Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: sNYRT/K/yD1g+EYaz15/xdhqaMiBn0eoFzbBT4fH9u4=
Subject key identifier: A8:A4:6B:B9:50:1D:7F:CA:57:3A:E4:E0:A7:F5:3C:27:80:14:A9:05
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019F954A95D569A516DD5E8B083D99E3DDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 18:02:00 +0000
Manifest this update: Fri 24 Jul 2026 18:02:00 +0000
Manifest next update: Sat 25 Jul 2026 18:02:00 +0000
Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: glvofpixsBGh2iGzQdRgBk20bxgE+wQi0ozwUwVz5xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 18:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:95:d5:69:a5:16:dd:5e:8b:08:3d:99:e3:dd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jul 24 18:02:00 2026 GMT
Not After : Jul 25 18:02:00 2026 GMT
Subject: CN=a8a46bb9501d7fca573ae4e0a7f53c278014a905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:42:fe:7a:e4:04:78:99:5f:ba:73:fd:a6:76:
34:42:f6:8e:5b:95:67:fd:17:8a:55:4e:37:ee:db:
cc:4d:dd:66:46:f8:a0:23:d6:a1:16:a7:ff:3a:95:
1e:91:a8:6f:42:05:ea:03:25:0f:d3:cc:a2:ef:1c:
63:38:60:df:6a:ee:55:55:fc:8c:52:3e:69:f9:4b:
9a:93:7c:8e:09:30:06:35:b4:54:0d:6f:16:e2:9b:
80:3f:9b:cc:c1:64:ea:7e:51:62:e3:13:0d:8f:e7:
91:4d:8f:dd:aa:85:e8:d0:0d:83:ea:56:50:2a:be:
06:18:22:37:7e:e4:76:bd:d8:dd:94:50:fb:51:13:
bc:4b:1e:a1:61:07:40:6a:c4:ec:44:75:ac:bc:2e:
0f:81:98:86:f5:c0:e2:82:2f:0c:20:b7:12:ef:a1:
dc:f8:cb:c5:af:51:10:16:2d:56:8a:f2:e7:bd:9d:
0a:26:7f:4b:da:b3:a8:32:9e:2e:c0:be:37:4d:52:
7d:ec:a5:fe:65:9b:1b:3a:a9:0a:49:16:6a:11:48:
e1:42:cd:9e:bb:23:77:0d:19:19:e7:c8:30:c3:47:
05:9b:c6:2d:18:18:a6:1e:5f:67:e9:8e:7d:b6:4f:
cf:a3:4e:b0:38:e2:8d:ac:28:62:df:b2:c8:73:69:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A4:6B:B9:50:1D:7F:CA:57:3A:E4:E0:A7:F5:3C:27:80:14:A9:05
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b6:a2:84:2a:8b:8b:b1:4e:9e:8b:bf:b7:44:ed:95:37:5d:
88:24:37:d5:de:79:30:d1:7f:53:4c:16:76:55:08:6e:b6:7b:
42:b5:25:86:31:4e:7c:ec:63:da:b6:ac:93:02:56:6f:6c:23:
ba:2b:d5:e5:44:b8:ac:98:65:77:a2:a8:fd:24:bc:19:fd:d6:
9c:7d:29:71:ef:83:8f:91:26:36:aa:55:a6:22:60:25:09:37:
9e:be:2b:8b:06:e5:78:af:b7:f9:12:c3:31:10:f2:60:e2:1d:
e4:5d:12:b8:f5:c4:b4:54:e5:28:5c:c9:56:f6:64:d2:36:0b:
e3:0e:03:c2:15:90:72:97:a4:b5:b2:c7:b4:f0:3d:f5:a5:30:
02:43:39:f2:63:b5:1e:8a:39:ed:f4:bd:c8:10:e9:d0:d8:b5:
f7:f3:43:53:df:c7:2e:98:a5:e2:b3:df:d8:93:4d:36:31:5c:
d4:75:6d:d1:25:a6:23:e8:42:88:90:a4:2d:f3:48:41:e4:9f:
df:f6:af:25:aa:29:40:1b:62:4e:69:65:68:37:b2:79:ea:19:
77:6f:cf:1e:a0:0c:64:4a:aa:c8:49:94:5f:58:eb:5e:f3:3f:
a0:e3:f3:3c:54:b8:53:90:b6:3b:8d:41:a3:29:7b:fe:00:b7:
fb:b0:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:55:45 2026 by rpki-client