Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: swXfCVD6qpurnRUnuh86dQzrewdq2+8SIOhwPu0FS6o=
Subject key identifier: F1:BD:D6:8B:C9:56:9F:EC:02:CF:49:95:AA:08:B7:4D:58:CD:83:DE
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019F17C2F6FB5F6C6D38DA8F6AD7D5BDC5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 191B
Signing time: Tue 30 Jun 2026 09:01:20 +0000
Manifest this update: Tue 30 Jun 2026 09:01:20 +0000
Manifest next update: Wed 01 Jul 2026 09:01:20 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: LE9cwKtyEnDq9iqvxB5JA9vXCwOQhAFCyMYYHZU6vc0=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:f6:fb:5f:6c:6d:38:da:8f:6a:d7:d5:bd:c5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jun 30 09:01:20 2026 GMT
Not After : Jul 1 09:01:20 2026 GMT
Subject: CN=f1bdd68bc9569fec02cf4995aa08b74d58cd83de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:5e:ce:e7:ef:78:fe:77:b9:c7:ec:d4:66:
8f:67:66:33:b9:bb:dc:69:0f:2f:7e:85:87:83:3b:
ae:5b:d7:6c:c0:f2:84:26:5b:25:95:98:12:ff:66:
00:bd:33:5c:47:36:ed:03:67:14:3d:75:9f:8b:e3:
f3:62:c9:5e:b1:57:59:d8:c7:9f:57:c6:b4:9d:7c:
cc:0f:0e:c7:74:19:9e:15:19:f5:a0:00:2c:6e:08:
ab:a3:22:37:1a:a6:fd:fb:b3:30:f1:c9:b7:aa:dc:
8b:6d:86:ca:3e:b6:50:63:1e:97:8a:6f:ec:38:32:
ad:50:8e:f0:44:c2:c5:22:12:56:9c:c8:1c:b4:a3:
b9:53:82:d6:b6:98:42:e0:62:41:b7:d9:59:2b:82:
59:7c:23:f7:c2:ce:20:dc:0d:3c:29:de:e8:bc:dc:
80:d7:46:0f:2f:e2:be:9f:53:7a:17:2e:16:e1:48:
d3:98:31:6c:65:f3:61:03:24:c6:13:34:9a:fb:a2:
a5:cf:ae:2b:1f:c4:44:da:36:5e:8a:af:62:36:c7:
7b:1b:c5:e7:52:97:b3:d2:dc:ce:5c:ac:71:23:9f:
90:a6:c1:87:78:c9:37:b9:84:71:f1:03:e4:9b:87:
7d:c5:4a:1d:13:6a:b4:c4:d0:6b:d7:e3:ab:87:f0:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BD:D6:8B:C9:56:9F:EC:02:CF:49:95:AA:08:B7:4D:58:CD:83:DE
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f1:9e:6a:91:d8:0c:b4:f4:e6:10:65:a6:fc:c1:2f:96:7e:
60:8a:9f:eb:01:51:b2:79:29:1d:1d:32:b4:0a:0c:1b:02:91:
f9:98:f0:6f:9b:4e:bc:dd:ad:32:6e:57:43:f6:bb:04:1e:7f:
43:57:b2:a9:ce:67:0b:fb:2f:0e:eb:ae:3b:56:49:7c:51:3b:
ce:ec:fc:d9:f5:99:bc:ef:1e:49:f7:ec:de:19:98:22:94:2e:
b0:48:42:73:74:95:be:2f:ea:82:20:18:3f:54:61:83:c9:42:
7d:ec:cd:78:a8:d7:9e:82:92:4a:5d:92:9a:de:38:34:d8:06:
28:5e:ad:fd:8b:bf:d9:6f:fc:1e:a5:93:6e:fd:22:e2:0b:6b:
84:e3:94:d3:a3:76:9f:69:0c:90:8c:9e:58:08:bd:5e:32:e4:
42:48:6a:b7:b7:c0:ba:67:3d:67:a1:97:7c:b2:94:f2:d7:22:
0f:fc:eb:14:94:39:d5:ea:5e:ac:80:a3:ff:07:8b:40:5a:5b:
82:7f:09:2b:7e:e4:5a:b4:01:78:f3:10:87:a7:42:91:d3:11:
b9:0e:d5:f5:b5:9c:94:f2:e4:b6:f4:02:14:89:b3:70:22:d0:
66:9f:5e:93:bb:07:ba:e4:65:39:8c:de:aa:34:80:43:86:ee:
98:08:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:57 2026 by rpki-client