Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: vgi4OT/LvsdFosomzRqQq6OUafYjyUziwjF3+eDRVzg=
Subject key identifier: 49:1D:20:28:ED:D7:42:48:5C:FD:BE:B2:D5:CA:D4:3F:BB:15:07:67
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 01A0024AC52807E7CB43E02D37F99C29DD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0D39
Signing time: Fri 14 Aug 2026 22:00:49 +0000
Manifest this update: Fri 14 Aug 2026 22:00:49 +0000
Manifest next update: Sat 15 Aug 2026 22:00:49 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: V2szIBQZIY9KJJCXwJFuGvILRo2r0mJavuqir9/QvBQ=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:c5:28:07:e7:cb:43:e0:2d:37:f9:9c:29:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Aug 14 22:00:49 2026 GMT
Not After : Aug 15 22:00:49 2026 GMT
Subject: CN=491d2028edd742485cfdbeb2d5cad43fbb150767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:c6:4e:0a:14:0b:b0:13:3a:50:70:4d:49:
08:bc:6b:a4:88:e8:26:85:a0:df:8d:37:85:c9:8a:
ca:ac:31:9b:93:37:2d:3f:70:6a:d1:52:93:b5:57:
d8:d9:0c:9e:de:a9:b3:92:b2:7c:cf:ef:0e:a7:5a:
0a:16:fc:6d:95:44:0c:de:b7:7e:55:48:59:3b:da:
d9:17:9a:5d:10:3f:64:97:41:05:7a:47:59:cd:d9:
1a:1f:e5:ef:04:85:b5:59:c3:40:2b:98:5f:d8:d8:
ce:5a:9f:23:05:83:14:2c:40:11:25:70:38:c4:3d:
a2:8f:ad:ec:8d:46:ba:97:9d:22:cb:69:df:3c:c8:
90:7f:95:17:39:4c:0c:c2:cb:62:e3:9d:94:bb:72:
e2:74:da:f4:5e:3f:5f:7b:c6:cf:42:c5:86:09:3c:
78:b0:cf:8a:17:6a:1a:b1:cf:5d:00:23:32:9e:7f:
0e:8e:d8:23:d7:e4:8a:4a:8e:49:a9:6e:38:40:0e:
9b:06:d5:cf:86:53:ae:00:81:21:59:22:91:b3:8d:
52:9d:aa:f2:37:f0:2c:ea:02:9d:d0:8e:5a:9e:be:
66:b0:51:5e:b9:f9:fa:50:a0:1f:8e:6d:02:34:08:
ff:73:df:2b:bf:45:cc:35:84:eb:f5:79:03:ac:7f:
40:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1D:20:28:ED:D7:42:48:5C:FD:BE:B2:D5:CA:D4:3F:BB:15:07:67
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:68:a3:f3:bb:b8:a7:32:6b:d7:73:05:39:1e:48:e9:aa:84:
ab:63:0e:ca:15:c7:97:6a:78:4a:e8:4a:d4:ac:72:6d:8b:1e:
f8:4a:24:05:f8:d2:55:7e:87:6b:45:42:be:fc:16:01:28:9a:
1b:2b:4e:7d:46:6d:67:51:57:2c:86:b6:4e:3b:8e:d5:62:c9:
9b:bc:24:18:df:1e:72:50:2f:7a:07:8e:a9:48:db:89:89:3b:
f1:da:51:6b:bf:03:0f:c2:29:12:af:9a:9d:25:51:52:89:b5:
f9:a3:02:26:b8:13:1e:b2:f9:f0:4f:34:6d:cb:b5:2e:04:af:
d4:54:02:06:fe:b3:df:5a:ff:79:35:98:14:a9:db:bc:53:39:
ff:d7:d9:88:2e:8a:b3:87:3c:17:54:df:9a:83:c2:c2:e0:41:
49:32:18:7b:b6:ca:4a:ca:da:db:81:9f:8c:d0:60:1e:2d:33:
3d:f8:52:ba:b5:23:c1:df:b5:14:bc:86:cd:89:8a:a5:61:9a:
e8:0d:3f:4d:bc:43:02:73:89:b4:67:16:8f:26:28:ca:59:c4:
7e:9b:b7:9d:1f:eb:bf:cd:72:50:83:ec:23:40:46:52:5d:5e:
a7:c8:65:d6:0f:4b:47:e5:6b:ac:1d:e3:19:e7:c4:c4:9c:3e:
dd:20:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:34 2026 by rpki-client