Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: /i0P9//624kZofHbcw1Dyra5oLJX3VOH0IILP9Xpiko=
Subject key identifier: 6E:81:97:C5:BD:27:24:27:15:6E:A6:66:F9:F2:0D:3C:F1:2D:FE:86
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 019F916CA343A43ACDE7EF42CB47D5A434DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 0906
Signing time: Fri 24 Jul 2026 00:00:43 +0000
Manifest this update: Fri 24 Jul 2026 00:00:43 +0000
Manifest next update: Sat 25 Jul 2026 00:00:43 +0000
Files and hashes: 1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: TEcc+5OSlCG7OmXLLULyVslKxMWMtLrTJSli1SuKx74=)
3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:a3:43:a4:3a:cd:e7:ef:42:cb:47:d5:a4:34:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Jul 24 00:00:43 2026 GMT
Not After : Jul 25 00:00:43 2026 GMT
Subject: CN=6e8197c5bd272427156ea666f9f20d3cf12dfe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:7c:55:75:bb:8c:3f:28:6f:05:28:d7:8f:
b3:16:45:4b:c8:95:14:64:6a:07:af:e0:9a:96:23:
44:e5:2d:9a:41:35:cb:5f:88:9e:37:85:b3:b7:cd:
92:e8:ee:b7:c9:c6:18:c9:a3:70:e3:14:27:6d:f4:
4d:bf:8a:68:45:13:12:79:87:3e:25:e7:d3:55:95:
68:cd:96:a0:0f:97:87:f6:dc:6b:a8:fd:90:63:ab:
7b:07:2a:ca:5b:25:2d:c7:7b:39:54:79:1f:0f:94:
22:36:bf:47:66:7b:58:ec:7e:3e:56:0a:9b:17:56:
73:5e:1f:28:a5:5c:02:a2:81:f7:b3:90:6f:b7:b6:
17:99:9c:32:b8:04:67:03:bc:a0:8a:30:b6:ad:69:
ec:c3:36:be:fe:a1:b7:e9:89:a9:dd:87:59:1a:13:
d9:55:e1:5e:7f:3a:09:cd:d8:71:45:57:65:d0:7e:
79:6f:83:19:37:d1:f2:6a:86:cf:7c:14:bb:56:18:
0a:85:b3:59:fe:e2:91:dc:b9:c2:0c:39:aa:27:58:
21:86:48:43:11:b7:5e:bc:ed:a9:c8:d0:a0:a6:a2:
f7:45:4c:ac:7b:d2:3f:7d:34:a8:fb:8d:f8:32:6b:
8c:fa:65:71:d7:24:db:41:05:3b:fb:fa:c1:43:6d:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:97:C5:BD:27:24:27:15:6E:A6:66:F9:F2:0D:3C:F1:2D:FE:86
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:36:58:9c:5c:d9:b6:42:6a:5f:7a:2d:bc:cb:37:61:8c:
94:45:d0:e5:36:86:81:70:2b:a9:48:7d:2b:e3:42:06:1c:10:
e8:14:de:1d:ea:ca:5a:55:a3:ef:60:33:e6:3e:06:c9:c2:b7:
7f:6e:cf:66:09:92:60:97:05:c9:3f:8a:5d:24:a1:01:14:5d:
66:f8:e9:e4:a3:8b:1c:c9:3e:63:ae:c3:62:49:cf:f0:68:7d:
ad:2c:e1:57:45:01:3a:35:93:53:3a:a7:69:66:f3:47:9d:cc:
4c:d9:68:2f:66:65:d2:80:a4:e4:29:6c:ac:df:e1:e4:b6:e6:
06:b0:ff:53:a6:5a:98:a3:d2:6d:f2:1d:98:75:ea:c1:11:69:
6e:ae:da:b1:09:d4:07:ec:9f:eb:24:b5:ae:34:59:ef:cb:54:
1d:f8:3d:c4:9b:1d:f4:cd:37:b2:e0:51:09:0c:f0:25:7b:2f:
9e:7d:8a:ff:6e:ac:48:07:f7:71:e5:6c:e8:a7:89:3f:ca:83:
43:74:cc:aa:be:ff:15:aa:d3:0d:05:de:aa:a2:bc:53:c3:0a:
f3:7f:38:52:e2:ae:04:b3:c7:06:62:2e:57:3d:3e:92:0f:6c:
76:c0:dc:bb:90:d0:2b:1c:92:27:5c:03:e0:1a:33:43:94:14:
c0:a5:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:13:26 2026 by rpki-client