Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
File: 4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft (raw, json)
Hash identifier: vi/irZ8H744jm4KEcyif3oAEosaVMMoRC5CdLI7TQLg=
Subject key identifier: B6:74:68:40:1A:38:25:B4:7C:4D:AE:FB:31:51:A5:AC:C3:51:D0:E9
Authority key identifier: E0:3F:66:DD:7D:12:07:44:90:73:E2:1E:1A:36:48:28:A1:49:6B:94
Certificate issuer: /CN=e03f66dd7d1207449073e21e1a364828a1496b94
Certificate serial: 019F8F7FB333779B9493C126843B56269553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:02:18 +0000
Manifest this update: Thu 23 Jul 2026 15:02:18 +0000
Manifest next update: Fri 24 Jul 2026 15:02:18 +0000
Files and hashes: 1: 4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl (hash: yZhRMuK1a7p6D/NcU0jWNI95vSaC9HJzVWqBPVmt0Zk=)
2: kYP-N6kinjxADOPUDAI1mMqCiMo.roa (hash: /T46dbhLvgDMiZ//AOgwguIuo5EQnnNikqQT0mHcCKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:b3:33:77:9b:94:93:c1:26:84:3b:56:26:95:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f66dd7d1207449073e21e1a364828a1496b94
Validity
Not Before: Jul 23 15:02:18 2026 GMT
Not After : Jul 24 15:02:18 2026 GMT
Subject: CN=b67468401a3825b47c4daefb3151a5acc351d0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:00:71:5e:32:75:37:a5:93:f5:6f:cf:9d:
76:55:0d:eb:f5:63:58:22:c4:0d:ca:57:4c:d9:e0:
04:82:00:5c:f8:52:4c:69:01:57:47:2b:cb:26:c1:
2c:bc:46:4d:42:02:86:f3:94:6b:0a:85:6e:39:f0:
f2:57:6a:89:86:6d:e6:1e:e9:0d:ec:46:6a:10:3f:
28:f8:ad:e6:87:18:e6:57:50:89:8a:ab:34:8f:4e:
2a:23:a6:0f:b8:90:6e:11:f4:8a:a9:a4:55:53:21:
77:99:11:fd:75:37:d6:9a:13:e5:c6:e1:d7:eb:23:
91:12:55:fb:2d:60:27:8a:1e:1e:81:22:4d:25:48:
3a:15:07:c5:00:ee:ba:4f:e1:11:37:71:92:38:cb:
bb:67:69:ca:2b:03:40:cc:9b:3e:b8:bd:db:3b:13:
cf:d4:cb:83:e0:fb:d3:f6:21:26:ae:e8:ca:5a:6a:
fa:86:47:d2:07:53:2b:6c:dd:0a:48:60:d3:04:61:
e1:00:ab:72:73:90:22:fd:51:b7:62:56:49:29:ff:
3f:d3:0b:ad:b3:04:c3:6d:63:e5:5f:a8:81:58:5d:
3f:37:30:80:16:ef:72:1c:b0:8d:03:66:be:52:66:
3a:82:17:77:8b:59:5f:2e:a9:9b:e4:cb:67:9d:dd:
79:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:74:68:40:1A:38:25:B4:7C:4D:AE:FB:31:51:A5:AC:C3:51:D0:E9
X509v3 Authority Key Identifier:
keyid:E0:3F:66:DD:7D:12:07:44:90:73:E2:1E:1A:36:48:28:A1:49:6B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a4:77:8d:46:86:c4:db:95:98:c1:d1:da:dd:fc:a9:60:f2:
07:1f:01:bf:c7:d0:a2:bd:86:9a:d7:fa:81:27:e3:6e:38:5f:
f2:1a:73:1f:fb:7d:a7:94:fa:6c:93:d9:b3:4f:ba:bb:38:12:
07:8f:af:9c:98:d1:66:73:9e:b3:1e:e7:19:74:e6:95:fb:95:
dd:8a:f2:ca:c2:e8:1e:c4:9c:25:68:0d:b3:3b:e7:72:e9:74:
54:a1:21:93:1c:f2:c5:92:b1:35:2d:2a:d5:4d:ba:74:36:b0:
3a:8a:85:33:6f:4d:2a:d7:19:89:69:02:5d:70:32:42:2b:f0:
53:da:bf:d3:b3:d4:c7:cf:7f:02:4b:e0:27:f4:79:82:f3:5b:
41:62:4d:47:49:e6:0b:58:8a:52:75:2a:2b:fa:3e:72:1d:65:
78:22:be:f5:83:84:65:76:23:c7:9e:4f:b3:5d:e4:e7:af:7c:
c7:9d:e2:82:4c:da:3f:da:57:ee:fa:f6:1a:de:bc:6b:e8:1b:
9a:c6:5d:a6:db:22:8d:07:e9:b9:53:d5:b7:82:c8:8b:37:b6:
b8:76:f0:ba:bf:ea:20:80:0a:2c:9a:80:ac:95:27:6e:b6:7d:
98:53:a1:94:78:51:97:dc:95:4e:9b:0f:72:bb:69:04:0d:51:
8c:0b:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:34 2026 by rpki-client