Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier: kfmfJ0Fk0egt8iO3YeAaLIoXEP9TROHPxHEs6BUAIzs=
Subject key identifier: C7:59:DD:A8:4C:2B:98:AB:EC:48:E0:F3:D1:74:D3:50:A1:28:CC:2F
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial: 019FA2CE4BF8D98757181084993DEADBAC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number: 02B0
Signing time: Mon 27 Jul 2026 09:00:56 +0000
Manifest this update: Mon 27 Jul 2026 09:00:56 +0000
Manifest next update: Tue 28 Jul 2026 09:00:56 +0000
Files and hashes: 1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: SsWSO0gKpJy8aFgo7j7tlruswmmS9xjgJqMaa5jiYx4=)
2: Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa (hash: HW7h2XnvN7F3euJL4sahv9OWYDM7sKHWz8LB9hcLvk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:4b:f8:d9:87:57:18:10:84:99:3d:ea:db:ac:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Validity
Not Before: Jul 27 09:00:56 2026 GMT
Not After : Jul 28 09:00:56 2026 GMT
Subject: CN=c759dda84c2b98abec48e0f3d174d350a128cc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:5b:f8:ab:df:8c:4c:fa:ed:d5:77:15:ef:
11:bb:46:df:8e:bb:b0:0f:d7:01:1c:56:76:63:39:
62:c1:64:bf:08:18:61:e8:46:e7:d0:87:20:c7:d3:
4f:c3:89:32:5f:06:ad:57:7b:7f:22:8e:4a:a8:ef:
9c:80:20:50:5b:90:77:b6:75:6c:7c:45:46:0e:46:
84:d6:52:91:26:79:7b:16:d5:24:8c:c3:10:73:5c:
e1:53:62:24:a8:9d:a1:ca:43:eb:3f:d8:26:fb:6d:
44:8e:f3:d6:a5:7a:4a:fd:90:45:f5:8d:d3:e9:ff:
00:9e:6c:b7:c6:88:5c:7a:a5:0a:84:e8:94:f5:80:
fa:70:de:dc:b5:6c:92:0e:c0:64:b0:c1:27:a2:a4:
05:7e:23:aa:c8:2c:5b:f6:e1:ff:9b:b8:00:ee:05:
aa:a2:7a:cd:6d:2e:6a:2d:e4:8f:2c:5b:e1:6f:a4:
db:68:1c:ca:c4:9e:33:c0:02:f6:16:1b:0f:2f:be:
10:23:ce:43:84:1a:b0:78:45:71:62:29:03:24:c8:
db:cd:f5:d8:09:e4:be:1f:53:67:55:fd:15:e5:2a:
95:c4:b5:75:dd:91:10:fd:7d:f5:60:90:c2:07:68:
ea:c8:3e:0b:bf:4e:56:29:06:22:13:b5:c0:ea:4c:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:59:DD:A8:4C:2B:98:AB:EC:48:E0:F3:D1:74:D3:50:A1:28:CC:2F
X509v3 Authority Key Identifier:
keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:74:20:69:3e:51:1d:e1:b7:b3:48:95:b1:79:87:cd:54:a4:
98:e9:56:fd:4d:97:66:70:fc:d2:02:d1:43:84:e9:f5:0b:94:
78:ac:44:4a:35:b6:fc:fa:0b:a3:0b:a1:c0:28:3b:96:39:4a:
c7:8e:7f:67:dc:ba:8d:38:e2:65:90:af:4f:b7:e6:6d:fd:6a:
c1:d1:cc:76:43:88:ae:e7:21:82:d5:7f:4f:5e:bb:f9:cf:19:
e1:65:96:7f:f8:3f:bc:f5:b4:b6:aa:85:c8:26:de:0d:74:7d:
37:86:eb:5d:f9:c5:23:9f:4a:d9:1f:64:47:9e:3f:c5:78:c4:
d9:1d:64:29:15:90:d5:4c:6f:5e:fd:f2:d3:bb:c6:e5:4e:d7:
f3:88:b4:ee:d8:74:88:fa:d7:2c:43:20:1a:c8:33:f2:b0:0c:
54:71:8e:58:69:94:04:a7:d5:71:f0:ed:04:d9:7c:06:49:89:
1c:5d:3c:83:22:78:1c:b7:c4:5e:ba:6b:3f:0a:4f:86:85:26:
d4:98:e7:36:e2:7e:93:a8:e5:b8:77:7b:45:53:cd:f4:f5:57:
5a:b2:54:34:b6:8f:07:ea:b3:0c:a3:d9:d4:dc:78:07:c8:04:
39:d5:86:ae:0f:e5:20:b4:d7:9e:b3:dc:54:db:76:c5:2b:74:
b7:a0:d7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:35:32 2026 by rpki-client