Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier: xRaUFBdioPc3DGvAlXgL5AItFHXlEprwimlKEs4py5g=
Subject key identifier: BD:F7:8E:AA:2C:82:33:27:55:3B:F8:7D:7D:2D:E1:83:E5:03:0A:96
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 019FA3A97DE383E56878447FBBA637DA379B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number: 1023
Signing time: Mon 27 Jul 2026 13:00:21 +0000
Manifest this update: Mon 27 Jul 2026 13:00:21 +0000
Manifest next update: Tue 28 Jul 2026 13:00:21 +0000
Files and hashes: 1: 0okF-0SC05COeO8yZcXV41DKYTQ.roa (hash: 84QdZnJ3IbXKy/3dxIJgvDtuCv1JRPJqt/K+MUPi0mI=)
2: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: jRFud+K7aFRllUv85CX3Xg55MtauNfUz4hOopSje0Mk=)
3: FR-mBIRRF77kp9f_A_tdLCi7jhI.roa (hash: ls0AadaeNbnlTalpbJupO/oWIdL0LohHfGz3dRZulFc=)
4: kJytGYOElfqrC3DHKmoh96BhevM.roa (hash: /mTOzryyb1u7CjMFfOIX5gO5vlkkJlQ566zrAJlL2zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:7d:e3:83:e5:68:78:44:7f:bb:a6:37:da:37:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Jul 27 13:00:21 2026 GMT
Not After : Jul 28 13:00:21 2026 GMT
Subject: CN=bdf78eaa2c823327553bf87d7d2de183e5030a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:62:0d:23:51:a9:f1:5b:63:f4:d9:f3:de:
e4:eb:d7:62:25:66:1f:23:24:a7:73:c1:9e:ec:2d:
b3:ef:40:53:59:99:67:50:d1:cb:ca:5d:34:17:ef:
93:cb:2a:86:99:25:51:44:18:a1:3e:21:2b:35:a5:
0b:da:89:33:dd:3b:12:de:ad:43:77:62:3b:7f:ed:
25:a2:76:e6:f8:57:a5:55:28:f6:b2:60:80:a7:13:
f4:d9:2d:ec:5b:14:20:36:7d:32:51:70:86:9f:42:
96:34:76:ff:38:df:dd:7e:01:50:0a:d1:63:5f:16:
80:ef:3c:fe:81:5a:c4:7f:ee:a0:a7:7e:22:4c:55:
85:ec:fa:47:b5:88:2d:c0:ba:f6:e7:0a:5d:8b:56:
b9:c2:46:89:10:d3:11:bf:81:cb:6b:09:b4:e0:7e:
c3:50:14:9a:53:78:63:f9:d1:54:15:4b:30:95:4e:
a2:0e:9c:75:fd:89:45:33:21:a6:e3:e0:86:a7:3a:
a0:15:3d:a7:5f:0a:f2:1a:63:1c:7e:b6:17:96:a5:
92:11:95:06:7d:70:36:0d:e9:0a:cc:ac:c0:d4:13:
5f:de:aa:73:e6:73:09:dd:80:5c:91:72:2b:4e:75:
48:6e:6c:ab:08:42:ad:9d:01:61:14:81:b6:35:ab:
77:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F7:8E:AA:2C:82:33:27:55:3B:F8:7D:7D:2D:E1:83:E5:03:0A:96
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c2:c4:c4:58:08:37:cd:0d:7e:7e:c2:20:88:c9:00:71:76:
65:5e:68:02:77:83:02:0d:25:dd:57:12:ff:68:5d:17:51:87:
d0:76:44:22:1f:f0:b9:ab:98:d0:4f:26:1c:a8:1a:ba:fe:36:
96:a4:8d:78:17:43:0a:e9:db:b9:5a:5b:9c:0f:84:e8:5d:5e:
24:34:54:7f:14:5e:17:f0:4a:e1:47:d8:d6:c4:c9:d3:e4:96:
92:01:51:d2:ea:0f:0e:ca:8b:4e:48:7a:e3:20:e9:0a:56:9b:
fd:61:03:0e:19:16:a8:85:34:cf:88:89:de:e6:5e:8d:57:69:
f2:08:2e:76:4a:55:53:47:a7:83:d0:bc:d6:62:d8:83:69:12:
d5:3c:92:3a:bd:48:c9:80:a6:86:48:06:ae:fb:06:d7:c8:b2:
38:9b:60:0e:13:eb:79:b9:31:cc:de:59:58:a9:34:8a:c1:9a:
76:54:6c:3b:07:5f:8d:98:04:8a:36:45:0a:72:8c:47:7f:a1:
e3:ac:fa:c8:3b:c8:a5:93:fa:ef:1a:78:eb:a8:44:de:9c:7c:
02:04:ef:5e:49:60:ce:2e:c4:b0:39:af:f9:1c:05:e6:d3:62:
e9:23:02:66:76:69:06:c8:6f:f4:54:d0:e0:a7:5f:6a:27:eb:
49:a6:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:21:06 2026 by rpki-client