Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: ZnSSjpGEia/nf0NRT7Ai0MBDxJEA81PlFuvLUorGjuw=
Subject key identifier: 86:BD:C5:A0:D3:EF:61:20:9D:97:F6:1F:B3:6E:7B:59:0E:D0:29:D4
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019FA0E09B27E057A71E64CBECA83E4F46F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 1721
Signing time: Mon 27 Jul 2026 00:01:42 +0000
Manifest this update: Mon 27 Jul 2026 00:01:42 +0000
Manifest next update: Tue 28 Jul 2026 00:01:42 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: A91TlGPjg7ioXzlcLj7dIdaKCNKKAj14NKaXXziwKHA=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:9b:27:e0:57:a7:1e:64:cb:ec:a8:3e:4f:46:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jul 27 00:01:42 2026 GMT
Not After : Jul 28 00:01:42 2026 GMT
Subject: CN=86bdc5a0d3ef61209d97f61fb36e7b590ed029d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:9e:9f:c4:3e:1e:bb:d6:f5:e2:04:e1:4d:
96:f3:24:2a:1a:a0:b3:20:15:0e:77:84:74:69:21:
05:50:a0:64:4a:dd:5c:4a:91:0d:67:4c:b4:19:1d:
54:90:48:6d:cd:cb:2b:c6:6b:3a:53:9e:44:7e:63:
7b:9c:66:87:1f:19:a6:f0:1c:34:5f:fd:11:79:7f:
55:39:40:da:8d:81:7d:1b:5f:ce:67:35:77:5b:b7:
b7:e9:cd:51:79:89:f8:b6:6c:07:23:91:9b:3b:7a:
7b:52:b1:f2:90:3a:3c:b9:8d:5a:f5:8e:58:45:a5:
5c:35:88:4d:36:0e:63:26:f3:3d:73:0f:2a:e7:11:
f6:95:7f:08:56:f3:0f:30:49:5f:8d:c4:8a:ae:89:
6a:f1:b2:5c:97:22:3d:bf:5d:02:3e:aa:b9:26:70:
5f:7b:66:b5:61:79:9a:b8:2b:aa:5b:4f:70:2c:a7:
aa:9c:c3:56:ab:d0:61:2b:cc:2f:59:fa:63:22:4e:
4b:d4:3a:dc:5c:80:fa:e7:c1:e0:62:78:86:5a:6a:
5f:0e:20:cb:2b:ad:91:8f:95:4e:77:51:33:b7:70:
28:ea:87:28:fe:36:cc:c6:87:60:39:11:6d:0d:3c:
b2:2a:19:48:e5:ba:5d:0d:7b:2d:5d:80:0f:a0:c3:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:C5:A0:D3:EF:61:20:9D:97:F6:1F:B3:6E:7B:59:0E:D0:29:D4
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:aa:4d:a7:3c:bf:b5:db:9c:5b:1b:f0:75:b9:70:b5:c9:b2:
77:b5:a4:84:d3:0d:98:c2:e0:c5:88:90:ca:9b:a1:b1:44:8d:
c1:29:d4:da:6c:ba:d4:5f:41:9b:e6:5a:c6:e6:60:c1:bf:42:
8c:33:51:d2:67:43:77:04:4b:8d:28:89:94:cf:ec:f2:f4:61:
3c:f5:14:4b:aa:83:65:d0:2e:15:cb:01:de:13:24:02:c1:14:
93:0a:67:37:cc:0a:30:dc:d1:df:c6:21:5e:6b:43:39:75:fd:
d6:49:5c:aa:f7:16:ce:7c:ac:44:8a:48:44:e3:48:46:5b:7a:
8f:6a:ff:16:53:54:eb:98:b2:5f:7b:df:c9:43:bc:aa:25:89:
3e:78:f4:bb:03:d7:06:77:c4:bf:27:94:7d:c5:10:00:3a:1d:
33:f5:39:64:3b:5d:42:45:0b:4f:06:fe:11:b0:8b:c8:39:de:
a0:dd:21:8e:1e:a5:1b:cf:e8:f6:ad:7e:82:56:5c:93:ce:b2:
ab:7f:62:94:5d:f6:00:f7:17:e8:28:e9:43:73:a6:ac:49:89:
c0:f6:08:af:a0:00:04:a3:9f:69:42:58:40:19:d4:ab:b7:c6:
02:4f:20:c8:cf:4a:2d:ca:76:bc:28:78:90:07:00:7d:78:67:
f1:d0:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:30 2026 by rpki-client