Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: 4bevMhaT99BD3mXUmBzTO4k0CkK16fZwhN8jHBJuOzE=
Subject key identifier: 41:A7:55:FE:0B:C8:90:4B:6B:AA:9F:75:85:E5:FC:E0:A7:09:C4:95
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019FF86C8F6CD0DC12F5A15862B0B8A57788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 19FF
Signing time: Thu 13 Aug 2026 00:01:31 +0000
Manifest this update: Thu 13 Aug 2026 00:01:31 +0000
Manifest next update: Fri 14 Aug 2026 00:01:31 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: yn0cw2WxhaDr/7w3i6HxEQjZtZbZ4bgSvdYisgmTTsU=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: pPHuomO4xh_m0S-r-_OhJE-mYVA.asa (hash: TKq6TnfE0FWP12xkoJvmUbR5i0X/fWByiH3vtL0RFrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:8f:6c:d0:dc:12:f5:a1:58:62:b0:b8:a5:77:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Aug 13 00:01:31 2026 GMT
Not After : Aug 14 00:01:31 2026 GMT
Subject: CN=41a755fe0bc8904b6baa9f7585e5fce0a709c495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:1c:29:da:6d:e5:1d:43:c5:61:df:15:e9:
c4:05:4e:96:60:91:15:d0:4e:3e:41:22:da:89:31:
05:fd:df:6d:ce:c4:b1:78:14:4c:e0:33:8d:d7:08:
d9:60:e6:4b:20:4f:77:2f:6e:dc:1e:10:37:8c:51:
68:b5:41:03:b7:7d:3d:d6:64:12:ba:c3:f0:e6:bd:
da:2f:ce:60:08:19:f8:c2:91:29:64:64:ba:ea:24:
ac:d7:e5:cd:b2:93:2c:d0:91:cf:5f:28:05:02:7a:
4e:50:e9:f1:72:8d:9a:fd:b7:47:63:b1:73:d7:5f:
67:95:3c:f1:05:08:53:b8:2f:12:c2:d9:61:ba:3b:
5a:f0:ce:5e:e1:70:a6:7d:f8:0f:d2:c4:81:2f:ea:
c7:10:fc:4c:3f:24:3f:17:df:28:9e:d0:e2:f5:71:
2b:38:ea:42:ae:5b:c2:14:a3:47:77:76:0f:83:d0:
2b:d7:2d:d8:d0:99:c6:b6:e8:ce:ff:7a:59:39:8a:
7b:10:5a:fc:1f:2f:1f:ef:ed:24:e7:ae:51:e3:7f:
ac:d9:d2:ca:13:2a:a4:f8:47:8a:3e:3a:eb:81:a4:
a2:3d:e2:fe:e1:7e:74:ad:57:7d:08:ee:32:77:37:
fb:7a:a1:eb:d1:b3:50:4c:ba:23:60:76:a8:9a:28:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A7:55:FE:0B:C8:90:4B:6B:AA:9F:75:85:E5:FC:E0:A7:09:C4:95
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ea:0b:13:3b:d0:aa:5f:b5:fe:15:e6:46:d8:b7:c8:e0:d3:
c3:93:49:d4:34:8a:b1:10:aa:fb:bd:11:64:16:d8:37:e2:34:
31:b1:c7:ce:72:65:6b:f2:39:b8:16:e1:f0:c7:9c:e3:ae:f5:
2c:18:bb:3f:84:e0:c6:8f:68:7e:35:54:b3:46:41:66:03:c8:
56:e1:a0:58:b1:e3:cb:17:37:59:19:27:bb:31:2b:ec:5f:97:
09:e7:0e:1d:6f:29:7c:db:f1:9e:0c:ce:1f:31:2c:80:e5:80:
23:36:0a:d2:23:07:93:92:ce:04:ab:06:0d:17:4b:c1:2e:1f:
a5:95:2a:fd:f1:2c:ad:44:63:ba:bc:10:a9:3a:c4:59:49:99:
4b:2b:0c:6e:bb:81:69:a8:75:e0:1a:a5:98:8a:02:f7:53:e4:
ff:ec:1c:6b:10:e5:cb:ec:8e:cc:52:4e:91:b7:1c:90:5c:3c:
bc:3f:1b:39:ce:3f:f9:7d:09:66:3a:52:5d:bf:40:91:83:8b:
28:bd:55:03:0c:69:99:ef:78:e7:c2:c0:e3:b3:62:f9:52:78:
07:86:55:8a:af:7f:b2:2e:2f:ff:6e:79:d8:74:ea:10:f9:6f:
88:2b:42:52:0f:23:ae:47:08:d8:3d:c6:c7:34:60:43:d2:5f:
b9:06:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:09 2026 by rpki-client