Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: XpRXxHw1Rn/uKrjkqXYoJHtPl+cH+ESqrHikOf/3idA=
Subject key identifier: 72:B5:52:3A:6B:43:24:B4:D0:58:B7:2D:2D:80:41:F9:8D:34:12:2A
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 019FA229559336D80FC9B6AD8B9E987D710E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 19D5
Signing time: Mon 27 Jul 2026 06:00:45 +0000
Manifest this update: Mon 27 Jul 2026 06:00:45 +0000
Manifest next update: Tue 28 Jul 2026 06:00:45 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: 4ZLGuiBAwpqtdVdLQ9EnBHD28qX7vNp7HPx9f5Z1fPA=)
2: FtpP7jqiRqsaewteqUCm2wyEXLM.roa (hash: MK0f39W8byL9gsiBPX02BzYZlhRpLBc93Ceao7rPOjg=)
3: a7W4vQeQw0IYd5G5T60uWMaPKGs.roa (hash: tRWFQQI0YZC0M7nzgTovhHQ6mNNC+raBd4UmVBuNPyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:55:93:36:d8:0f:c9:b6:ad:8b:9e:98:7d:71:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Jul 27 06:00:45 2026 GMT
Not After : Jul 28 06:00:45 2026 GMT
Subject: CN=72b5523a6b4324b4d058b72d2d8041f98d34122a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:dd:69:ca:8e:70:99:ac:0b:47:fd:56:b0:
29:69:9d:ae:ed:42:f8:b6:8e:39:7d:9b:07:c0:45:
fb:1a:98:cc:c5:17:22:fb:80:05:93:2f:fe:a9:be:
b2:f7:82:d6:71:13:a8:47:bd:d0:52:87:84:6c:50:
6d:ea:d4:67:e0:3c:c7:6d:8d:aa:37:8d:33:fa:cb:
f6:7c:77:08:f6:3c:bc:f3:bb:50:ac:33:95:c1:f0:
a9:59:34:1b:e3:f6:14:02:2b:f5:e6:15:2c:24:93:
7b:ea:8f:1d:29:2f:a4:8c:e2:55:e0:57:18:30:cb:
6f:e4:20:2b:a0:f1:f3:07:58:41:ab:64:1f:a9:93:
92:fe:9b:6b:52:fb:3f:d6:24:47:af:38:b0:63:8b:
4d:02:c6:c4:4d:4a:72:9e:f6:e1:34:26:1b:62:31:
7b:f3:88:9a:10:a0:a1:1c:bf:78:33:c9:32:76:c2:
06:9b:66:7b:8e:38:89:51:5e:f4:72:50:fb:0d:69:
53:47:21:39:84:24:67:e0:ba:31:a1:ec:68:4f:0f:
e3:16:cb:7f:62:17:f0:78:8d:01:12:50:79:e1:0a:
94:0b:69:64:ff:8e:de:d0:45:cc:98:23:97:03:f7:
51:4a:8e:7c:59:a3:ed:78:83:bf:f3:d0:a4:ff:f7:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B5:52:3A:6B:43:24:B4:D0:58:B7:2D:2D:80:41:F9:8D:34:12:2A
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:25:1b:ca:0a:b1:05:37:62:a1:5c:1d:9b:9a:0d:f6:0a:9a:
8a:df:ae:59:84:24:8d:2f:94:05:eb:9b:ca:f4:d8:5b:a0:54:
86:cd:c5:59:a9:56:24:78:24:3d:d7:71:89:a7:4a:c2:f5:fe:
d6:80:cf:6f:a6:7e:3b:9e:cb:04:08:5a:ca:af:24:2c:03:96:
48:24:a9:6f:84:c7:d7:c3:e7:74:34:ac:80:6c:a1:76:c5:05:
39:f4:37:9a:80:74:3c:5b:7a:4a:06:d9:65:00:39:4b:a9:c4:
1f:5d:f5:3a:91:be:bb:0d:33:33:81:b1:40:27:0e:63:36:d7:
43:04:84:0d:df:41:61:2a:37:3d:d2:bf:51:bf:e1:b5:96:dc:
fd:2c:72:db:3b:a7:00:7a:7a:8d:8c:00:66:f3:2f:66:3e:d7:
f6:3f:12:3c:99:e3:af:6c:ae:e9:e3:c8:9b:73:75:ce:86:5f:
f2:b4:77:7b:42:bf:66:e2:ff:2b:5b:1d:47:df:ae:fa:2a:dd:
0b:d7:50:92:c7:bc:80:1a:e3:f4:7d:86:45:94:4d:7a:88:81:
c6:13:cb:84:7d:e5:3c:eb:f6:85:4e:d9:7f:d6:e3:1a:96:57:
1b:37:73:76:26:3b:db:cb:34:71:96:e8:55:49:e6:24:eb:be:
57:7c:84:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:44:37 2026 by rpki-client