Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: 1ZOoGZ5N2CizgCcMLoyggInqGTGTAyGCwsJAmYFu9Ok=
Subject key identifier: 40:81:99:B6:E1:A0:0F:0C:33:C8:E9:B4:07:7A:4D:9F:4F:8A:9D:31
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019F8F7E408BA349912AB1C3B11F620EAFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0D80
Signing time: Thu 23 Jul 2026 15:00:43 +0000
Manifest this update: Thu 23 Jul 2026 15:00:43 +0000
Manifest next update: Fri 24 Jul 2026 15:00:43 +0000
Files and hashes: 1: CWBx_YaW55wp0Q8nHPmUDJfmm9g.asa (hash: sICMwCqCa7TLjDMZRJ5VqSQf7cfIQN96H4gFU0ZqRjs=)
2: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (hash: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM=)
3: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: 1dkr0Opvyd8g0/oN9cnzQYQgdQoc97lDIinY7VJi3Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:40:8b:a3:49:91:2a:b1:c3:b1:1f:62:0e:af:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Jul 23 15:00:43 2026 GMT
Not After : Jul 24 15:00:43 2026 GMT
Subject: CN=408199b6e1a00f0c33c8e9b4077a4d9f4f8a9d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:dc:20:32:df:2e:dd:8c:ac:a1:18:0f:8f:
0e:a1:40:39:c1:38:2e:b4:ca:90:5d:15:0b:09:fe:
fd:4e:e8:8d:7b:7d:b2:5f:4a:d5:76:ef:b3:e4:55:
7c:1f:8f:de:bb:67:05:90:0c:15:b9:cb:76:12:a9:
52:13:50:8a:2d:7a:77:2c:f8:83:34:e7:77:b4:b4:
5e:1f:0e:9e:98:8a:64:24:2a:34:e5:27:9a:4c:2e:
da:13:97:e8:fe:52:fc:8b:7a:0f:db:d7:3d:00:08:
b1:7b:8e:ca:04:0a:23:62:09:b3:42:e1:bc:23:f8:
0c:e7:3b:1d:e7:99:46:c7:44:a8:c0:d3:69:d2:08:
2e:22:4c:17:20:c0:2b:19:89:fe:5a:b9:6e:a4:62:
fd:0d:97:b8:c4:d1:7e:e5:8d:08:64:75:11:f4:56:
ac:e1:38:08:a1:5e:18:12:96:93:ea:b6:76:55:90:
81:27:87:0a:92:de:24:56:7b:92:17:5f:cc:94:a9:
48:77:f5:f4:9c:44:6f:c6:0e:85:83:f2:ed:e9:9b:
90:9a:28:42:35:c3:61:c6:7a:62:59:6b:a7:57:98:
9d:91:ab:18:c2:2c:67:21:84:5f:f4:af:88:a3:9d:
f2:83:43:a5:4a:f8:a9:d4:5f:d1:b3:55:47:57:93:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:99:B6:E1:A0:0F:0C:33:C8:E9:B4:07:7A:4D:9F:4F:8A:9D:31
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:af:ba:bb:3f:2e:c2:c9:49:a4:ea:d1:62:93:21:88:0b:26:
e0:eb:e7:d8:bd:d1:2b:96:a3:ce:f8:6e:93:eb:5d:c9:d1:4c:
4b:31:cd:c1:f1:30:10:be:4e:01:45:28:68:25:71:ff:42:69:
e3:53:3b:fd:80:33:6f:e7:2a:06:60:29:1c:aa:c8:23:62:65:
45:de:65:2f:92:e4:42:b9:a2:ec:3c:fe:4e:d6:e5:3f:db:e6:
d1:63:15:f3:c5:8d:76:30:cc:c8:4b:28:68:4b:05:ba:3d:80:
c5:f4:05:0b:f9:e7:dc:d3:aa:e9:b9:f2:9d:3f:ca:0e:dd:8f:
f9:ac:25:1e:bd:96:18:55:66:42:b7:28:d9:59:89:b6:86:a3:
bc:ca:9c:1c:1a:3b:68:12:fc:34:90:58:d1:61:2e:37:c9:21:
ec:e7:e8:e7:af:ae:af:f3:87:a6:59:43:c8:17:dd:12:2a:7c:
77:c3:71:2b:be:ee:92:2a:91:f5:07:90:fb:3b:dc:39:cb:1e:
bd:88:84:d0:40:8e:3a:63:83:fa:5a:eb:5f:9d:2f:53:8d:88:
a4:e4:95:84:a7:61:c3:76:53:66:cf:f5:95:11:0c:f8:04:d5:
6d:b1:b0:db:02:2f:a8:ab:fc:b9:d1:06:bb:bf:40:7d:06:7a:
bb:4e:55:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:19 2026 by rpki-client