Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File: 4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier: u7GZoZK0wy6HS8v40KUuOZQswCokDde6GYlyb9nsW+Q=
Subject key identifier: 01:BB:90:E5:F9:A9:42:38:E6:78:C1:92:44:13:FC:01:09:7F:EF:5B
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial: 019FA2CE647E600349FA3E3935A9B0911CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 09:01:02 +0000
Manifest this update: Mon 27 Jul 2026 09:01:02 +0000
Manifest next update: Tue 28 Jul 2026 09:01:02 +0000
Files and hashes: 1: 0Ie8zJ3vobcDR9ujGlZqgjvHUAY.roa (hash: FJlCbonLD9dF4g0EKnBAz84rCEY7Zmpte8ZXE9ooZuo=)
2: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: Bk0m7r5a5xskNTn15S2Qr74aNYSDmJZflmBOGafS6Ao=)
3: CwpxvpCjkjiVHLiVbQuAWgtQ54o.roa (hash: A9xtP47/NQPXNxopvGJvQs5ptoCe1VvA5rj1UqAT7fA=)
4: jl2G_Du7vY1XFmIxGhvnvFEWvcE.roa (hash: RFk3rcVrZLSmQvBNuxyGLTQ7ZkOHCUZDzMm3yZpbe5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:64:7e:60:03:49:fa:3e:39:35:a9:b0:91:1c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Validity
Not Before: Jul 27 09:01:02 2026 GMT
Not After : Jul 28 09:01:02 2026 GMT
Subject: CN=01bb90e5f9a94238e678c1924413fc01097fef5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:fb:b9:29:26:62:3e:45:f9:12:79:cc:e1:
1c:95:94:10:85:7a:5d:65:cf:3c:88:99:5c:ac:3f:
f3:d8:26:06:ac:d7:ca:6f:d3:af:6f:ef:be:9a:a2:
85:96:21:80:28:2e:9c:6a:a9:ea:d2:f7:df:47:5b:
48:9b:86:dc:ff:fb:65:d7:c1:ef:d4:2a:9a:f8:a8:
f6:88:f4:8e:03:ee:3b:0b:f5:ff:38:09:55:5e:7b:
2d:eb:09:8b:2e:03:b7:f0:33:32:07:1b:70:58:cc:
7a:30:fd:a7:f9:4d:af:b5:0d:8e:64:40:8f:2f:ff:
28:1e:13:cc:8c:1a:8c:6d:38:f5:a2:6c:15:f6:4b:
77:e8:74:86:d5:96:7b:ff:8a:ea:a9:8f:b2:2c:71:
15:38:b2:80:8c:c1:6b:3a:8b:07:0f:a2:49:10:e5:
9d:e9:5c:db:3b:51:10:0c:72:3f:9b:4e:e8:8e:c6:
3c:6d:78:82:fe:b8:79:58:ca:f3:9f:5e:d9:92:34:
09:3b:df:bc:1b:62:5d:44:2a:eb:d1:1b:00:2c:d0:
1c:42:3b:9f:3b:4b:55:4b:85:d2:38:61:3f:b5:f0:
0e:e3:35:ca:1c:94:e5:a6:95:3d:d0:76:58:3d:14:
67:f1:2a:82:29:fe:ec:06:0f:40:cc:28:22:9d:8a:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:90:E5:F9:A9:42:38:E6:78:C1:92:44:13:FC:01:09:7F:EF:5B
X509v3 Authority Key Identifier:
keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:62:d7:76:c0:71:a5:00:01:7c:e9:20:30:ef:e3:69:cb:5c:
6c:9b:08:fd:23:98:ae:69:1f:5b:fe:b9:34:ce:85:c0:20:4f:
d7:62:9a:04:2f:fd:4f:f8:cb:e5:ff:63:13:c6:64:af:93:7a:
5e:9d:42:db:be:1e:7b:fc:46:4d:72:c2:c0:dc:6d:3d:b1:18:
8f:a4:6e:8f:26:38:b1:78:ae:bd:db:8b:f7:57:59:24:53:75:
ca:93:a0:b8:b1:df:17:44:a2:8e:53:17:f8:b0:ee:5a:3b:41:
c8:09:27:f7:e7:06:c1:86:60:00:6e:2c:4f:62:1e:cf:3e:ee:
6b:96:d6:b6:bf:2a:11:34:d5:a6:f1:b8:69:85:9b:01:64:fe:
04:e6:4f:45:f3:80:2b:ca:4d:5e:18:30:9b:23:99:b6:ed:8f:
dc:23:7e:44:80:4c:f1:d8:4b:97:f9:8e:79:30:9a:a7:aa:06:
8a:be:95:0f:0a:c5:5f:8f:71:30:eb:cb:04:73:ba:78:7f:52:
89:f9:ac:03:21:52:2f:fb:66:42:f8:22:49:f7:17:05:d6:3a:
77:78:2a:ba:88:99:97:23:81:a3:50:8c:71:8d:99:c2:ba:aa:
9f:84:37:e0:5a:11:12:bf:4d:f7:34:fa:e4:72:59:0e:af:eb:
8d:25:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:02:24 2026 by rpki-client