Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: l5TlGNwHIpr/trVeP5umBIE6y7wFDIKe4Dj5JDGpGig=
Subject key identifier: 28:8E:DD:4D:93:0E:EC:47:5E:CB:D2:48:72:B1:7B:F7:19:A6:0B:EC
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019F8F7EE76E6AE9B82F15BA31298188A229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 01E9
Signing time: Thu 23 Jul 2026 15:01:26 +0000
Manifest this update: Thu 23 Jul 2026 15:01:26 +0000
Manifest next update: Fri 24 Jul 2026 15:01:26 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: D+YQXwU5GFgQhhOXyy4ggexPV7hpYSPXFHbpKS3Sk2E=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:e7:6e:6a:e9:b8:2f:15:ba:31:29:81:88:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Jul 23 15:01:26 2026 GMT
Not After : Jul 24 15:01:26 2026 GMT
Subject: CN=288edd4d930eec475ecbd24872b17bf719a60bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:78:e1:c3:13:7e:d3:e0:c4:bc:19:81:18:
e9:97:3d:af:94:dc:98:94:68:90:df:c6:37:90:08:
b0:bd:cb:b8:13:ba:a0:e8:99:68:65:c3:b6:01:ab:
13:d3:a1:87:17:6e:35:df:21:e7:9d:24:46:c4:84:
38:e0:43:40:7d:39:dc:d0:e4:3e:08:f3:c9:79:55:
c7:bb:a2:c9:aa:92:de:b9:84:30:ff:86:3c:ab:b0:
a1:c5:a7:d2:10:a6:36:b5:6f:02:c8:cc:2d:9b:54:
97:43:46:f5:be:91:17:22:37:fb:9f:84:c9:05:66:
5d:1b:60:fa:e1:be:84:7b:35:0f:df:67:da:2f:ed:
e9:ac:fe:ac:cf:0b:cc:fa:36:43:94:80:a8:01:f5:
b2:9a:79:40:9c:38:3d:04:1b:63:07:b4:76:15:4b:
03:aa:03:72:a7:a5:24:dc:4b:0b:c4:76:cf:0a:bc:
75:2f:8f:f0:1f:12:1e:e7:19:e1:c3:49:df:8c:ee:
d5:d2:7b:ea:3f:08:35:e5:bf:c7:5c:be:f7:27:6b:
b5:50:3a:15:61:6e:6f:ec:c0:8a:cd:df:3d:86:39:
6f:ad:c9:0b:9a:bf:3d:55:e6:94:3a:1e:d1:db:62:
b2:91:90:ff:78:68:c4:04:21:21:91:78:a1:14:fe:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:DD:4D:93:0E:EC:47:5E:CB:D2:48:72:B1:7B:F7:19:A6:0B:EC
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:12:09:59:7f:8a:2b:58:f1:be:6a:21:d6:40:75:20:b6:0f:
20:5c:ea:e0:23:d6:35:8e:8b:a8:8a:9d:53:13:e7:93:6a:68:
d9:9a:ac:14:ac:f0:a5:83:89:0d:ae:36:3a:30:85:2a:7e:cd:
29:3e:e8:fb:f4:a7:d3:21:e3:f2:d7:43:3e:63:0e:89:3d:fd:
fd:7a:a3:e5:17:93:93:8d:c8:85:66:59:28:c3:8c:45:b3:33:
ba:0e:41:87:51:a8:fa:94:27:c6:49:43:6d:1f:fe:f4:f2:cf:
a1:df:0c:ef:88:04:7b:4e:c6:74:ec:1f:bc:70:ee:10:3c:4c:
87:a3:18:67:81:54:b4:b5:d3:29:bd:75:1a:88:f1:de:c7:58:
56:d5:b0:14:6f:f2:7b:d0:ed:44:d5:57:3b:5c:14:df:d1:f0:
3f:67:6f:87:e0:b1:39:8e:8c:d3:fd:d3:75:66:b3:5c:38:6f:
d6:00:b5:d2:50:e8:5f:ce:9d:8e:46:78:00:ee:6d:e6:af:05:
03:eb:f7:09:5c:c6:c9:13:2e:68:f2:ff:52:e5:8c:09:7f:e2:
b1:56:88:e6:f3:82:83:2d:29:8b:e7:68:6a:f9:ec:37:77:16:
6a:64:43:23:97:e4:35:06:3c:9c:8c:7a:bb:87:c3:6b:e0:97:
b7:dc:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:27:31 2026 by rpki-client