Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: 67mUCJ055PJFrRgdkFCUH4fH942yFMy49EPE0yW7dE8=
Subject key identifier: 39:E9:3B:7B:62:D4:B3:9C:16:76:D4:33:F6:61:E0:1C:43:26:E9:11
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019F916C561A8EB12641966E475791685C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 00:00:23 +0000
Manifest this update: Fri 24 Jul 2026 00:00:23 +0000
Manifest next update: Sat 25 Jul 2026 00:00:23 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: YIhJpHHV++XRWlcq3XJq2xaSc8N4H2VVGxdlNafPClc=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:56:1a:8e:b1:26:41:96:6e:47:57:91:68:5c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Jul 24 00:00:23 2026 GMT
Not After : Jul 25 00:00:23 2026 GMT
Subject: CN=39e93b7b62d4b39c1676d433f661e01c4326e911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:54:3e:0f:81:30:fc:26:f0:f1:c1:1a:93:
a2:9e:20:c0:1f:0f:e9:4d:c1:03:d4:37:b2:a0:4e:
05:66:af:7d:aa:80:99:28:fe:c8:be:7e:1e:ad:ab:
d6:db:66:17:99:06:6e:10:5c:42:fd:68:ad:a7:70:
4b:47:60:a0:c5:92:17:bc:2a:20:0c:fe:46:56:85:
8d:e6:76:2e:42:db:5b:4a:a9:de:a1:21:4e:34:00:
65:cf:30:4c:23:5e:51:56:37:a5:1c:40:8d:97:34:
cf:a2:30:7c:44:63:0f:d6:7a:27:ae:29:e6:c8:13:
d8:0a:80:6d:c3:ca:e2:4e:f0:3f:c8:b0:d3:9b:91:
ac:f9:c4:6b:fb:13:47:1d:17:09:ce:9d:8b:e7:c0:
e1:14:b3:5d:65:33:a9:fd:4b:5e:41:5b:51:f8:1c:
c7:3d:7d:31:36:db:f8:6b:38:49:40:32:fa:88:4c:
da:fb:9a:47:86:39:8b:f7:6b:97:57:ff:02:92:06:
49:4c:13:c3:22:9e:ec:77:c6:ea:1b:7f:d0:aa:2f:
32:7b:c4:37:cc:3d:ce:1c:b1:1f:1c:27:f7:b8:0d:
f8:9d:21:97:5c:6a:ba:f2:b3:34:d9:ee:c0:d2:89:
dc:eb:f7:6f:a1:f9:69:79:ef:d5:14:cc:11:63:a0:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:3B:7B:62:D4:B3:9C:16:76:D4:33:F6:61:E0:1C:43:26:E9:11
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:03:82:cf:74:3f:dd:5b:75:10:76:a0:12:aa:6f:ac:c3:
0a:c4:d4:35:0a:e4:72:15:35:ad:38:da:3e:ba:7a:25:bb:b4:
03:92:48:16:7d:cb:81:3d:f6:ed:aa:ec:14:5f:43:55:55:4f:
16:f0:a0:56:4a:b1:3d:c7:d6:4a:82:a9:54:65:e1:74:e4:eb:
c4:61:fd:1d:d3:7e:ab:39:72:6b:14:59:f6:3f:03:6c:7f:9f:
5a:cc:71:ff:f3:ed:44:cf:e8:d6:67:35:21:ea:34:ae:ce:d4:
bb:c5:cb:36:d9:de:e3:a5:64:87:02:b8:8f:76:26:e7:49:11:
f9:14:4e:15:8f:fc:85:27:13:f1:66:05:14:19:b6:e6:ba:83:
9f:b8:0f:42:8a:82:eb:6a:55:12:c6:b5:fa:36:ad:06:1b:c7:
09:9e:eb:96:af:99:a3:bc:95:48:cd:95:c4:c8:61:9d:53:c9:
2f:91:54:57:05:2b:e7:87:aa:6b:d6:65:31:98:7d:65:8d:66:
48:b1:5b:fb:c4:ae:5e:4f:ac:b3:18:fe:48:9b:65:66:14:a8:
1c:8e:18:e2:c2:b8:7d:7b:6d:c0:e3:ab:a4:92:c1:fd:71:07:
33:94:05:8e:fe:15:f8:9f:a1:4d:b0:56:49:b6:a7:4a:4a:11:
c8:fb:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:24 2026 by rpki-client