Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: Q3Qdp5Arz7c6cWttDsrpj2l94CoSDEcB+m9vuPcQ26U=
Subject key identifier: E4:40:D8:C1:33:B1:66:61:AC:9D:FF:32:71:5F:55:A6:48:97:00:EE
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019FA1F27E5FEEF31BD24CF84ECB7A7EEC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 17DF
Signing time: Mon 27 Jul 2026 05:00:51 +0000
Manifest this update: Mon 27 Jul 2026 05:00:51 +0000
Manifest next update: Tue 28 Jul 2026 05:00:51 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: t0SNOrWvQUUpTZ6tJWtVpPLAg2gcQNNcioDbvUz9afk=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:7e:5f:ee:f3:1b:d2:4c:f8:4e:cb:7a:7e:ec:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Jul 27 05:00:51 2026 GMT
Not After : Jul 28 05:00:51 2026 GMT
Subject: CN=e440d8c133b16661ac9dff32715f55a6489700ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2c:ef:56:9f:d6:d1:8f:cd:fc:39:d3:43:d2:
fd:7d:88:22:94:d7:55:09:aa:f5:5c:56:be:70:fe:
51:0b:a6:2d:ca:bc:6e:24:fb:11:f6:8c:f0:9c:5a:
ba:57:5a:e8:6a:a1:d2:f1:59:6e:4c:9d:3d:5c:b2:
97:65:c1:c4:06:d0:10:52:92:12:4b:2f:7f:06:b5:
36:d9:0a:5b:a6:e7:a2:57:8c:e0:bb:97:01:e1:69:
49:fe:8f:80:35:18:74:6a:e2:83:a2:ce:14:87:a7:
4f:12:35:4e:ec:32:b4:d9:a1:39:24:2b:7e:78:d9:
e9:65:62:04:b1:52:1f:f5:96:cd:9a:ab:30:0e:35:
07:40:a7:e8:f3:fd:8b:99:b1:79:6c:de:e4:fc:2a:
99:0b:fc:a0:7b:de:b1:ca:8b:bc:d7:32:2e:7b:50:
52:33:2f:2f:28:68:86:33:be:16:cf:b8:f7:d7:ee:
5c:5a:14:d5:54:dc:10:e1:f5:2d:9d:97:e1:dd:24:
97:f9:6c:47:95:74:2e:66:63:15:31:b9:f6:d2:a9:
cb:ac:f7:c2:65:74:74:bd:6d:b8:e4:b6:db:08:6f:
f2:85:e2:0c:3b:fe:d4:a1:31:a7:f4:cd:4f:4f:60:
70:c0:38:ea:fb:af:d9:3d:9e:f4:e4:6c:2b:78:7e:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:40:D8:C1:33:B1:66:61:AC:9D:FF:32:71:5F:55:A6:48:97:00:EE
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:48:bf:bf:a9:fc:9c:dc:e7:27:a6:75:1c:26:f7:cc:b3:0d:
89:42:a4:75:a6:90:a3:cc:80:6d:f9:1d:05:1d:48:11:a0:d4:
92:6a:57:37:57:03:56:9f:82:0a:1c:cf:fc:63:12:fd:10:0f:
00:dd:21:94:cc:bc:f4:3a:bb:a4:88:5f:e9:1e:a2:99:a8:7d:
b9:18:28:8c:aa:da:72:a9:64:49:a3:fc:62:94:88:e0:05:30:
c2:6f:3b:b7:47:c7:07:fd:20:2c:28:ef:34:07:82:99:f0:0e:
0a:1a:ba:20:47:88:74:93:73:72:cc:bf:97:e9:17:90:fd:ef:
19:b9:89:f1:37:6a:d0:02:d3:9d:24:60:ae:3a:13:dd:40:82:
7a:2c:a8:19:c2:10:d9:92:a1:b6:8e:8b:03:5f:44:bd:ba:70:
86:b8:5e:4c:48:c7:8f:ef:8d:a9:1e:35:e0:08:da:1b:50:90:
b3:52:33:25:10:0c:f4:c1:b1:0d:58:11:83:a7:f6:a0:a8:d5:
f1:8f:98:08:d3:56:02:51:f6:a1:43:5a:b2:63:9a:ec:c4:52:
71:2f:53:2d:5c:3b:f6:d6:b5:65:72:72:28:e3:cb:89:54:97:
79:14:f4:69:1d:35:0b:14:74:3c:d1:12:80:8a:ed:55:4c:df:
cc:00:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:05 2026 by rpki-client