Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
File: CTdXHsK0hQX72gnKfqaN69lOAdM.mft (raw, json)
Hash identifier: kh6k5sX+TfUhiVvMbN4PPG1A/cfHFPypDe+vk17UUzY=
Subject key identifier: C4:45:67:96:A2:00:21:79:F6:25:79:FD:72:2C:D5:F4:D8:E4:88:F9
Authority key identifier: 09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3
Certificate issuer: /CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
Certificate serial: 019FA4BD99A64F20A9B9017FD25B2D195B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 18:01:56 +0000
Manifest this update: Mon 27 Jul 2026 18:01:56 +0000
Manifest next update: Tue 28 Jul 2026 18:01:56 +0000
Files and hashes: 1: CTdXHsK0hQX72gnKfqaN69lOAdM.crl (hash: d8qrxqCQtPR64yaxY0ii04OkLp5ZTfSRDIi8GkSlDGA=)
2: pjNNqrlFdBEk-5LXIPaA2yAX9II.roa (hash: 6xAgp3Y3/YbpjnpdTMNy11kqzchtaR+Q0nGNwxBy1EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bd:99:a6:4f:20:a9:b9:01:7f:d2:5b:2d:19:5b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0937571ec2b48505fbda09ca7ea68debd94e01d3
Validity
Not Before: Jul 27 18:01:56 2026 GMT
Not After : Jul 28 18:01:56 2026 GMT
Subject: CN=c4456796a2002179f62579fd722cd5f4d8e488f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:e6:25:b4:12:91:1e:24:a8:1b:6a:f8:28:
3d:9f:ed:76:9b:c0:ff:a3:9b:ee:50:b0:66:22:31:
de:17:05:83:70:19:3b:b5:69:5a:ea:08:cc:f8:23:
86:5c:eb:9f:9c:8d:92:42:fc:99:87:fd:19:e3:57:
7e:bd:f3:91:3b:5a:27:c1:fe:a9:5b:f5:fe:07:76:
f4:72:26:57:fa:a6:8c:29:94:8b:17:be:03:d5:54:
63:b6:83:ce:c3:35:f5:2e:5e:ec:7e:08:4a:ba:75:
98:78:24:05:40:ec:80:94:52:35:40:a9:f5:15:29:
ac:15:60:8b:77:aa:13:80:18:bb:a4:65:82:88:03:
47:f6:01:42:d3:c1:54:6b:7e:90:d0:b4:0c:87:b4:
9b:71:96:1f:5a:73:8b:dc:70:0c:b7:c0:2c:ad:3b:
36:4c:38:81:a6:10:5e:20:87:d7:cc:9f:3c:86:4c:
d1:54:73:0a:d0:be:52:a6:e1:5b:64:89:83:8a:10:
bb:82:46:c8:62:f3:25:88:8b:f4:3c:78:03:79:54:
92:24:ac:87:9b:dc:dc:ed:7a:22:1f:d0:e3:65:63:
7d:41:ef:30:59:a8:5a:55:2d:98:90:89:47:42:3d:
02:27:eb:cb:d6:53:a0:88:1d:de:e8:58:02:28:b2:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:67:96:A2:00:21:79:F6:25:79:FD:72:2C:D5:F4:D8:E4:88:F9
X509v3 Authority Key Identifier:
keyid:09:37:57:1E:C2:B4:85:05:FB:DA:09:CA:7E:A6:8D:EB:D9:4E:01:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTdXHsK0hQX72gnKfqaN69lOAdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ab45e4-6ea0-495f-8b78-9b5d76a949f4/1/CTdXHsK0hQX72gnKfqaN69lOAdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:12:ef:93:ef:45:4f:13:10:ec:45:d2:28:b5:65:f7:cc:
14:85:d9:69:0d:1e:82:53:01:83:2b:ae:80:45:ba:dd:6a:bd:
56:3e:0b:b8:67:ef:77:0a:ec:10:9b:b1:75:3d:06:13:fb:96:
39:20:97:f1:13:8c:00:ea:f6:d8:16:d7:de:05:88:78:fb:ae:
6f:3c:31:36:d4:9f:9c:b1:ba:c4:94:7f:58:e3:8c:9f:64:aa:
8a:4b:bb:95:09:d1:a5:71:4d:3d:21:96:e6:ee:d6:45:33:b6:
35:dc:18:68:2d:57:02:e9:e9:79:65:59:dd:37:c1:75:45:ee:
59:21:d4:65:b9:7b:f5:17:fc:32:b3:2a:a3:e1:d8:b9:60:c4:
65:90:ec:24:ec:f9:58:7c:66:15:21:17:da:58:44:92:22:32:
14:7c:b8:f6:6c:f8:87:7d:6f:f6:c2:52:d2:17:32:1b:8a:4b:
f3:59:96:35:1c:64:48:bc:ee:08:3b:2d:cc:ce:91:7e:2e:04:
7e:e0:e3:3f:79:0b:77:7f:84:81:1f:1d:ef:61:36:96:88:8d:
3d:ad:49:c2:5e:46:c5:b8:48:22:64:4c:10:d5:99:ad:68:69:
5b:57:3f:1b:37:f0:2b:5b:f7:b7:fa:af:09:f3:88:3a:8b:d5:
f8:fa:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:16:13 2026 by rpki-client