Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: zPw+OeG4Q0jebUZxEO2Yv17rZQZWMtuAaiDipRarTpc=
Subject key identifier: 55:71:4E:A9:21:F3:7C:07:0A:AA:9D:30:88:AA:3A:7F:E7:61:42:2D
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019FA1BC1FD9576A49EC474081BDC82A322D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 1087
Signing time: Mon 27 Jul 2026 04:01:28 +0000
Manifest this update: Mon 27 Jul 2026 04:01:28 +0000
Manifest next update: Tue 28 Jul 2026 04:01:28 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: JYl5OzwPtGgwUUifEW4Bvkp54Nvi+IiQwAS+x5sMnSA=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bc:1f:d9:57:6a:49:ec:47:40:81:bd:c8:2a:32:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Jul 27 04:01:28 2026 GMT
Not After : Jul 28 04:01:28 2026 GMT
Subject: CN=55714ea921f37c070aaa9d3088aa3a7fe761422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:b5:e8:1e:dd:06:2a:33:c4:d5:f8:b6:23:
4d:bb:92:25:6c:10:df:11:f2:cd:0c:99:67:c5:8d:
1a:d6:51:73:25:cd:ab:69:d9:9f:44:ba:70:37:f3:
e1:97:92:62:c9:f1:bb:75:42:11:f8:0f:32:00:b2:
4e:54:b8:f4:2b:08:a7:3e:02:6b:27:b4:e3:02:0e:
5c:fb:a7:fb:fb:5e:ca:e2:88:fc:9b:cb:e4:11:02:
d1:67:dd:d4:c2:cd:1c:62:77:76:19:3c:42:ba:2c:
bd:2d:b2:82:08:ec:33:c2:5b:1c:ec:d1:09:01:8f:
d7:7f:7e:dc:f6:b2:5d:01:6f:3f:7e:5d:ea:3c:35:
12:eb:38:a7:9d:98:ba:90:39:27:4c:98:b7:e4:26:
c9:d7:bd:28:60:91:89:dd:83:e5:42:ea:57:9c:b6:
51:e0:c9:5d:5f:d7:8b:a1:a0:6b:62:d8:5c:e5:26:
56:a0:9c:eb:4c:84:92:4f:f0:e6:01:9c:53:41:80:
55:74:b7:b6:d1:e4:c4:b6:11:88:04:68:c8:3f:ff:
2a:38:a0:b5:9b:54:fa:f6:ca:7c:f9:06:29:80:c5:
4f:88:21:9a:fd:2b:5f:70:e7:e7:0b:a5:43:59:37:
ff:25:3b:47:11:f2:27:89:2d:17:6f:9d:60:16:98:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:71:4E:A9:21:F3:7C:07:0A:AA:9D:30:88:AA:3A:7F:E7:61:42:2D
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:0d:4a:75:7c:e0:76:b8:af:38:c2:cb:b7:09:44:f0:9e:
26:63:ed:c5:f3:9a:8c:8f:c5:5c:94:c2:a2:44:be:03:2c:0e:
20:17:81:50:af:dc:0e:f3:00:24:20:3b:9d:72:53:49:e2:7d:
5e:b0:7c:09:f9:ef:97:e2:3c:76:d5:0c:cf:6c:81:9f:c1:24:
c5:18:c6:2a:08:fb:85:80:b0:78:36:cf:bb:f0:59:a1:0a:e9:
c8:50:99:36:40:f3:08:b7:d3:37:ea:58:ff:75:83:8c:56:2d:
75:3b:b8:26:e2:91:b7:67:9f:b2:a6:eb:73:e8:31:bd:c1:5a:
29:a5:eb:24:1b:9b:8d:03:95:a0:f6:4b:cc:65:dd:d5:57:03:
2f:05:36:be:c9:f9:c4:15:99:15:a1:64:f9:a8:53:6c:94:6c:
ae:fb:52:b5:d3:3a:96:f0:72:f9:f0:01:ad:40:dc:60:e4:94:
86:e9:35:be:6e:47:37:b2:3d:59:83:a8:91:04:38:ad:3a:7b:
75:e9:9b:32:45:c6:81:70:79:f1:c5:45:b5:54:48:e8:b5:25:
f9:72:50:db:40:34:48:56:b2:46:8b:35:cf:ab:92:68:d6:55:
9d:f2:cc:98:52:b1:5b:94:02:e5:b8:e9:5e:06:ca:b2:e7:fb:
8a:17:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:57:09 2026 by rpki-client