Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: lrTHnuEz8DHGRP6mfSdDiL888/5KuRmgmBO73W+x91Y=
Subject key identifier: 07:BE:C6:74:16:1B:12:76:56:2D:42:25:3C:2B:CF:A9:7D:B6:C7:7D
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 019FAD884D26232BC6038F99D93F08135FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: 01AD
Signing time: Wed 29 Jul 2026 11:00:18 +0000
Manifest this update: Wed 29 Jul 2026 11:00:18 +0000
Manifest next update: Thu 30 Jul 2026 11:00:18 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: 9Aot0cw+xvHTUcavXgo0kFMKKljeOujya0DqQU2xUvs=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:4d:26:23:2b:c6:03:8f:99:d9:3f:08:13:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Jul 29 11:00:18 2026 GMT
Not After : Jul 30 11:00:18 2026 GMT
Subject: CN=07bec674161b1276562d42253c2bcfa97db6c77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:cd:da:c3:e6:06:08:20:40:91:d2:ed:2a:
25:32:8c:9d:b7:99:98:ab:71:6a:a1:88:34:64:9e:
41:8e:b4:17:01:70:b8:4a:b3:9e:77:cd:63:c4:0a:
5e:55:33:80:9a:26:3b:64:aa:18:18:a2:87:0a:e5:
b2:74:18:50:88:86:49:8d:c6:cf:e8:99:2b:fa:7e:
84:e6:1e:48:ae:e9:2b:f9:0c:b2:9b:ee:1d:49:c8:
d4:d1:da:b5:6b:5f:d9:4d:26:d4:b8:43:9d:a6:5c:
d8:c1:7e:4c:d9:f4:3b:cd:8d:2d:87:05:97:de:1b:
5a:1f:76:8e:9e:5b:5d:dd:9a:f0:f0:77:34:43:b7:
48:14:c3:a4:2e:31:d8:7c:d6:50:4e:11:40:e8:90:
6b:de:94:b7:40:c7:f1:2f:42:5c:17:d4:46:c4:fe:
8c:60:69:89:69:d0:c5:96:9d:4e:a6:e1:25:1e:ab:
c4:bf:ab:e2:ba:a0:6b:5e:c1:d1:f9:1c:16:c9:a6:
40:cb:89:b4:e6:05:92:f9:d5:a4:0b:61:c4:12:03:
9d:32:71:29:55:5a:4a:78:8f:91:48:cc:dc:ec:1b:
a5:61:79:e9:cf:d3:aa:c5:5e:3f:1e:6f:93:74:e7:
38:4d:f9:41:88:aa:e3:62:6d:9e:f9:d9:b9:07:7f:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BE:C6:74:16:1B:12:76:56:2D:42:25:3C:2B:CF:A9:7D:B6:C7:7D
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:56:c8:94:7c:3a:03:07:44:74:f0:6f:3c:49:d9:00:ed:c2:
7a:21:9e:a7:f4:75:26:ea:08:f7:03:fe:e4:e4:14:f2:fb:cc:
a9:d9:52:81:90:60:0d:e3:4a:96:d6:15:4d:a2:10:91:d3:85:
97:21:61:98:86:2d:68:b0:1e:d8:20:b9:01:f2:f9:57:65:0a:
fc:df:6d:d8:01:61:95:6f:dc:f2:d6:a2:5a:79:3e:c1:13:4b:
24:fb:4f:c8:40:e4:55:05:32:9d:ce:62:b9:20:c9:0a:a3:67:
c3:60:f5:ba:ec:af:ab:ce:be:88:58:56:fa:82:7b:28:6a:9a:
29:d0:2d:28:7a:20:96:e2:0d:21:46:52:bc:39:4a:a5:3b:26:
c6:b7:5a:5c:cd:4e:72:37:5c:4e:22:fc:fa:da:0f:54:26:e2:
8a:23:15:f0:59:35:78:1a:6c:e1:de:e9:e2:60:a5:66:21:a2:
30:01:57:87:11:07:ab:d0:ad:85:89:4d:e3:38:8c:ea:47:0d:
35:ff:c9:d1:de:3c:0a:d0:04:da:51:ae:d6:5b:68:21:9f:ce:
7a:fc:9b:18:0a:d5:b6:40:97:15:8b:9f:7c:bd:7d:c6:f7:06:
38:6c:10:d5:7a:43:e9:de:80:32:e1:2f:38:5a:f7:7d:2e:ba:
4e:c0:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:50:35 2026 by rpki-client