Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: Sjj/AOrfH1T1GfYUu/RrAZ1/ekhkE6TqrzLbdUakjy4=
Subject key identifier: A8:6F:F5:E2:D1:75:42:19:25:BC:13:5A:33:43:41:D3:F4:05:C6:E4
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019F189EC992F9F4073F8EF5E5816E6664B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0BC6
Signing time: Tue 30 Jun 2026 13:01:27 +0000
Manifest this update: Tue 30 Jun 2026 13:01:27 +0000
Manifest next update: Wed 01 Jul 2026 13:01:27 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: EGgcE47fD2XqZ9jV1I4JLb5kk8WX95fFJwi1TWX3Yk8=)
2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:c9:92:f9:f4:07:3f:8e:f5:e5:81:6e:66:64:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Jun 30 13:01:27 2026 GMT
Not After : Jul 1 13:01:27 2026 GMT
Subject: CN=a86ff5e2d175421925bc135a334341d3f405c6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:02:b7:1d:0f:5c:2e:03:cc:13:9d:6a:a0:eb:
d0:26:63:4e:c7:30:38:48:6f:1f:d8:c5:84:b9:e2:
02:9f:50:48:06:94:34:73:5f:9e:ae:67:89:2f:6b:
64:3e:b2:cb:f5:85:ad:e9:1f:3e:49:c0:62:4d:b5:
66:8f:75:ad:7d:5e:59:a4:d8:fb:4d:ff:ee:ff:f1:
96:ef:19:96:02:05:c2:b2:3f:27:60:11:b1:f8:f6:
ce:a2:4f:51:94:db:65:bc:6a:a1:63:59:83:bf:cf:
5b:0b:18:9a:fd:fd:55:e0:b5:6d:24:30:88:c8:4d:
9c:1f:7e:7e:e3:81:48:63:8f:8e:e3:fd:f2:c2:cd:
1e:6c:04:74:2d:37:9e:db:81:cf:9c:1a:42:3f:e6:
7a:ae:d8:ff:73:ca:f2:3c:e7:87:18:76:7c:6b:7e:
80:2c:28:e5:b8:a6:50:01:21:b9:07:61:00:27:50:
35:3d:37:22:08:35:ad:a9:84:86:ba:8e:8f:fd:af:
dd:3a:99:1e:0e:0e:5a:c7:c2:f3:98:59:86:d6:f5:
9d:26:fa:55:0b:66:4a:f0:79:da:ab:84:a9:dd:36:
1d:4b:3d:4b:7b:c4:1b:c3:e5:a2:8f:c0:fd:da:14:
1f:a3:d5:a7:4f:55:47:a4:3a:57:6e:e4:7d:8a:ba:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6F:F5:E2:D1:75:42:19:25:BC:13:5A:33:43:41:D3:F4:05:C6:E4
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:49:b4:5a:85:c6:6d:c4:a8:a1:01:49:5d:2c:99:ad:e7:62:
af:7d:94:66:ba:9c:66:09:03:b9:71:bb:68:a1:d6:e1:1e:ae:
e2:d7:5e:0b:f1:52:19:29:1a:15:ba:0f:20:4f:39:f2:f5:7b:
97:15:eb:db:1e:18:da:09:ed:4d:5b:0a:64:a9:58:75:1b:e9:
c9:1c:44:70:45:60:a8:69:7e:f2:45:9e:f2:c1:8d:7a:d3:4b:
04:1c:e3:a4:dc:1e:d4:cf:60:ba:1c:c1:01:20:36:0b:43:d1:
ad:10:a5:a8:7e:73:6f:e1:1c:31:6d:79:ba:87:31:e5:61:ed:
e8:13:cd:89:37:7c:a5:39:bf:e2:98:76:28:f2:0b:6f:0e:6d:
26:2f:54:76:dc:2f:b7:ef:a9:33:8b:8d:ef:f6:00:18:8a:db:
73:8f:78:c0:a1:43:bc:41:c4:74:a8:c3:d4:09:0a:20:d8:ef:
dc:ea:8a:e6:67:59:27:3e:49:00:e9:3e:40:8e:5d:eb:bf:61:
f5:ae:3f:db:4a:f8:b6:7b:da:d9:e4:b9:a0:b5:10:ea:95:e4:
7d:07:1b:71:12:80:1e:ac:0a:d6:d1:10:3b:dd:8f:6b:bb:88:
46:64:93:2f:bf:c2:b0:71:92:48:f7:6b:a3:de:57:0a:94:bd:
d4:42:c7:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnsmS+fQHP4715YFuZmSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTRlYjM1YTM1ZmQ0ODg4NjA3MDNiNzk5MGI4MTcwYWYx
NzkxMmYwHhcNMjYwNjMwMTMwMTI3WhcNMjYwNzAxMTMwMTI3WjAzMTEwLwYDVQQD
EyhhODZmZjVlMmQxNzU0MjE5MjViYzEzNWEzMzQzNDFkM2Y0MDVjNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AK3HQ9cLgPME51qoOvQJmNOxzA4
SG8f2MWEueICn1BIBpQ0c1+ermeJL2tkPrLL9YWt6R8+ScBiTbVmj3WtfV5ZpNj7
Tf/u//GW7xmWAgXCsj8nYBGx+PbOok9RlNtlvGqhY1mDv89bCxia/f1V4LVtJDCI
yE2cH35+44FIY4+O4/3yws0ebAR0LTee24HPnBpCP+Z6rtj/c8ryPOeHGHZ8a36A
LCjluKZQASG5B2EAJ1A1PTciCDWtqYSGuo6P/a/dOpkeDg5ax8LzmFmG1vWdJvpV
C2ZK8Hnaq4Sp3TYdSz1Le8Qbw+Wij8D92hQfo9WnT1VHpDpXbuR9irpuhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhv9eLRdUIZJbwTWjNDQdP0BcbkMB8GA1UdIwQY
MBaAFOIU6zWjX9SIhgcDt5kLgXCvF5EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzct
Y2MyNmQ0MzE2MTQyLzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81NGJlNTgtNDE3NS00MDdhLWJjMzctY2MyNmQ0MzE2MTQy
LzEvNGhUck5hTmYxSWlHQndPM21RdUJjSzhYa1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkm0WoXG
bcSooQFJXSyZredir32UZrqcZgkDuXG7aKHW4R6u4tdeC/FSGSkaFboPIE858vV7
lxXr2x4Y2gntTVsKZKlYdRvpyRxEcEVgqGl+8kWe8sGNetNLBBzjpNwe1M9guhzB
ASA2C0PRrRClqH5zb+EcMW15uocx5WHt6BPNiTd8pTm/4ph2KPILbw5tJi9Udtwv
t++pM4uN7/YAGIrbc494wKFDvEHEdKjD1AkKINjv3OqK5mdZJz5JAOk+QI5d679h
9a4/20r4tnva2eS5oLUQ6pXkfQcbcRKAHqwK1tEQO92Pa7uIRmSTL7/CsHGSSPdr
o95XCpS91ELHyw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:15 2026 by rpki-client