Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
File: R4urL0xbYpNYFZNPSoH1YNLXMsg.mft (raw, json)
Hash identifier: Ln3bISSulIMYg0L8tUhCEcUFkHH2rK+KWsHBpI2QBkY=
Subject key identifier: DD:BD:04:8D:85:D0:A5:CD:20:EC:21:3B:5C:03:24:8C:71:EE:86:3C
Authority key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Certificate issuer: /CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Certificate serial: 019F8154BC05E50D38C3D2EB201E03AB31A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
Manifest number: 8D
Signing time: Mon 20 Jul 2026 21:00:41 +0000
Manifest this update: Mon 20 Jul 2026 21:00:41 +0000
Manifest next update: Tue 21 Jul 2026 21:00:41 +0000
Files and hashes: 1: OP4GnLmThCBFy87U3IPXWaJdkGA.roa (hash: CzHuhJNSL0fmMbMPkWZNZ3g6rBvAOQunuRNzTNwmsOk=)
2: R4urL0xbYpNYFZNPSoH1YNLXMsg.crl (hash: whzspHapaPsLJZe0MxFX5P4VtaERQJDdSS0kQsUKICY=)
3: w9hMpn22nS31hORs4FbfAZ4nCN8.roa (hash: R5QWnTCvV96e97UtI23G1RgAIOStBivXSgOB+MvPMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:54:bc:05:e5:0d:38:c3:d2:eb:20:1e:03:ab:31:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Validity
Not Before: Jul 20 21:00:41 2026 GMT
Not After : Jul 21 21:00:41 2026 GMT
Subject: CN=ddbd048d85d0a5cd20ec213b5c03248c71ee863c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:70:6a:c2:e9:b1:c8:4e:60:28:52:d3:86:
d7:1d:bb:b2:d8:20:00:60:5e:07:85:d6:79:05:29:
c0:fb:86:c0:b9:1b:5c:05:c2:e8:fb:6c:fc:79:e6:
ed:32:76:1e:da:70:cb:f9:ed:94:5f:18:ca:e9:00:
65:f8:19:11:4c:ba:fd:e6:30:53:53:41:ea:b5:c6:
8e:fa:bc:4d:f9:2f:b9:ae:ca:59:e9:3a:e6:86:7d:
88:56:e0:48:1b:93:1e:1e:fa:39:33:a5:ff:18:82:
f6:4c:de:d8:2b:7d:d0:29:1e:0b:14:c3:b1:47:e9:
fd:28:5e:57:d3:cb:44:df:c9:f9:54:78:90:85:86:
f7:7e:c9:8c:63:f8:1c:83:a1:9d:81:79:73:04:34:
f5:bb:41:df:0e:98:4f:86:1b:2f:8b:ec:65:9a:fb:
52:f3:ac:84:e5:8f:79:39:f1:f8:4a:93:07:ca:43:
8f:35:b9:4e:7b:07:d7:55:57:23:11:06:4b:64:cc:
38:46:4b:13:b7:d5:53:f9:11:fd:e8:c8:62:8f:96:
dc:38:5b:f5:9a:dd:c5:10:bd:b0:5b:88:42:01:fd:
37:03:ad:01:91:6e:d1:d2:52:01:05:cf:c1:42:90:
d2:f0:ef:1d:c3:e7:03:0e:f5:ef:2d:91:00:7e:15:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BD:04:8D:85:D0:A5:CD:20:EC:21:3B:5C:03:24:8C:71:EE:86:3C
X509v3 Authority Key Identifier:
keyid:47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f5:57:12:93:82:81:62:21:9d:bb:b7:01:06:d5:be:fe:cb:
e9:df:4c:f2:4c:2d:ca:a7:8e:91:ee:57:7a:6f:77:c2:50:11:
f2:2c:6c:cc:a7:3b:d4:ae:ab:61:4f:81:02:43:9d:d7:e7:2c:
66:6f:3e:d5:c9:f3:7d:59:2d:96:4a:71:1c:6b:f1:b6:cf:79:
8e:77:7b:78:16:ea:ca:d5:66:ed:ff:30:86:57:bd:c9:87:84:
1f:a2:1f:c9:b4:6e:20:38:74:6c:39:c8:0a:57:67:b6:07:9d:
19:d3:5d:8b:df:ec:95:02:80:cb:33:a7:ab:36:3f:1c:09:43:
9a:de:a8:f1:30:ca:11:20:1c:7c:e8:a7:44:c1:b8:ad:6b:60:
25:b5:6b:98:17:78:43:54:8a:d6:4a:6f:d8:1e:d1:96:1a:0d:
66:6b:e7:c4:74:00:93:7e:ad:0b:03:b8:5a:26:20:84:34:91:
e2:8e:05:9b:75:3a:d7:ae:79:58:1c:0f:55:dc:e0:f9:78:72:
1b:0e:35:f4:6c:5a:24:b8:51:b7:35:d1:4c:20:c8:74:26:77:
78:57:d7:48:68:93:c8:00:10:21:be:82:2b:20:02:1f:23:c2:
51:d2:ac:35:d2:f0:df:30:f1:c9:0b:55:ff:af:90:9e:8c:44:
ed:b8:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:49:11 2026 by rpki-client