Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: 0+WXjiVL8U6rfcfDUHFJ6cjJLVpIFHBRrsV0MsIjIQY=
Subject key identifier: 99:88:CD:DB:91:3E:42:84:D5:56:1D:28:94:6E:8C:77:C2:8E:F0:54
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 019F189ED355CD3D9B5B8491CCB8C16B21AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0A19
Signing time: Tue 30 Jun 2026 13:01:29 +0000
Manifest this update: Tue 30 Jun 2026 13:01:29 +0000
Manifest next update: Wed 01 Jul 2026 13:01:29 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: PUQInPzrUS9OFPgEX6ltv+PZPGchuKnGIvSky/alroA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:d3:55:cd:3d:9b:5b:84:91:cc:b8:c1:6b:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Jun 30 13:01:29 2026 GMT
Not After : Jul 1 13:01:29 2026 GMT
Subject: CN=9988cddb913e4284d5561d28946e8c77c28ef054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:ea:28:a6:e7:b9:01:b1:f4:7c:01:86:7c:
06:e9:37:a5:1f:7a:42:58:51:52:da:80:a0:02:ae:
79:ac:0e:18:68:93:6a:08:9f:d2:d2:b2:29:6b:3c:
bd:a3:2e:d1:fd:d2:36:67:67:6e:05:e9:2f:79:c0:
a6:4e:15:ab:0c:03:3f:c2:a7:fb:aa:a3:4c:74:4c:
69:6b:d0:3c:21:9d:3a:c4:b9:bb:c7:e0:75:bd:3b:
c8:1a:d4:3d:71:8d:84:63:d6:4e:38:66:f6:ab:b3:
2a:b1:a5:9a:0b:89:1e:e0:bb:8b:c4:ee:13:ab:04:
40:3c:17:f0:a8:1b:34:8c:58:4a:4d:d1:3c:08:30:
42:dd:1f:20:a8:1e:35:5e:b0:64:64:46:48:de:05:
a4:e0:9d:d3:26:b0:09:a9:0c:4a:ab:a4:b3:45:0d:
3b:be:f3:98:e1:a2:d9:32:b7:9d:e0:d6:08:6a:5d:
f1:65:f2:0c:9e:fc:b2:c9:a2:aa:43:c2:d6:77:54:
e3:00:09:e0:d4:25:48:e0:c6:4d:13:90:da:4d:fa:
e9:78:f0:fe:cd:4c:b5:eb:cc:5e:5d:2a:cf:a2:b1:
c3:7a:73:98:c3:86:95:31:76:e6:4d:2f:e8:a6:92:
f3:39:a6:e1:b0:49:a9:30:10:b7:b9:f1:b3:13:17:
31:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:CD:DB:91:3E:42:84:D5:56:1D:28:94:6E:8C:77:C2:8E:F0:54
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:74:4f:04:47:d6:9f:de:ee:2d:42:bd:51:e2:96:63:40:10:
db:73:31:7f:cc:50:da:f5:32:aa:b7:cc:43:e4:c0:3c:b9:ac:
59:eb:e9:c6:2e:18:68:5b:c6:2b:47:d0:af:a7:0d:5b:40:00:
08:5b:71:af:e7:b0:d8:01:3e:b6:54:f9:02:87:fb:32:74:70:
ed:c9:f0:c5:86:43:b5:e0:ff:c2:f2:59:c9:0b:30:11:3f:ff:
9d:c9:3b:bb:72:3f:67:97:df:8f:22:64:36:32:83:1a:3d:10:
55:ac:94:0b:e0:f1:2f:1a:9a:26:97:90:2e:5d:6f:62:28:fa:
fd:d7:8a:ac:ac:6e:19:bd:d1:08:14:b8:62:9e:c5:07:88:5f:
a9:54:95:33:2e:04:7b:48:57:06:62:b4:0f:f4:fb:ab:a2:61:
61:fd:a9:19:d9:47:10:a0:1d:b3:95:e6:2b:ba:9d:35:c6:ca:
0a:9a:a5:97:bd:cc:59:e6:f1:21:de:05:00:99:dc:a0:c0:3f:
f0:c8:53:33:62:06:be:bb:8c:41:8b:4d:0e:28:71:17:e9:29:
d7:6a:d6:47:03:57:f1:10:7b:b3:26:ca:e9:93:04:18:c7:f9:
da:10:93:bf:c6:96:82:be:a8:65:34:bf:34:5b:96:86:c8:1d:
d6:f2:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:53 2026 by rpki-client