Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: FfZsQSX3KCyYzu2WLR24sPVRRRsVabBLtFzhO50wS1U=
Subject key identifier: 06:F6:04:E1:3E:E0:89:1A:60:F3:45:01:13:E3:E5:17:49:FF:8A:05
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 019F82306E866A8C2935FA4B9C11DAACD5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 19CB
Signing time: Tue 21 Jul 2026 01:00:39 +0000
Manifest this update: Tue 21 Jul 2026 01:00:39 +0000
Manifest next update: Wed 22 Jul 2026 01:00:39 +0000
Files and hashes: 1: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: Ltzcu5QlFlzg6gIiXH4b4k81z/snNrr7BuNlzlwRnqk=)
2: 5aSu5rDgohcAcFRBlVeL4KQf-Bc.roa (hash: TBrAPV4bOwpXI3ikK/+R0NLpPd2CyHMsQiSsoHb0Hng=)
3: B4UdmI4nMjXvDI9mqvP3jq5Yyds.roa (hash: TvdoyPhTynvytwC8PwcUZrOiE5PXu6aF1+Z/HvWiCkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:6e:86:6a:8c:29:35:fa:4b:9c:11:da:ac:d5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Jul 21 01:00:39 2026 GMT
Not After : Jul 22 01:00:39 2026 GMT
Subject: CN=06f604e13ee0891a60f3450113e3e51749ff8a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:bc:9b:77:ea:89:dc:99:97:9b:e7:77:e4:
cd:85:b7:e4:4f:3d:2b:23:44:cd:a1:aa:4e:af:f7:
2b:eb:8a:53:3a:86:fe:73:56:15:08:b0:4a:6c:c1:
e8:6f:74:48:9b:00:60:ac:46:31:3e:d7:05:9d:19:
cf:cf:a3:7a:f6:15:db:75:ce:7e:24:96:79:bd:27:
0c:06:1f:e7:75:ed:a7:58:9e:c0:5e:9c:2d:d7:f0:
2f:8b:7e:85:ca:4a:70:e8:02:37:36:ff:a4:0c:b9:
e0:11:35:f2:c0:ff:9a:d1:57:98:af:fa:42:fe:57:
c2:c3:bc:02:67:40:dc:52:25:af:55:69:ec:2c:69:
5c:bb:44:49:00:d7:a8:7e:ec:6d:48:d9:5b:9e:ea:
0d:16:fc:51:b5:7b:97:36:d9:1d:13:58:cd:50:c2:
aa:df:00:eb:0c:d6:0c:94:a5:e4:11:74:de:35:d3:
66:d8:0e:21:44:cc:d5:07:9b:1b:5e:5b:d7:53:7f:
91:cd:e6:16:46:b0:a3:24:36:31:ad:11:55:8a:14:
bd:b0:19:a8:f2:71:e5:fb:47:7f:d9:60:eb:8e:a9:
96:75:f6:8b:ec:10:b0:e3:e9:c8:cc:1d:d0:7e:e7:
88:2a:24:20:ae:67:78:a0:20:ec:7d:6e:e6:d3:e6:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:04:E1:3E:E0:89:1A:60:F3:45:01:13:E3:E5:17:49:FF:8A:05
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cf:39:ee:4c:1f:8d:38:2e:20:ed:79:e7:48:99:f5:db:2a:
1b:dc:fa:df:d7:4d:47:16:10:80:bd:93:86:a4:67:38:6c:7f:
45:f3:0e:52:2d:9e:e3:cf:f6:fd:ca:36:62:74:f7:f1:50:17:
28:99:8a:51:ac:0b:8c:f4:2b:42:c1:9f:c8:a2:64:bc:4f:a9:
34:72:d5:ff:a7:75:57:73:db:10:cc:1b:23:60:36:40:e2:8c:
b7:fe:b5:d5:b4:35:1d:72:09:cc:5c:78:13:a1:ac:c5:36:ac:
f7:24:22:cd:ad:6d:49:5d:76:b1:3d:2b:0f:39:4a:1a:27:dd:
9a:42:1f:79:3d:65:93:4e:3d:fe:03:53:54:72:8f:59:bb:72:
9a:0d:5b:c5:6d:90:50:4a:1c:33:33:21:6a:90:fa:e0:4e:cd:
f3:3f:45:04:78:ea:7b:a5:e4:3b:de:59:43:fd:9a:fc:34:ff:
a3:1c:2c:5e:e6:7e:f5:5a:52:f2:a0:c8:d8:9f:eb:ca:1b:d4:
7f:05:b9:5e:b4:17:83:10:42:e0:ea:3b:25:53:1a:d3:2b:10:
c6:ff:1c:1d:48:28:12:03:19:85:56:8c:73:bc:59:be:3a:10:
f8:16:be:d3:41:52:62:aa:2b:8a:5b:56:26:c3:f9:ff:27:12:
15:dd:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:08:20 2026 by rpki-client