Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: 0dUuXQTA0CV+at1FgObeWPw/BraMpOBaQKvWgSErKvI=
Subject key identifier: 7B:FA:EF:E4:38:08:98:9A:EB:A1:F4:48:C8:FD:83:03:BA:16:4D:6D
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019F905994BC8C69FB5918D587B2643B08B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 19:00:17 +0000
Manifest this update: Thu 23 Jul 2026 19:00:17 +0000
Manifest next update: Fri 24 Jul 2026 19:00:17 +0000
Files and hashes: 1: 1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa (hash: 2kZ069SCXyvjYNeKIO+pvEFPTW/9AX8f/8u5tWS3u3U=)
2: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: 2Vi6ePawY8jANpBxr6hLOf/8KPqtv9dI+em+vgAmmxU=)
3: BW5S5s1xvxdYeismlznCSfBL2yI.roa (hash: EtWeWpCD+suUmysPule/ohTEye/jj6Q4dBOVaR6L3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:94:bc:8c:69:fb:59:18:d5:87:b2:64:3b:08:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Jul 23 19:00:17 2026 GMT
Not After : Jul 24 19:00:17 2026 GMT
Subject: CN=7bfaefe43808989aeba1f448c8fd8303ba164d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:90:a6:84:7a:8e:d5:31:b5:e4:27:b6:5f:e0:
f9:23:98:4e:d1:35:fd:6e:98:76:f0:f6:96:78:ff:
be:3e:7f:ca:2f:d1:84:7e:b8:5d:0e:94:43:c6:90:
99:e8:27:81:ce:09:cb:78:a8:23:65:f6:09:dc:eb:
56:a8:09:d2:0e:a4:08:db:4b:c8:9e:23:54:42:bb:
7d:bd:e3:2f:e9:e7:4d:e2:0f:19:62:48:36:9d:00:
96:3f:b1:e9:28:80:06:84:0f:40:12:5b:53:03:82:
82:a1:65:38:ec:ca:2e:37:4e:d6:60:57:7d:8a:a6:
7b:b9:79:b4:74:cc:14:f3:b6:54:d6:d5:4e:a2:5a:
2d:8e:0a:f4:48:33:0e:a7:3c:f5:89:1b:20:d5:a6:
be:76:35:50:24:c0:aa:1f:62:76:1f:a3:c5:9c:08:
00:49:b7:7f:37:a5:ef:5c:1b:ad:2a:b4:c3:90:d2:
7e:0c:35:cf:53:3d:0a:ae:c0:48:dd:55:1c:cd:dc:
b6:55:f9:97:13:56:63:87:17:42:72:7d:b3:23:13:
75:ed:c3:16:e4:6f:fb:e4:f2:08:8a:70:1b:42:80:
d8:9f:9c:b2:16:95:43:f2:f5:ba:ff:16:00:58:52:
f5:ce:87:2f:74:f1:73:18:c6:fc:0d:0c:7c:5b:80:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FA:EF:E4:38:08:98:9A:EB:A1:F4:48:C8:FD:83:03:BA:16:4D:6D
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:57:04:13:14:68:3d:01:71:2f:89:d8:a2:ed:78:72:3d:30:
3d:be:3b:64:3a:f6:87:2e:a0:0d:c7:3c:c4:7e:3c:fe:2a:17:
ce:04:69:74:92:53:50:d1:f3:29:68:7a:13:06:84:fd:2b:95:
63:26:29:80:58:03:25:f3:0b:f3:d3:ed:15:f9:90:35:98:db:
c5:50:b5:f0:c4:3b:07:e9:6b:80:2d:02:96:b9:bb:19:23:18:
2f:01:64:91:93:e8:b0:2e:46:8a:75:67:d8:8a:6a:eb:34:f6:
f1:52:9c:08:52:14:87:9e:43:55:04:31:f2:ff:a4:a9:aa:07:
87:f0:e6:ea:c4:fc:8b:79:15:39:7a:40:4a:cd:e0:a1:c5:c0:
fc:4a:6a:98:b3:78:54:d6:f6:70:7d:62:9f:d2:02:6b:96:78:
4b:fe:39:39:f3:1d:56:de:1a:68:fd:52:7e:18:4f:6d:36:5c:
43:4e:ce:d1:ee:29:11:9c:1f:22:ba:c5:21:f9:6d:35:6b:28:
68:15:39:aa:92:df:f4:81:3a:f6:8e:34:54:e2:92:18:55:0c:
51:a7:0a:11:35:e4:ff:54:23:f6:6e:75:04:72:64:14:c5:5a:
72:d7:67:1c:1b:fd:3f:c4:10:79:b4:7c:08:0d:8b:58:4d:9a:
5e:ac:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:51 2026 by rpki-client