Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: 58W3O+w8U0jziC1XPH6W0kdY9wqQOB79jfjIip2fvw4=
Subject key identifier: DC:1F:DD:AE:15:48:EE:03:51:48:8A:0F:A2:61:03:20:E9:1C:5E:CB
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019F8E34CD3CF82912A79600707310194431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 09:00:52 +0000
Manifest this update: Thu 23 Jul 2026 09:00:52 +0000
Manifest next update: Fri 24 Jul 2026 09:00:52 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: g5DxikX43vd388tiRB9lOWBP3vzwG8Ltg+vK/THjb7I=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: pPHuomO4xh_m0S-r-_OhJE-mYVA.asa (hash: TKq6TnfE0FWP12xkoJvmUbR5i0X/fWByiH3vtL0RFrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:cd:3c:f8:29:12:a7:96:00:70:73:10:19:44:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Jul 23 09:00:52 2026 GMT
Not After : Jul 24 09:00:52 2026 GMT
Subject: CN=dc1fddae1548ee0351488a0fa2610320e91c5ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:e5:a1:03:20:7a:87:c8:ff:8b:17:03:08:
dd:fe:e6:97:53:7c:a3:d5:02:05:88:4d:ba:56:13:
c0:58:9b:04:d2:15:c5:7c:48:75:45:ee:85:52:2f:
34:c7:91:17:70:20:cf:73:06:36:a3:b2:fc:a6:5f:
1f:5a:30:c8:fc:e8:b6:9d:63:0a:8b:7c:fe:54:35:
b7:b0:5e:26:11:d3:83:0d:64:29:84:ae:cb:5a:f6:
ed:37:ea:27:65:df:0e:0b:1d:92:73:2f:e4:62:8f:
cb:a5:5d:1b:e0:50:b6:77:8e:17:76:e2:b4:8a:9b:
cb:68:d4:33:30:82:70:38:88:58:68:be:b5:9a:38:
b4:2c:c5:ab:09:71:63:ac:aa:c6:06:7a:eb:73:11:
a6:c7:44:6e:a2:fa:9f:8a:ac:db:25:a4:75:3f:1a:
0e:75:07:98:29:c3:60:f2:38:4c:29:35:e6:a4:67:
b3:cc:44:22:95:2d:9b:e5:2c:2b:46:13:d9:0f:08:
be:64:99:59:6d:5a:19:08:66:97:3a:59:f7:82:5a:
42:17:df:39:e1:29:ab:58:65:7f:84:b5:dc:54:6d:
8e:91:54:06:8c:67:ff:12:83:fc:65:fd:7b:fe:a5:
f0:d2:0c:a9:a1:bf:8a:2d:bc:da:d1:7d:1f:65:93:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1F:DD:AE:15:48:EE:03:51:48:8A:0F:A2:61:03:20:E9:1C:5E:CB
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:39:47:17:33:0e:c0:f4:49:99:f7:ce:45:ed:3d:d1:17:2d:
81:d2:a3:ef:79:56:48:6a:cb:72:be:76:2f:90:35:27:09:72:
4f:fd:d8:4b:a7:f4:bd:05:76:ce:67:4e:36:01:4d:d5:8d:f7:
82:9e:93:c2:af:24:e1:15:2a:24:2c:ff:d4:12:3c:ff:29:de:
97:e8:1c:b7:80:ed:a6:7f:b9:9f:12:45:2f:32:2d:db:7d:72:
44:ad:3e:da:9b:05:5b:03:4d:74:c0:d4:ee:b6:cf:82:4a:ea:
62:a2:4c:82:d6:7b:7e:0d:65:01:13:21:bb:0a:8e:59:23:d8:
b3:56:fb:47:6d:25:2a:e7:e8:71:d5:d4:d7:5a:74:1c:e1:97:
c0:3c:07:92:b8:5b:3f:be:a0:08:9b:55:9c:1f:ee:1e:ea:af:
b5:7e:f3:c1:1f:bf:ac:b2:b5:f3:1d:fc:72:b9:59:fd:1e:e0:
2f:5e:0d:30:cb:73:3f:fb:3c:3f:06:21:c8:9f:23:65:3c:ae:
13:bc:88:37:c8:6f:6f:69:57:2a:d1:bd:07:29:01:a5:3c:3c:
cd:b7:f0:d0:50:10:ba:dc:4d:54:3d:35:17:d3:a6:d4:4c:d6:
58:f0:3e:34:a6:11:b2:f9:60:5a:f0:ec:2a:bb:56:ae:1e:4b:
33:53:b1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:35 2026 by rpki-client