Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: LBFjdb3X1lDCGA2yT+FE68ud1Rta1ebpanJyV7Lcgw0=
Subject key identifier: 7D:DE:8C:7D:25:01:0B:E7:2B:16:81:01:52:FD:0A:92:E7:BC:B3:D3
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 019FC5FFC1D9590F246771DEF9305DBC6A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 07B0
Signing time: Mon 03 Aug 2026 05:01:40 +0000
Manifest this update: Mon 03 Aug 2026 05:01:40 +0000
Manifest next update: Tue 04 Aug 2026 05:01:40 +0000
Files and hashes: 1: 6ABbzKC7xD3f15f1nL7ehPPdv8g.roa (hash: vm92m0MvDsKxhJur0/wyRBU4n09f3ypTfzNsc2DUitY=)
2: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: 56YpCnt78IcYNNh6a2Cjs6NI6Y88QJFEkrXxUZTi80I=)
3: uWma75PdV6AVC83aCG-d5GXsBTA.roa (hash: l+sIuRGwU1mgUSZbtQoGfvEHgDWDmkYLosWZi/xYnJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c5:ff:c1:d9:59:0f:24:67:71:de:f9:30:5d:bc:6a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Aug 3 05:01:40 2026 GMT
Not After : Aug 4 05:01:40 2026 GMT
Subject: CN=7dde8c7d25010be72b16810152fd0a92e7bcb3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:7c:76:e6:44:48:85:b1:59:69:2b:41:8f:
d0:9a:c6:41:e4:48:26:47:ff:07:0f:c3:1e:49:f3:
3d:fb:34:05:9a:5e:06:f2:b1:aa:08:e0:6f:63:6e:
ad:7f:23:f4:6a:22:76:fd:99:82:91:45:5c:ca:73:
0a:a7:ec:d0:a8:84:c6:93:fe:a9:3c:1f:58:e4:5f:
4c:ec:37:4b:df:6f:23:55:5f:1d:cf:6b:9d:f6:5f:
dd:e8:d7:f9:4b:f4:66:1c:d0:17:15:84:83:b6:ef:
73:da:99:94:42:7c:85:14:71:0a:56:87:3c:d2:86:
52:8c:47:3f:17:72:c0:21:4b:ca:ee:0f:24:0f:41:
53:2d:3c:76:12:7e:83:df:a7:4c:35:ec:08:1f:d5:
6f:ee:fb:45:ab:79:c0:4d:36:ca:67:cf:2a:f0:0c:
f3:c8:9f:32:e3:8f:b0:92:28:57:89:00:62:db:57:
e9:34:76:4c:3e:ee:10:73:c2:12:99:26:3c:74:15:
94:d0:58:26:5b:41:35:fe:9b:5e:18:29:b1:f1:a3:
3e:f2:91:b1:4e:ce:e6:e5:ac:56:78:d2:2e:ac:14:
33:7b:96:25:55:76:5a:3b:fd:11:08:4d:1d:99:1d:
c5:89:e3:53:2e:42:9d:87:9e:90:cb:90:ac:b6:f6:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DE:8C:7D:25:01:0B:E7:2B:16:81:01:52:FD:0A:92:E7:BC:B3:D3
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:92:57:49:e3:d7:d5:9d:35:7e:b4:a7:c0:10:8e:be:f5:bf:
19:f6:02:96:a0:cf:f8:ff:7d:5b:21:47:ab:31:44:2e:55:8e:
00:61:b2:0e:11:3d:65:87:98:c0:f1:df:ab:40:58:c3:a8:6c:
89:25:df:8e:4d:6a:3b:6c:d8:35:22:04:53:10:3d:c5:28:e1:
a8:df:7c:e2:6f:51:f4:93:8a:dd:c7:37:29:7e:6a:f0:9d:7f:
19:7c:7d:17:12:d9:34:d0:5f:d9:51:a5:33:97:c6:df:e6:62:
5c:c4:76:32:f4:b7:38:63:c1:7b:78:73:bb:19:c5:b4:0c:69:
2a:db:de:70:6e:2e:61:28:1a:e4:89:51:a5:fd:86:08:fe:95:
1d:3f:f3:32:c7:92:a9:f5:03:c5:f4:16:d7:57:b5:b3:65:d4:
2a:a8:3b:6c:f2:ac:82:74:b8:2b:5d:55:3c:4b:f6:8b:bd:3a:
c9:00:52:5f:cf:a1:49:3e:9d:b7:c0:d3:3a:5e:ab:11:fe:15:
aa:19:08:0e:1b:a1:c9:11:31:27:60:c9:b0:6b:c5:8e:81:a1:
93:ce:b0:75:b5:80:bf:61:02:90:8e:7d:a8:bf:2a:13:bf:e9:
53:a8:cf:c4:75:a9:d8:6d:1f:6a:5a:16:69:6e:55:66:20:4f:
70:d8:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 08:10:34 2026 by rpki-client