Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
File: 4fLKlRgjMUpfTRCmangiOY-4iWs.mft (raw, json)
Hash identifier: tnrA+uclWIdKni+w3jqk/2UuXwXLNfNNdwPP/tOwLF8=
Subject key identifier: EF:18:D7:92:6A:94:A7:B1:DD:07:90:DF:5E:CE:82:E5:EA:53:E0:B6
Authority key identifier: E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
Certificate issuer: /CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Certificate serial: 01A000256CC321530BBE4E7D0DE063B0D2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 12:00:47 +0000
Manifest this update: Fri 14 Aug 2026 12:00:47 +0000
Manifest next update: Sat 15 Aug 2026 12:00:47 +0000
Files and hashes: 1: 4fLKlRgjMUpfTRCmangiOY-4iWs.crl (hash: Om1VBwZZ2fmjGXGQqokqBzEiRto/ZzMr5jTcAP5Zaig=)
2: okhIel7-mR-D4RUD3Tg3EKpzZno.roa (hash: GWUAmBhhQxX6j2A9GGPqihcMKfVBm5Guwxwe7RxHnj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:6c:c3:21:53:0b:be:4e:7d:0d:e0:63:b0:d2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f2ca951823314a5f4d10a66a7822398fb8896b
Validity
Not Before: Aug 14 12:00:47 2026 GMT
Not After : Aug 15 12:00:47 2026 GMT
Subject: CN=ef18d7926a94a7b1dd0790df5ece82e5ea53e0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:e5:f0:2b:1d:4b:fb:51:d5:cf:7a:f4:89:
bb:eb:1f:ac:44:9c:08:ca:3b:a3:7e:b9:e7:c8:c8:
c5:98:4e:b4:e5:cf:27:bf:f9:66:c1:08:65:50:22:
84:64:8f:94:14:c8:07:f9:bc:f1:d8:d3:1e:b7:42:
cf:74:6b:85:ef:ce:21:91:a3:65:f6:b5:fd:93:c0:
82:17:d9:70:bf:95:f2:ec:74:de:69:9a:70:56:16:
0c:23:a9:10:ce:18:0e:fd:a8:95:a1:3a:94:c2:d3:
cd:4e:94:52:70:5d:47:42:ad:5b:de:4f:44:b5:fc:
28:40:81:91:1a:45:16:46:8e:7f:cd:01:7d:3d:29:
c3:76:50:25:1c:26:ac:d9:ff:f8:29:ed:b3:90:82:
83:18:66:a7:6c:8c:b6:79:55:d2:f8:19:cd:74:9f:
e7:5d:0e:7c:79:0b:0d:0a:99:0e:70:df:aa:8c:eb:
e3:62:25:9f:e1:c3:8e:95:27:cc:94:be:45:fd:5d:
58:32:63:75:a7:4d:ad:4c:44:dd:d8:4d:0d:fd:82:
a1:d7:5b:2d:0b:ac:51:72:11:3b:de:a3:6b:de:f0:
19:d4:86:3e:ac:10:fb:a4:14:d0:08:e3:2c:97:13:
b1:6a:4b:2d:44:92:93:df:03:bb:ff:a4:cf:49:20:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:D7:92:6A:94:A7:B1:DD:07:90:DF:5E:CE:82:E5:EA:53:E0:B6
X509v3 Authority Key Identifier:
keyid:E1:F2:CA:95:18:23:31:4A:5F:4D:10:A6:6A:78:22:39:8F:B8:89:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fLKlRgjMUpfTRCmangiOY-4iWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4f69aa-213a-497b-b059-d2884a19be0a/1/4fLKlRgjMUpfTRCmangiOY-4iWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:81:ed:61:d4:74:a6:85:18:3b:8d:1b:92:27:b7:31:2b:cf:
4c:b9:c9:a4:98:c9:3e:de:4e:d4:5a:6a:83:d3:a6:16:cf:33:
4c:d5:0f:15:1e:37:b3:d9:ba:fd:88:c4:af:c5:26:9c:6e:b4:
26:ab:94:65:75:98:35:29:0d:67:67:cf:77:d7:2a:dc:85:ee:
41:7d:c6:ce:a2:9c:3b:52:30:b6:88:ab:87:8b:67:81:25:5c:
ec:17:45:92:01:8f:1b:4f:a2:e7:50:8d:b4:44:34:67:e0:b3:
32:e5:54:2a:32:00:b4:8f:7a:96:1b:89:12:be:9f:e0:81:f3:
80:d4:0a:7c:87:40:1d:dc:c6:93:79:94:ee:c9:2b:32:56:6e:
f7:79:22:b4:3f:1d:d9:6d:30:39:80:d5:23:4d:65:04:35:aa:
9d:06:c4:15:f8:c0:96:46:0b:f9:04:7c:37:66:37:4d:3d:e3:
f7:4d:b8:ad:d8:41:89:39:8a:1e:7b:22:4d:1f:2a:71:90:4f:
a1:61:02:d1:81:0c:39:5c:84:35:9b:25:3a:63:66:7e:ad:ed:
28:c7:e0:df:35:8c:9b:3b:4b:ec:63:74:96:2e:12:3b:c6:f1:
e3:79:ff:df:f1:7e:05:49:14:11:18:74:33:17:2e:f0:18:ed:
0d:24:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:37 2026 by rpki-client