Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: MLJuOpgtWpxKHsZIowUrbJtoF5RGXlYILpw1Fikx5cw=
Subject key identifier: 25:40:ED:B4:92:CF:98:D2:1C:42:BB:10:D7:A0:5C:12:12:64:11:CF
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019F8FEBFC9E808017B510F8A5428B30D3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 1904
Signing time: Thu 23 Jul 2026 17:00:35 +0000
Manifest this update: Thu 23 Jul 2026 17:00:35 +0000
Manifest next update: Fri 24 Jul 2026 17:00:35 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: Zq68RmyNKQUdjN8/+sAvUTaCIVApOzKGqLUeMtuKE24=)
2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:fc:9e:80:80:17:b5:10:f8:a5:42:8b:30:d3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Jul 23 17:00:35 2026 GMT
Not After : Jul 24 17:00:35 2026 GMT
Subject: CN=2540edb492cf98d21c42bb10d7a05c12126411cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:7a:81:61:31:bd:8e:39:7b:de:9e:10:4b:
c7:ed:25:5a:79:e0:c1:d1:87:a4:e1:d5:23:f4:be:
31:17:2c:bd:ef:96:c3:7a:4e:40:4b:94:51:32:1c:
93:e7:27:41:91:ab:50:57:3c:35:b6:39:ea:3f:5f:
1b:ef:7b:94:3f:f1:06:b1:2e:e9:38:f1:17:1b:18:
e3:31:a8:57:35:36:e3:82:ea:3f:65:4e:06:e5:f7:
ba:98:13:d3:b5:e8:6f:9d:ec:11:ba:db:8d:9f:a6:
06:34:c1:ad:3b:28:38:39:99:b8:5d:09:47:1d:90:
2a:ce:64:52:1d:67:73:45:57:34:f5:25:83:9e:67:
e6:4a:00:84:cc:e8:9b:a3:89:0c:f5:9a:00:57:33:
39:60:c6:95:6e:38:1a:83:f0:1f:29:d0:d8:10:45:
77:92:4c:73:06:a1:9f:6c:4e:10:b8:88:6e:e1:c1:
4b:e0:f3:a0:48:f1:9b:0c:88:7d:d4:d7:8e:37:7a:
3e:50:ac:9f:9e:8f:79:ef:e9:90:e8:2a:e0:4b:3d:
22:e2:ba:f1:ad:5b:0a:67:e0:72:dc:1b:16:c9:d9:
8e:d5:ec:85:7b:2b:00:97:b1:6d:c2:7a:2e:3e:a9:
71:be:6f:71:b2:e7:72:71:d0:f3:19:10:f2:82:99:
cf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:ED:B4:92:CF:98:D2:1C:42:BB:10:D7:A0:5C:12:12:64:11:CF
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:4e:2e:79:f0:98:5a:d1:24:58:c9:a3:f4:8b:ec:91:ef:
49:e1:5b:39:58:b9:23:9d:79:3b:2e:4c:f9:0b:8f:4b:c0:61:
50:61:fa:0d:7b:b3:9a:ac:09:e4:d7:52:67:03:d3:dc:d5:17:
d9:a2:6b:89:2c:27:75:6e:3a:94:88:b2:2f:fb:27:4b:33:06:
fa:1a:e2:36:59:9e:a7:4d:e3:8c:2d:da:98:ae:a2:77:e4:64:
1e:b1:9a:e7:4f:e3:1b:36:35:af:20:0e:f1:e8:9b:3d:ac:d8:
1c:92:d3:fb:c3:2b:cb:ed:b6:2e:92:db:96:8f:d6:88:ea:10:
56:74:0e:f7:ae:db:a3:fb:5c:3f:5f:9c:61:35:85:6c:49:17:
d0:a8:8e:c3:b2:70:42:6a:cd:78:c1:4b:0f:49:b8:07:f9:87:
a3:9f:4a:70:85:66:af:27:49:51:60:e4:97:2a:c5:e5:8f:e6:
c3:e3:e0:27:2a:ef:39:02:75:f6:ba:56:a4:89:0a:e2:83:2a:
43:8a:6c:1c:2c:14:e8:40:58:f2:f9:25:91:9d:d8:7a:98:41:
6f:2d:37:cf:c2:de:d9:19:c1:d1:81:4c:03:d8:62:bb:c0:77:
33:e6:d0:c3:81:e0:93:9d:95:82:ad:a2:8b:f9:65:e7:33:db:
b8:1a:3a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:56 2026 by rpki-client