Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: jULxUcOI6XczwnjLbGP7YLv0A9VANWdad5TQe0qcUck=
Subject key identifier: 2D:75:59:57:A0:91:47:A5:30:19:00:DD:A9:49:2A:F5:9C:34:A6:0B
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019FA2CEA84EB88BDE627E9F0350CAB4C3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0FE7
Signing time: Mon 27 Jul 2026 09:01:20 +0000
Manifest this update: Mon 27 Jul 2026 09:01:20 +0000
Manifest next update: Tue 28 Jul 2026 09:01:20 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: GZH/uf6S9uHXgce0YX9VKGmK8Ubw0NnESAXA2gvrjsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:a8:4e:b8:8b:de:62:7e:9f:03:50:ca:b4:c3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Jul 27 09:01:20 2026 GMT
Not After : Jul 28 09:01:20 2026 GMT
Subject: CN=2d755957a09147a5301900dda9492af59c34a60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:c9:42:0e:04:21:1c:a8:eb:5f:5c:ec:ca:
43:e7:49:4a:df:be:8d:bd:56:bd:2d:c9:9d:37:d0:
08:04:4a:fe:83:fa:55:75:77:a1:93:29:ee:44:73:
ef:ae:42:71:35:58:5c:ba:d4:6a:6b:ae:2d:d6:b4:
6c:34:13:b0:67:ea:8c:0f:34:ef:62:a2:65:6f:a9:
3c:ed:a2:3b:a4:bb:c0:61:d6:ff:35:3d:cb:cf:9b:
6c:d8:f6:bc:50:eb:33:2d:2e:9a:d7:53:e9:97:3f:
20:7e:da:96:21:0b:5a:6f:2d:22:bb:dc:be:23:89:
f9:27:91:82:c6:1c:37:54:60:55:ac:9a:5b:ce:f0:
7d:ae:31:0b:0f:8e:07:7a:ae:b8:03:83:7b:d2:46:
41:ba:b9:ac:c4:7c:7b:ac:0a:6c:bb:45:93:5f:24:
dc:97:90:97:c3:e1:9a:cb:77:99:19:81:81:37:b3:
9e:5f:6d:e7:59:36:da:66:72:02:8c:87:34:f3:ba:
83:47:d1:bf:2c:f1:ad:c7:e4:d5:b9:02:8f:33:85:
88:8d:13:10:e1:9a:22:24:5b:be:08:52:fe:54:2f:
5b:1c:5e:6e:96:cc:8d:3a:6c:58:0c:64:52:a8:0e:
c2:a5:2e:37:1e:b2:80:a3:fc:20:24:eb:0c:a9:80:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:75:59:57:A0:91:47:A5:30:19:00:DD:A9:49:2A:F5:9C:34:A6:0B
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:69:3a:3e:17:02:b6:79:8e:54:cc:e9:23:6b:e0:9d:9f:ed:
dd:bf:c1:06:33:bb:ba:4d:c5:bb:ab:93:1f:df:aa:90:b2:3d:
06:67:37:60:16:50:8d:9c:bc:32:c8:e4:91:a2:7d:1b:6e:4a:
77:9d:e0:ee:6a:f7:91:0f:5b:04:c0:7d:5e:1c:30:88:c7:f9:
41:3f:c7:c2:5d:40:2e:64:0e:5f:0a:f0:9d:39:1b:f2:15:f2:
90:b2:28:c4:d1:b5:34:59:f0:21:a6:79:c7:11:47:49:ee:a9:
9a:d9:02:60:b8:eb:85:3d:6e:94:98:4a:c8:ad:ef:13:12:46:
cd:f1:a3:a0:d3:c3:de:1c:d0:94:80:77:88:ad:bf:93:04:bb:
eb:16:08:0e:cc:73:2c:7f:56:df:31:ce:26:d8:9b:7b:b7:a4:
df:a1:4f:46:2c:cc:29:fc:ba:26:2d:83:72:0a:57:6b:1b:4a:
6c:69:ef:88:05:7d:31:38:e0:03:4e:6e:9c:1c:ab:5d:25:14:
c8:a3:12:b7:11:5e:9f:8c:06:97:90:f5:5d:a6:c6:de:7a:6c:
92:d0:e3:ba:3a:1e:77:25:0d:55:24:39:e2:61:07:46:52:15:
ee:ea:d1:20:ea:7b:be:03:eb:c7:36:6d:1c:75:83:ab:56:03:
49:90:81:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:24:46 2026 by rpki-client