Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.mft
File: 4pTjZ5aUnwj4tn9V31k5butni6o.mft (raw, json)
Hash identifier: lBvyZHPjf0xBupdZt95TOuiPgCUEHk7DSVT4vL0+LR0=
Subject key identifier: A2:CA:58:13:65:05:E4:9F:A2:1A:D3:DA:79:3D:8F:26:72:FD:20:0B
Authority key identifier: E2:94:E3:67:96:94:9F:08:F8:B6:7F:55:DF:59:39:6E:EB:67:8B:AA
Certificate issuer: /CN=e294e36796949f08f8b67f55df59396eeb678baa
Certificate serial: 019F8F7E850B4FB0617DB553C176FA85CEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pTjZ5aUnwj4tn9V31k5butni6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:00 +0000
Manifest this update: Thu 23 Jul 2026 15:01:00 +0000
Manifest next update: Fri 24 Jul 2026 15:01:00 +0000
Files and hashes: 1: 4pTjZ5aUnwj4tn9V31k5butni6o.crl (hash: dgv3bpVF9kTXiTjfTNkG1djEwPHpAqQrnzTIO3se3lw=)
2: 6VKBXynRG07XhmTLqt9tKadDP_M.roa (hash: HOPLxy6EUrs861KHaqyjinYW5n94COvFHhsNXjG1RLg=)
3: Sha7dvKI_ys3oreApv6p2F77Geg.roa (hash: uLl3N8g2CNQN041JnaOmOps7w4qWjtX3Lsc132gfkBY=)
4: mheiYKPRdaJXmf_QqsPWR_0-Dpw.roa (hash: ZrjpuQLxXDU0C0C/+zaHMpungToDgQwesPzIp9816CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pTjZ5aUnwj4tn9V31k5butni6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:85:0b:4f:b0:61:7d:b5:53:c1:76:fa:85:ce:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e294e36796949f08f8b67f55df59396eeb678baa
Validity
Not Before: Jul 23 15:01:00 2026 GMT
Not After : Jul 24 15:01:00 2026 GMT
Subject: CN=a2ca58136505e49fa21ad3da793d8f2672fd200b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:75:9e:02:3c:95:fd:12:67:c9:e8:eb:31:
e5:38:93:7d:71:66:f6:e7:74:da:0a:7b:cd:e2:06:
b6:05:6d:16:ea:4b:e1:03:80:51:51:3e:62:14:44:
96:83:ae:37:c8:6a:a3:5f:c9:ea:98:a9:2b:4c:7c:
bd:98:dc:dd:c9:c0:0b:70:a4:0f:29:75:49:ad:51:
b6:13:be:6b:8f:d8:22:22:2d:65:c8:0f:da:8f:85:
db:f5:af:1a:70:a5:15:22:0d:bf:a7:3b:7b:6e:34:
09:d8:35:51:67:69:ea:0f:56:52:42:50:bb:ee:15:
e0:09:4a:ce:5a:9f:ed:e7:5b:05:78:bf:43:47:cb:
6d:60:a2:ef:84:49:37:cb:20:b7:88:3b:6a:fc:f7:
6f:d4:57:bd:75:82:a1:cd:a3:fc:e1:49:fa:71:67:
5b:d6:4e:35:86:b4:b2:8b:42:23:81:af:53:62:73:
60:ed:99:94:0b:ad:78:85:fd:15:ff:d4:85:cb:6b:
69:08:38:0e:e1:3a:73:1a:9c:96:5e:bd:ad:0e:79:
82:87:41:b5:0f:15:08:a3:b8:75:62:74:e9:74:6a:
a0:4b:62:5c:7d:2c:db:4e:80:f1:6f:41:06:e0:db:
8d:16:19:c4:d9:f3:7e:5a:8a:2f:b7:81:a8:41:bf:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CA:58:13:65:05:E4:9F:A2:1A:D3:DA:79:3D:8F:26:72:FD:20:0B
X509v3 Authority Key Identifier:
keyid:E2:94:E3:67:96:94:9F:08:F8:B6:7F:55:DF:59:39:6E:EB:67:8B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pTjZ5aUnwj4tn9V31k5butni6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e3:79:be:07:ad:a8:ae:4a:f8:41:fd:30:ab:4a:26:9a:ce:
58:20:58:d5:92:09:c8:55:51:8a:79:fc:80:04:aa:66:bc:2d:
ee:6e:cb:50:4b:dc:b0:56:77:f5:56:c4:ec:88:e8:56:ef:9f:
2c:9f:e4:d6:db:26:dd:e2:95:bf:47:70:1d:9e:54:5a:2b:42:
e7:cf:42:57:c9:4f:47:38:12:b0:29:38:60:94:a9:36:70:cd:
66:e0:0b:ff:f6:51:4d:34:91:be:a1:3e:10:3e:5c:47:f2:da:
83:d3:b5:8e:aa:25:a1:7d:4d:4d:ae:71:2c:36:22:d7:7b:b6:
6b:83:5f:2c:52:fe:a8:0a:cd:d7:23:95:3c:b1:db:42:6f:ae:
0d:75:f2:1f:10:eb:c4:71:7b:f6:e6:e9:22:5f:30:fe:a6:fc:
f8:33:4a:87:70:de:a7:b6:17:a9:76:b1:02:24:aa:06:51:ee:
95:bf:8d:ad:3e:bc:0f:a5:d4:c5:cd:ec:aa:c1:19:9e:7b:4c:
e4:9e:ea:17:53:45:10:a2:ae:a4:b0:c8:8c:0a:66:40:a3:a6:
40:22:f7:b9:f2:00:3b:ff:0e:63:86:34:05:d5:7d:9b:e2:e1:
cd:3c:af:50:f6:75:c4:c3:b7:d0:91:73:85:29:8f:3f:f7:7a:
23:23:8f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:34 2026 by rpki-client