Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: 0cDDu35agPrVn/5uxhszL0Mzmuj0OFB5VN1qFifO9iE=
Subject key identifier: C1:A6:7B:24:D0:F9:26:8D:8B:C2:26:7E:59:C1:CA:81:51:2E:55:45
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 01A00137E095F314A660BC8728FF2FC78A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0B85
Signing time: Fri 14 Aug 2026 17:00:34 +0000
Manifest this update: Fri 14 Aug 2026 17:00:34 +0000
Manifest next update: Sat 15 Aug 2026 17:00:34 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: q+XlirPyUlVqksthWdrFs/bVLujWGdspDCMA3uCxNa4=)
2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:e0:95:f3:14:a6:60:bc:87:28:ff:2f:c7:8a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Aug 14 17:00:34 2026 GMT
Not After : Aug 15 17:00:34 2026 GMT
Subject: CN=c1a67b24d0f9268d8bc2267e59c1ca81512e5545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:4b:1c:d9:1a:4c:bf:c1:a6:b7:31:01:1c:
e2:59:9e:32:44:0a:64:55:85:c3:ce:5c:f8:59:a9:
f6:3e:f4:5f:22:c5:a8:8f:84:b1:4d:fb:7f:4e:bd:
d7:d0:e7:f4:82:ed:cd:48:02:75:40:c6:ed:ea:65:
d5:35:d6:ee:f7:ed:ee:0f:79:f3:66:6a:28:19:b1:
b8:1e:68:38:08:fa:11:64:4d:59:07:5f:47:98:1a:
c4:8f:b2:58:c1:22:0c:c5:f1:fd:d5:c3:6a:3c:46:
2d:87:78:01:78:d1:92:31:9b:72:e5:6d:9b:66:2b:
e6:5b:6e:c8:f5:cb:78:02:4b:a8:e4:c4:d8:e1:ec:
26:6d:16:66:14:b0:8a:41:0a:46:79:1e:ba:dd:c2:
41:a6:e5:db:3e:bf:7c:25:36:b3:d5:2b:13:59:d6:
d9:09:34:f8:13:48:94:f9:1c:3d:aa:f1:92:87:f5:
9f:98:4c:19:a2:df:17:a2:0e:41:0d:6e:cf:21:a8:
8f:19:c4:f6:93:90:e5:8c:90:3b:12:26:3d:cd:aa:
c6:38:31:93:56:65:ce:c8:0e:42:82:ae:48:f0:d5:
e1:ba:4d:8d:cc:38:c9:80:67:6d:40:4f:f0:a0:5d:
50:1f:68:93:1c:22:2d:22:03:50:bf:b3:2e:c7:c2:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A6:7B:24:D0:F9:26:8D:8B:C2:26:7E:59:C1:CA:81:51:2E:55:45
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5d:eb:26:47:10:bc:ca:7a:82:10:a5:b6:a0:81:df:83:6e:
54:d8:65:a4:d1:79:fb:56:e1:1c:16:c9:6a:68:c5:b0:91:b3:
82:25:4c:8c:eb:90:5c:78:14:67:4c:31:c6:46:b4:aa:22:2a:
1b:6c:30:df:c2:11:96:73:01:10:b9:35:2f:dd:9d:1b:fe:74:
38:ac:c4:34:84:f5:59:e4:27:9e:61:41:04:5e:af:fd:3a:08:
12:28:fc:08:17:cf:b2:94:47:51:1b:6f:4d:3b:5c:cf:1c:2f:
06:07:23:45:9a:33:ee:ce:4c:8c:1a:af:c7:55:31:db:d6:26:
53:83:9c:ac:d6:5f:f3:ef:91:a1:0f:d9:b5:1a:11:92:23:5f:
f3:72:8f:fd:6a:c2:75:ba:f8:21:2a:cd:0d:01:d6:cb:35:e4:
74:86:2c:e0:7e:86:40:36:1e:ac:a0:84:08:24:00:05:90:b4:
9d:e9:83:a7:e9:58:0e:97:7a:de:05:b2:c2:d5:cd:10:d8:df:
6d:35:a8:19:b0:29:35:6b:8f:5f:0c:f5:a0:37:bd:35:14:c8:
fe:7f:e0:29:ad:a2:0f:80:48:1a:cf:25:bf:29:be:58:4c:a3:
82:94:81:ba:53:d0:35:0c:63:e5:be:8b:0e:95:93:6d:31:03:
c8:68:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:19 2026 by rpki-client