a:80:bf:
50:72:f7:4f:1a:84:8d:2d:d7:f4:e8:fb:b9:74:b8:25:57:4d:
7c:89:7b:76:36:0b:54:28:9c:23:b3:df:a7:57:ab:d4:0d:f8:
7f:c9:f7:b5:95:73:cb:f3:19:f1:aa:3f:22:8d:ca:28:be:3b:
39:65:16:11:3e:84:0d:2d:6e:e7:fe:7b:55:50:dd:eb:42:78:
e6:92:33:9d:2a:e1:7f:4b:cc:5f:79:87:39:bf:f6:f0:8e:aa:
2e:13:2a:dc:2d:c7:c9:a3:ef:0d:73:ff:2b:bf:dd:c6:63:3d:
51:34:59:f6:b0:d8:79:df:ac:55:dc:7a:af:e2:fa:af:cd:b9:
62:b4:0b:11:68:6b:83:26:7a:6e:94:bb:af:3e:47:b7:2e:84:
48:9b:0e:16:57:98:88:84:45:21:2e:2b:f4:7c:f5:6a:1a:35:
79:96:55:9b:2a:bf:fd:1a:72:24:cc:0f:44:cf:ef:3a:c5:bd:
f7:24:71:9e:fe:49:65:4f:67:fa:da:18:8f:58:79:a2:13:97:
0f:4d:19:a9:33:5f:14:7f:fe:1f:e0:ba:fd:23:5b:53:38:59:
3b:0c:16:b3:37:cb:f7:af:49:08:5d:2a:09:71:fc:d6:6d:23:
7f:3f:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:29 2026 by rpki-client