Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: //K8qZLQGqiMMIs6VYDx38w4HbHBrDCiUdJPxBNnh28=
Subject key identifier: 6F:02:A8:CF:7F:0E:90:2F:CF:06:9F:8B:4C:5A:6A:A6:9D:78:D8:59
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 01A000934980CF270A87DE2419D9D356E0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 0729
Signing time: Fri 14 Aug 2026 14:00:47 +0000
Manifest this update: Fri 14 Aug 2026 14:00:47 +0000
Manifest next update: Sat 15 Aug 2026 14:00:47 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: 5xGt5c8LAma0lkry1tqQDnobZ18TcbrkDCQ/Gnc7L0s=)
2: JqYIovUOhpMaXbCswunFuuxrXZA.roa (hash: pzyg9bet0YZqCdKyQjx/ZoPH6pBnBtJrgE7rSpscrOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:49:80:cf:27:0a:87:de:24:19:d9:d3:56:e0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Aug 14 14:00:47 2026 GMT
Not After : Aug 15 14:00:47 2026 GMT
Subject: CN=6f02a8cf7f0e902fcf069f8b4c5a6aa69d78d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ef:63:ae:fd:60:cd:43:20:70:df:ca:6b:40:
b5:96:e0:ef:20:f4:0e:7d:4e:d0:ff:a2:d4:34:cd:
39:96:17:39:7f:34:8d:93:46:36:27:47:61:8e:37:
7a:e2:d1:14:9e:c6:04:83:6c:a2:73:92:4b:19:be:
3b:e9:3f:df:aa:c0:8d:c7:ea:0c:f7:46:62:b0:37:
57:15:71:66:c0:ee:4b:60:05:53:e4:e8:88:dd:9c:
9c:e5:ac:e0:2c:87:b1:2a:21:fb:f6:69:a5:93:e0:
ee:0c:4d:02:6d:cc:66:a4:67:58:0b:bd:76:45:f8:
74:d8:51:36:84:4d:e7:d7:52:0a:bb:5f:56:2c:fa:
be:99:cf:d2:1b:7c:2a:ac:59:d5:03:ed:3b:73:5e:
26:71:0f:51:dc:88:79:9d:fe:92:08:91:1f:87:9d:
25:60:4c:4c:44:27:ce:90:46:36:16:a9:6a:fb:97:
45:97:ae:bf:ae:d8:9e:4a:03:02:05:04:03:65:f0:
aa:f3:08:d9:49:1b:ca:8b:cd:48:3e:10:a3:98:20:
b0:17:2c:99:13:3d:8c:c1:a2:7a:a3:4d:7c:24:aa:
97:f6:3f:d9:ca:d8:b9:76:35:46:ac:d2:83:84:88:
b1:d7:59:74:4b:0f:ea:4c:04:ea:77:b7:ab:c6:48:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:02:A8:CF:7F:0E:90:2F:CF:06:9F:8B:4C:5A:6A:A6:9D:78:D8:59
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:dc:4c:17:a0:44:2e:65:57:e6:a0:9f:79:12:e8:0f:95:25:
e9:b3:df:77:af:91:a7:37:bb:9b:9f:dd:78:17:2f:4c:6d:6f:
d1:c4:1b:6f:10:3a:e5:a4:93:24:62:b9:ca:b1:44:37:3b:27:
03:99:c9:ba:e1:bf:e2:0e:18:aa:ab:bb:5b:f0:a0:3d:bf:7b:
2f:9d:01:15:38:d5:b0:4a:11:70:5a:cd:42:2f:3a:cd:3e:f8:
35:9f:82:90:f4:95:d0:08:e6:96:de:2e:63:0e:cb:54:43:7b:
f3:75:8b:ce:be:6b:51:f4:98:f2:dc:08:81:0a:47:f9:31:36:
95:ba:1b:29:b2:87:09:66:4d:16:5e:a1:7d:4c:dc:5d:4d:ae:
b4:2c:80:35:57:8d:28:ea:ca:93:a9:d8:37:88:4b:60:3a:12:
95:f9:d9:be:42:cf:24:0c:59:ff:ea:b6:a6:7d:3d:b5:5a:9b:
ab:6e:ed:27:44:a9:f2:55:55:3d:96:bf:eb:80:7f:ef:87:dc:
31:b5:d7:07:6f:83:fe:52:24:8a:47:d9:c8:3b:3f:a7:85:c4:
46:f4:59:65:77:18:da:0e:bf:58:58:6c:1e:f1:91:d3:8a:05:
a6:0d:99:30:c3:ba:05:73:f0:40:6e:5d:60:f9:f8:8f:9d:5d:
d0:90:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:02 2026 by rpki-client