Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: STLxCMWb/Wpub45oS6SwhvckEKgiuCRXV8j1xUoE0S8=
Subject key identifier: 79:60:FB:AA:69:D4:B7:75:65:83:1E:93:39:3A:DB:CC:52:B3:B0:EF
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019FCB5CBD109A6AC1469A572E6B1D101C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 0208
Signing time: Tue 04 Aug 2026 06:01:20 +0000
Manifest this update: Tue 04 Aug 2026 06:01:20 +0000
Manifest next update: Wed 05 Aug 2026 06:01:20 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: Z03oRocJk6Gr/hJPXRe9Fn0hsTz21tM6NxXau1lDOyA=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5c:bd:10:9a:6a:c1:46:9a:57:2e:6b:1d:10:1c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Aug 4 06:01:20 2026 GMT
Not After : Aug 5 06:01:20 2026 GMT
Subject: CN=7960fbaa69d4b77565831e93393adbcc52b3b0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:31:d7:08:a6:bd:86:52:00:97:d8:3e:74:
cb:d1:2c:7e:56:84:f9:ee:a0:1f:9a:5a:08:b8:2d:
cc:f5:19:46:66:4a:fa:76:95:88:a3:a3:8b:e4:36:
a0:0a:8d:44:e5:b4:b1:71:2f:73:34:3d:77:2a:90:
52:38:fb:60:50:d2:a6:3a:d1:e5:fc:08:89:b0:cf:
17:9d:62:3a:1f:56:33:c0:87:ef:0e:a2:f6:23:84:
d8:ec:12:0b:8d:26:75:15:45:1b:9d:5e:83:90:a8:
0e:21:83:75:10:7e:e2:33:6f:2b:d9:7e:9b:19:34:
b7:32:6d:7d:1c:d6:b6:8f:85:75:ba:9b:73:75:b3:
76:cb:1a:64:ef:3f:7d:2e:50:98:b9:9d:db:e4:7b:
a4:52:4e:34:ba:d8:72:a2:b1:42:69:f1:31:63:d2:
26:1c:fd:a3:d2:e5:13:82:0b:59:27:fd:b9:2d:d0:
a6:2c:62:56:ee:66:5f:27:99:fa:3f:ac:5c:bb:03:
58:e0:c4:37:21:82:24:99:c0:d5:e0:41:ea:f3:28:
1d:3c:6e:8c:0e:92:89:81:40:12:0a:be:3e:f0:13:
12:e8:44:e4:e9:04:58:a8:21:7e:89:4e:64:14:81:
2e:e8:ac:3e:09:d2:88:1f:7f:f4:e7:2e:37:1f:a8:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:60:FB:AA:69:D4:B7:75:65:83:1E:93:39:3A:DB:CC:52:B3:B0:EF
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a1:49:3c:f3:c4:0d:64:dd:f3:23:0d:78:6b:60:25:1f:5e:
ee:d4:89:8c:cd:23:83:b2:de:d7:0f:75:36:19:07:35:fe:00:
1b:12:65:d1:3f:96:92:98:09:a5:1e:a9:70:e3:21:85:fd:1e:
ec:16:19:01:cf:c8:ec:c0:c6:9f:59:ca:c9:e5:9a:1e:6b:e8:
77:c2:9d:f6:1e:6a:11:5d:70:f5:ca:50:73:64:e8:f2:00:62:
dd:dd:89:e7:fe:57:bf:fb:67:33:aa:ee:e7:bc:b3:57:13:66:
fa:25:0b:57:f7:9e:54:4f:39:9f:90:fc:5f:d8:60:1c:e8:a9:
7f:09:bd:c7:fc:00:8b:8b:64:d2:ad:f1:a8:56:f9:43:87:1d:
42:35:6b:53:8b:29:df:b6:4c:14:3d:ef:ef:02:82:f9:a4:f0:
1d:34:ba:bf:b9:77:8d:b6:c9:7a:7f:95:0f:55:16:74:38:c4:
cd:e2:e5:e8:cb:44:f7:cf:ee:e0:76:43:71:17:2b:f6:a4:4a:
05:fa:7e:c5:95:fa:1a:a4:c5:53:3b:90:19:1b:bd:d0:b3:71:
66:fe:81:1d:5f:8a:fc:c8:5c:50:f7:0a:d3:da:43:12:dd:4c:
1a:0d:0a:4e:c3:a5:2d:4b:a0:fd:61:57:eb:40:e6:d6:8a:26:
be:9f:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:00:52 2026 by rpki-client