Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: fPUDjEy0zT8xfF9y3Rvx8215wKtfsVeTICAfft1UbBk=
Subject key identifier: BB:DD:39:B7:02:36:17:4B:27:7A:2D:8D:9B:5B:6D:89:A6:9B:0F:F7
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019F927F9B175FB47D4982D1A3ABC5D48BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 05:01:04 +0000
Manifest this update: Fri 24 Jul 2026 05:01:04 +0000
Manifest next update: Sat 25 Jul 2026 05:01:04 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: BV6Bk8cPdvjAk4ksCPCKbTMWshfeqITEFKN4xC8dDzI=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:9b:17:5f:b4:7d:49:82:d1:a3:ab:c5:d4:8b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Jul 24 05:01:04 2026 GMT
Not After : Jul 25 05:01:04 2026 GMT
Subject: CN=bbdd39b70236174b277a2d8d9b5b6d89a69b0ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:44:9c:27:77:c0:95:91:c1:bb:0e:40:f6:
9c:ab:1b:93:17:2b:b7:61:b3:d5:f1:40:0a:2c:77:
9a:f0:76:07:3d:6f:bc:38:fd:40:e2:2f:27:bb:86:
bf:89:18:80:4e:55:f9:0e:f9:ac:11:7b:68:cd:9f:
22:e7:ec:19:0e:c4:8f:ac:fd:cd:52:8b:89:dc:46:
61:39:44:df:ce:9c:50:23:3f:58:fd:ce:96:38:8e:
26:f5:01:68:b4:ea:97:98:93:e4:42:d1:3b:cd:bc:
37:72:55:b7:fa:ab:fb:12:a2:f3:cd:c8:bc:90:99:
96:f4:75:50:ce:90:52:6e:90:44:12:2e:90:bb:30:
23:48:38:8f:da:06:57:55:8d:6c:fd:35:8c:a9:aa:
48:c6:9e:57:50:fe:24:bf:f2:c0:ac:62:a3:ac:75:
79:19:57:a7:f2:5b:80:90:95:8e:60:b2:a6:5b:db:
c3:1a:2d:ea:58:20:0a:3b:71:b1:a0:8f:be:8f:8b:
0d:67:d9:56:08:78:d4:af:ea:fd:96:7b:c0:73:1e:
25:e3:4f:35:84:b3:45:c1:dc:dc:fa:b9:de:a2:67:
58:3c:48:5c:05:b7:85:9d:30:0e:ab:dd:d4:e0:89:
55:82:ff:c0:7d:1a:25:47:2e:4a:e2:ec:6d:ce:65:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DD:39:B7:02:36:17:4B:27:7A:2D:8D:9B:5B:6D:89:A6:9B:0F:F7
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6d:e6:08:58:72:d2:47:3a:b9:ff:e2:51:d7:c5:6d:44:89:
de:b6:22:a4:38:a1:40:2f:d8:4d:e2:36:90:c0:b4:ec:2b:cc:
e3:76:c0:21:6e:cf:72:31:ac:8a:25:04:38:8b:71:c8:fa:59:
36:9e:36:f0:e9:74:8a:76:a0:e0:1b:99:56:87:40:88:3c:3b:
37:db:95:a8:5f:f8:01:5d:b4:5c:01:07:75:ba:39:c4:da:4e:
52:ad:72:39:8c:37:56:21:bf:ef:2e:e9:09:ba:e4:70:42:da:
06:cd:21:56:63:cd:bf:46:40:21:68:a5:73:24:23:23:60:bf:
69:ce:52:68:b8:6d:27:86:1f:b4:9d:10:91:06:91:96:e6:d3:
55:80:03:cf:58:62:70:97:15:b8:5a:1e:03:c3:08:44:be:40:
05:20:41:96:c8:a1:dc:d5:d4:f1:a6:79:ba:ea:8d:c3:13:f5:
a4:c0:36:57:4e:0c:7a:ee:b3:b3:c1:46:8e:39:4c:ce:90:4e:
59:0f:44:73:a9:69:10:ab:90:7d:af:4c:74:cf:b1:a6:ed:22:
2b:06:94:a8:20:3d:d8:e6:8b:8e:a7:d7:5e:3e:06:f9:b6:de:
b8:d0:97:4f:44:20:4e:9f:11:9d:2c:2d:c4:52:cb:07:eb:aa:
9c:45:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:02 2026 by rpki-client