Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
File: 4nHbgOZwKYw5jUhSzsWPhcZw77A.mft (raw, json)
Hash identifier: v/QyQ9jH9/Fu/kXIuGbT2HmnIgFdQTTM3Gk0BTw2akc=
Subject key identifier: 81:04:6B:72:BC:B2:84:C4:B8:D0:A9:B6:D8:7A:20:6F:11:2D:B4:EA
Authority key identifier: E2:71:DB:80:E6:70:29:8C:39:8D:48:52:CE:C5:8F:85:C6:70:EF:B0
Certificate issuer: /CN=e271db80e670298c398d4852cec58f85c670efb0
Certificate serial: 019FD6F33BA0C3C23FFB4146724EEB451612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
Manifest number: 64
Signing time: Thu 06 Aug 2026 12:01:32 +0000
Manifest this update: Thu 06 Aug 2026 12:01:32 +0000
Manifest next update: Fri 07 Aug 2026 12:01:32 +0000
Files and hashes: 1: 4nHbgOZwKYw5jUhSzsWPhcZw77A.crl (hash: c5ZY7w2kcvwadQKwg17hW9bkFHPo+Nc7jExiAOpmYH4=)
2: ZM__6ZrfQ4R-HkxAG3J8qUNVltU.roa (hash: liqMP4aaz7aIvcCZqU393aEcnVlxYIM+DKJpFlpZRtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 12:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:f3:3b:a0:c3:c2:3f:fb:41:46:72:4e:eb:45:16:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e271db80e670298c398d4852cec58f85c670efb0
Validity
Not Before: Aug 6 12:01:32 2026 GMT
Not After : Aug 7 12:01:32 2026 GMT
Subject: CN=81046b72bcb284c4b8d0a9b6d87a206f112db4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:a4:35:73:13:4f:ff:69:88:6a:13:6a:8c:
c1:14:89:80:63:28:02:33:0e:80:bb:b5:62:af:1c:
f7:38:15:15:87:c5:f1:4f:f7:e9:cb:4a:85:f3:ac:
a2:41:b4:7d:fc:f3:f3:54:45:65:0f:44:52:7f:49:
23:5e:3f:97:41:ce:20:51:58:6c:0e:c1:39:c6:ab:
60:23:19:68:4d:e6:aa:3f:81:bf:c2:2a:d6:d8:46:
81:57:2e:0d:8f:85:f8:4b:d1:c5:2f:df:7d:ac:41:
7e:a5:80:23:83:32:3b:ac:a3:fe:ad:69:74:38:9c:
ff:b1:b8:df:9b:af:76:28:e9:c7:8b:9c:60:64:3c:
79:56:19:ec:8b:62:74:e7:e4:16:0f:62:dd:9f:9b:
46:dd:f1:3e:b5:89:b5:8c:22:5a:0d:1c:b9:4a:e8:
c4:a3:9f:3f:39:81:71:95:c8:83:ee:42:d4:76:ab:
8c:a5:f4:b6:fb:93:65:cd:e1:ba:88:76:f1:70:46:
b9:cc:6c:13:b0:2c:9d:5c:a6:61:92:6a:67:2c:97:
6b:38:e5:dd:a0:71:86:19:ec:f2:b2:20:22:0a:c7:
e9:12:68:ce:16:ec:bc:e7:09:af:31:a0:25:19:da:
a1:ab:90:28:af:4d:56:aa:02:82:74:58:d8:b9:f5:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:6B:72:BC:B2:84:C4:B8:D0:A9:B6:D8:7A:20:6F:11:2D:B4:EA
X509v3 Authority Key Identifier:
keyid:E2:71:DB:80:E6:70:29:8C:39:8D:48:52:CE:C5:8F:85:C6:70:EF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4nHbgOZwKYw5jUhSzsWPhcZw77A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0f3a87-5ea1-4671-90b7-ae1759916df0/1/4nHbgOZwKYw5jUhSzsWPhcZw77A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:77:70:d4:ba:44:9c:d8:3b:fa:b7:08:a3:7a:4f:be:67:52:
4a:64:fd:e6:af:75:a0:9c:ca:3b:a4:71:3e:3b:90:9b:17:46:
9c:a4:21:d2:02:38:72:4c:3d:94:bd:7c:04:69:12:99:88:f4:
90:52:a5:a8:57:db:c6:e0:64:86:f2:69:bd:42:d7:fb:b3:f6:
e1:38:af:87:02:f0:8d:34:1b:7b:60:e0:52:3c:13:7c:bb:6d:
aa:4d:6b:1a:ff:2c:0c:77:87:2e:a0:50:b6:5a:64:70:25:2a:
6e:33:9f:5d:83:be:62:7d:c9:76:09:74:ec:d4:63:bc:a8:2b:
ef:14:50:57:5e:96:8a:63:68:1d:a1:65:6a:0e:61:a7:ab:9c:
a0:a6:b2:f0:83:99:5f:81:d1:3f:b1:14:12:86:4a:47:4b:db:
6c:19:8d:77:69:6a:53:44:37:36:b4:b6:87:ce:2c:c7:68:01:
e5:38:6c:14:e1:b7:4b:c1:f3:09:b2:00:f7:fe:9b:09:69:fb:
e2:82:33:c1:b5:13:a0:60:15:c3:87:1e:79:d1:f2:4e:ec:03:
58:71:a2:6f:e4:62:da:10:fc:1c:2d:8c:2b:67:0a:0c:72:c2:
dc:71:66:d1:4b:17:03:09:02:76:7b:b7:fe:6b:26:a9:3c:26:
b7:5f:a0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 18:49:49 2026 by rpki-client