Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: 8aCRVQFEuW2cCGoVF+VT8qfsyLQxU3EEEi63H2+ypVw=
Subject key identifier: 99:5D:AF:6A:21:88:18:0F:E3:E6:B3:D6:ED:AB:3E:F5:45:F2:FE:D0
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 019FA0A91760FBECF95BA9C724443FC16F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: 0173
Signing time: Sun 26 Jul 2026 23:01:03 +0000
Manifest this update: Sun 26 Jul 2026 23:01:03 +0000
Manifest next update: Mon 27 Jul 2026 23:01:03 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: 86ZuvNQbNTvWcwtTW88oQly+xl8+CbIaJbW9ZHl3npk=)
2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:17:60:fb:ec:f9:5b:a9:c7:24:44:3f:c1:6f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Jul 26 23:01:03 2026 GMT
Not After : Jul 27 23:01:03 2026 GMT
Subject: CN=995daf6a2188180fe3e6b3d6edab3ef545f2fed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:1f:60:75:56:ed:ef:38:5a:e9:55:24:00:
45:98:c7:0f:7f:1e:60:f8:ac:a6:43:5b:e3:d7:b6:
56:d4:21:60:be:c0:2c:a7:bd:b5:32:f8:71:d2:a0:
df:10:99:32:48:b2:31:ef:d6:c9:ca:73:b4:d8:93:
65:30:52:e0:53:a7:53:44:87:8a:df:69:a0:0b:06:
2d:4a:71:a8:3d:a8:82:7b:1a:a0:5d:bb:56:9d:b9:
d9:38:46:71:4b:5e:45:90:9e:93:77:49:f6:6d:27:
89:7c:dd:57:61:df:8e:0f:12:68:f3:af:99:5b:5f:
1e:b8:91:12:a5:0c:7d:38:0a:cf:0c:ce:c1:41:69:
05:0f:f1:8f:9a:40:39:f0:c8:f3:28:ff:a0:9b:24:
bd:4d:7a:2d:a9:92:38:ef:93:64:09:08:f8:84:9a:
e6:52:38:6e:01:27:6d:38:53:73:d4:50:35:d8:8c:
5d:15:73:aa:27:b1:7f:48:66:53:14:9e:ae:35:98:
9c:dd:53:59:b3:8b:35:76:57:54:82:73:13:8f:2f:
39:6c:04:91:a7:ac:03:2c:cd:b1:1b:55:95:0c:79:
7f:c9:72:55:af:6c:9f:46:c5:bd:72:3c:85:75:7b:
cd:34:3c:b4:56:de:f7:eb:08:59:2b:fe:9e:5c:11:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5D:AF:6A:21:88:18:0F:E3:E6:B3:D6:ED:AB:3E:F5:45:F2:FE:D0
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:76:0d:cc:06:65:53:e1:98:e7:c8:db:20:97:20:72:cb:65:
eb:45:02:c4:c3:a1:e7:15:0f:6b:bf:eb:9d:6e:61:79:39:cc:
8b:76:e1:b0:dd:61:ef:23:da:98:38:e7:93:02:f8:68:b9:03:
c3:d4:c3:bc:a2:6a:68:18:5c:80:85:d6:6e:2d:fe:11:ce:4b:
b4:c2:63:1c:5d:ac:2b:59:3a:c2:6f:f9:87:3b:5a:31:a7:72:
60:ec:04:28:2b:b2:62:52:52:93:bc:28:f4:df:2b:fb:e0:95:
35:2d:c4:2e:50:4c:87:88:7e:22:48:b8:90:e1:d7:58:65:54:
3f:2b:85:89:2b:9b:b4:37:39:1d:b6:4d:e7:29:43:c4:64:97:
cf:5c:6b:63:c9:38:1c:ac:ee:cf:7c:5f:7f:48:7d:16:3d:be:
55:60:03:5d:0b:31:56:0f:08:fd:c4:83:c1:24:36:17:20:6a:
ff:af:f2:03:0e:be:ab:1c:34:c6:34:71:da:10:92:e1:b9:fe:
d0:3b:a7:18:5f:19:b5:f5:77:3d:b0:3e:a9:3e:e6:0d:ab:04:
e8:2c:df:1b:6b:60:c4:ae:b8:51:1d:ca:3d:6e:4c:72:7b:c4:
86:1e:65:e2:52:d4:65:cc:be:f8:5a:e2:1b:95:2b:09:f5:6d:
16:2f:5f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:30:34 2026 by rpki-client