Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
File: 4TbBQNV8BgOYHZBG1McqrcZJe48.mft (raw, json)
Hash identifier: zx+rpOeqywkOx/NTD//tj4Y9TL19uJQN6yEpX6wiVGE=
Subject key identifier: C8:B9:0C:7D:52:04:EF:E1:7D:E8:52:6D:61:0D:F7:63:3D:B0:07:55
Authority key identifier: E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
Certificate issuer: /CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Certificate serial: 019F10E4FD85FD6AD5C2BDCEB9A0907F9C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
Manifest number: 0113
Signing time: Mon 29 Jun 2026 01:01:10 +0000
Manifest this update: Mon 29 Jun 2026 01:01:10 +0000
Manifest next update: Tue 30 Jun 2026 01:01:10 +0000
Files and hashes: 1: 4TbBQNV8BgOYHZBG1McqrcZJe48.crl (hash: myHGsGtVa5liByvAStxRvtAqpIH4eClAG00m960iHQs=)
2: flO6XJpnIFOsdZyjDNefmOQ-G_w.asa (hash: MR9nPjOlXBd3N+fXKFHrapKtNEWrnTEaOnHmqRgXcfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:fd:85:fd:6a:d5:c2:bd:ce:b9:a0:90:7f:9c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Validity
Not Before: Jun 29 01:01:10 2026 GMT
Not After : Jun 30 01:01:10 2026 GMT
Subject: CN=c8b90c7d5204efe17de8526d610df7633db00755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:a2:96:6c:0a:bb:9e:f8:ca:b4:40:ad:7a:
85:ab:d7:70:e3:c3:89:9c:08:58:b6:03:63:2e:cd:
ef:80:c0:49:bd:1b:ac:69:36:43:bd:ee:1e:a6:be:
20:ff:5c:21:c2:b7:77:72:13:8b:21:c0:78:b9:99:
9f:e5:8c:44:85:97:15:10:20:4d:f6:62:e1:cd:47:
43:43:29:a7:4e:ec:d5:58:bc:1c:f7:2e:9c:b8:c7:
2c:53:5d:64:88:53:d2:5e:dd:37:2d:b8:5c:91:93:
2c:40:44:99:bc:9e:88:ef:a9:3f:32:e4:75:d8:45:
78:e6:ee:89:02:ec:1e:95:84:e2:fe:15:68:6c:3e:
26:89:53:9c:71:1d:3b:fb:dc:38:2b:fd:83:e8:0f:
93:6a:7e:cd:84:75:8e:35:3d:6d:8c:16:5b:86:c4:
bc:a4:bf:2b:31:10:25:bb:a2:cf:10:ca:5b:c9:e3:
3f:74:d9:87:c1:a2:0d:c1:3b:81:a2:b8:2a:df:a5:
ff:91:bd:07:2c:85:10:3b:0f:8c:85:a4:d7:26:94:
68:b5:c2:9e:26:c3:ea:2c:06:8c:ef:79:33:ed:66:
0d:37:62:7e:cb:a8:c5:85:93:60:c1:b1:c0:ce:59:
0d:85:45:5e:67:83:ef:c6:ac:59:f8:49:7a:f6:25:
61:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:0C:7D:52:04:EF:E1:7D:E8:52:6D:61:0D:F7:63:3D:B0:07:55
X509v3 Authority Key Identifier:
keyid:E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:03:82:50:d6:30:84:e8:4e:36:74:41:ab:82:17:64:9d:11:
30:ef:70:4c:cd:f5:4d:d6:48:e7:76:27:a8:11:d9:5a:22:40:
34:d0:15:d3:30:6b:e0:63:d3:7d:bf:04:be:c4:ba:96:e4:5f:
95:e3:35:b1:d6:9c:c5:65:22:9a:83:1e:2c:53:39:1f:28:5f:
ea:59:12:96:a8:c2:8e:22:27:3d:28:13:f1:e9:c5:5a:67:43:
10:c2:6f:3d:df:01:b3:89:24:ff:9d:8b:07:95:fa:3d:63:9d:
76:84:d8:5f:79:4f:1d:1c:53:01:95:8c:56:99:36:45:fd:19:
03:36:e9:65:11:00:1d:bc:05:45:f9:29:4a:58:f2:33:34:22:
fd:96:ba:8d:56:c5:c2:13:9d:e4:d7:73:52:62:a0:a7:53:a4:
2e:a5:63:56:eb:2c:0e:0a:33:97:9f:51:42:60:4c:73:27:df:
1b:8b:32:0a:ee:54:9f:b8:06:4d:7a:81:50:8c:34:7e:cb:5d:
c7:fa:09:19:92:3d:9b:cf:90:04:69:be:08:53:fa:91:d0:49:
13:6d:76:ee:b0:8d:7a:a8:17:5e:ee:1f:e4:06:03:a4:20:68:
8a:a5:42:76:8e:9c:6c:60:f1:28:4e:70:38:64:16:51:ff:ce:
3b:da:2b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:12 2026 by rpki-client