Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier: 4RooowaDWV8migUZoTTW1lNMBpeKAK9lxn0GIMz2Yd8=
Subject key identifier: 39:6E:11:A9:84:C3:5B:66:66:AE:BA:AF:46:97:F9:AA:14:C7:A7:E0
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 019FA1BBBBE5F576751C1EC1C811E83A3162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number: 1022
Signing time: Mon 27 Jul 2026 04:01:02 +0000
Manifest this update: Mon 27 Jul 2026 04:01:02 +0000
Manifest next update: Tue 28 Jul 2026 04:01:02 +0000
Files and hashes: 1: 0okF-0SC05COeO8yZcXV41DKYTQ.roa (hash: 84QdZnJ3IbXKy/3dxIJgvDtuCv1JRPJqt/K+MUPi0mI=)
2: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: J0hjqpYOmFiECBrC4z5hhMBXz3+rxgaLICpwJ/3hhZk=)
3: FR-mBIRRF77kp9f_A_tdLCi7jhI.roa (hash: ls0AadaeNbnlTalpbJupO/oWIdL0LohHfGz3dRZulFc=)
4: kJytGYOElfqrC3DHKmoh96BhevM.roa (hash: /mTOzryyb1u7CjMFfOIX5gO5vlkkJlQ566zrAJlL2zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:bb:e5:f5:76:75:1c:1e:c1:c8:11:e8:3a:31:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Jul 27 04:01:02 2026 GMT
Not After : Jul 28 04:01:02 2026 GMT
Subject: CN=396e11a984c35b6666aebaaf4697f9aa14c7a7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:6a:a1:ea:2a:54:db:61:89:5f:27:f5:23:
d2:40:64:92:ed:03:be:fd:1e:18:a6:e1:ec:88:48:
ba:5e:03:2b:e4:74:06:04:ba:52:e6:14:3d:ca:42:
1f:96:76:e7:49:96:f3:a9:9a:97:d5:c8:9c:1a:ce:
6c:7c:50:56:a4:8a:0c:ba:7c:20:d8:74:88:88:0c:
8e:10:cf:da:4c:5b:b5:96:2b:9f:e7:43:4e:68:0b:
34:a0:db:d8:23:74:ee:5c:d6:37:c4:0b:ab:f0:eb:
77:0b:8b:28:41:92:7b:30:d1:e3:22:d4:51:6e:aa:
e6:e3:6a:8e:65:59:45:01:0c:79:b6:f9:11:43:fa:
ff:b2:42:29:b7:a7:af:0f:8e:7e:dd:11:f7:a7:dd:
87:4f:94:fe:6f:9a:db:d9:eb:d0:1d:27:bf:69:de:
8c:ae:43:af:35:47:bb:66:c9:b1:18:cb:f6:47:7e:
b9:19:37:45:5f:47:6c:d6:52:9f:e6:ce:05:ec:0e:
61:83:72:4f:de:d3:fb:9c:cc:dc:1b:05:b6:a1:4d:
2f:93:51:6c:32:1c:eb:26:d5:22:67:8e:d1:e7:64:
ff:83:2a:19:53:55:ef:08:31:c3:19:f9:06:73:45:
01:5c:1f:89:0b:06:57:d8:b1:87:b7:59:d9:0d:6b:
0c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:11:A9:84:C3:5B:66:66:AE:BA:AF:46:97:F9:AA:14:C7:A7:E0
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:43:eb:47:34:ae:8f:d4:c3:d6:87:cb:04:fd:e0:6a:16:d6:
ae:17:03:3d:ac:b8:c5:02:57:f4:3b:f5:f1:d6:08:79:4b:0a:
7f:3a:34:56:3d:8d:0b:e1:c5:57:04:dc:0f:77:af:9d:6c:15:
b4:86:db:84:2d:2d:6a:30:b7:41:e8:a6:f4:6a:1d:05:8f:33:
b4:00:bb:de:75:fa:21:c7:63:4e:a7:d8:72:4c:39:28:67:71:
10:e1:e5:42:4a:f3:49:4d:25:b9:c2:9d:93:aa:f6:14:21:42:
e6:bb:d2:9b:dd:48:e8:77:10:06:1e:a1:23:11:2f:20:02:29:
87:09:d5:d6:c3:6b:3f:02:31:31:56:3b:5f:47:ba:44:40:fa:
19:8f:b4:78:98:f2:13:5b:80:fc:1d:4e:b0:66:f9:26:f7:c9:
8e:e7:52:50:5d:f3:50:ba:f3:7c:bb:b1:f6:d3:bf:9c:0d:5a:
fe:31:9e:a9:05:dd:57:85:0d:cb:70:10:6e:a1:ca:0c:70:89:
8e:db:62:fb:95:7d:88:3e:c3:48:9c:f6:51:04:d8:c2:e8:79:
59:b4:08:46:6a:79:e4:f8:37:da:8a:fb:01:4c:13:ab:0c:60:
87:c3:ab:fb:60:84:f4:d0:8b:bc:f3:1a:52:06:29:a1:14:54:
a5:46:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:09 2026 by rpki-client