Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: cSQ53gY1qGytRWFibSsaXElaf0UvD6a1TDs+4OYmnWI=
Subject key identifier: 26:74:AD:FB:21:07:2D:B5:FF:9D:CC:1B:76:87:2E:77:1E:F2:08:0D
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 01A001382A69CB3FE81A92919A27B9D588DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 1005
Signing time: Fri 14 Aug 2026 17:00:53 +0000
Manifest this update: Fri 14 Aug 2026 17:00:53 +0000
Manifest next update: Sat 15 Aug 2026 17:00:53 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: F3yZnExjHTzWeC5ZHHfJPdrjuGJXyWc3WaCKUbaNJ5E=)
2: fqd_p4Wrb6OXddN1aeuYEJC8YH4.asa (hash: jmbRwKrDPkjso/zUasnqP+cDaGWkVpbGq+nQ2VGiSLw=)
3: mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa (hash: 05RPu7PASUup4/F6w6O5WKp82l03RTgAZ/jZKw8NCyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:2a:69:cb:3f:e8:1a:92:91:9a:27:b9:d5:88:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Aug 14 17:00:53 2026 GMT
Not After : Aug 15 17:00:53 2026 GMT
Subject: CN=2674adfb21072db5ff9dcc1b76872e771ef2080d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:b2:b7:a4:29:3d:72:87:a2:bf:97:6f:9a:
a0:73:9e:11:13:a5:27:c3:99:85:9b:a4:b6:57:83:
23:19:98:d3:4c:0d:b2:f8:f6:6c:53:ab:0b:2d:62:
63:a0:78:a0:80:20:b1:40:12:c9:74:c3:9d:e2:ec:
6f:66:b5:6e:29:b8:8d:39:8c:8b:0b:b5:25:45:c0:
6e:8f:3f:6d:33:d9:65:15:4b:22:7f:34:d2:cb:68:
75:50:7e:d6:81:91:08:05:15:98:7b:ef:ed:04:a8:
f4:f2:0e:4e:c5:83:28:97:26:58:d2:ec:93:e0:7c:
95:22:de:9f:60:55:fe:45:2a:ad:c7:f5:10:9b:54:
d3:f9:e9:73:4e:92:fe:ba:ae:35:5a:cf:37:d9:4c:
56:d8:72:f1:a2:50:cf:7f:75:63:ec:b8:40:e6:50:
8d:60:67:7a:b3:ab:df:0b:5d:da:96:b1:ef:9a:95:
a4:ac:5b:ed:d7:bc:c5:0f:80:1d:32:12:21:59:b1:
c6:42:fb:38:03:c3:f1:5f:73:99:ce:3c:a7:50:cc:
17:31:10:4e:fe:3e:99:58:a2:73:60:99:23:64:eb:
d3:f3:0b:63:eb:e3:af:5c:a9:22:c5:0b:c5:e1:36:
e4:12:ad:35:b6:7e:1d:2d:a1:76:57:bc:04:ec:58:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:74:AD:FB:21:07:2D:B5:FF:9D:CC:1B:76:87:2E:77:1E:F2:08:0D
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:50:85:4b:b8:bc:eb:42:03:cb:4b:f7:83:b6:49:1b:d3:30:
aa:fe:79:7a:1f:65:2f:11:bc:03:d4:dc:da:46:5b:2b:7c:2d:
24:34:0e:96:66:d8:ec:e0:e2:f1:ab:98:1b:cf:56:f2:61:a2:
89:84:2c:e5:f8:99:3d:3f:59:66:00:0b:53:08:a1:4d:bf:22:
e0:03:3e:d7:77:6b:66:f5:03:87:a2:eb:2e:e5:7d:34:15:94:
9c:ef:b1:d4:4f:94:a3:54:2b:01:10:9c:3d:ee:da:b6:ad:11:
64:d3:7d:55:36:24:0d:63:d0:93:5c:34:1b:94:b1:34:59:8b:
40:82:48:f1:22:56:08:e4:39:ad:ce:12:3d:55:71:01:32:e4:
ac:05:94:01:56:2e:94:71:56:47:e3:64:ff:80:9c:38:d5:a8:
b5:36:c6:ce:2b:ff:c8:f7:62:68:8f:90:ec:c1:4d:bf:09:53:
01:63:59:56:37:e7:8d:b0:f5:2c:c5:44:d9:c5:2c:ce:6f:92:
e1:83:55:ed:73:0a:08:2a:27:5b:d5:ea:6d:37:39:05:4f:c2:
1c:4e:e6:eb:8e:16:be:9f:df:08:04:18:66:fe:a3:ac:8b:fb:
3b:59:c6:ef:e4:e1:5b:55:fa:78:20:25:71:bf:78:b6:c4:05:
b4:a0:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:16 2026 by rpki-client