Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: kZPXq7RWDEJhcV0RqXQoGNKuuQESYu2AVtdFdOcd8Gk=
Subject key identifier: AC:D6:30:CB:43:38:15:AC:6F:E8:D9:BE:9A:06:38:23:61:B8:86:BC
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019F190C68A2F454404DF5A951A234F1E6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 15:01:11 +0000
Manifest this update: Tue 30 Jun 2026 15:01:11 +0000
Manifest next update: Wed 01 Jul 2026 15:01:11 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: 0t2/2dR/f2C0c3l1nGk1Alc8QESXDLf91Iw5gEh/pfI=)
2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:68:a2:f4:54:40:4d:f5:a9:51:a2:34:f1:e6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Jun 30 15:01:11 2026 GMT
Not After : Jul 1 15:01:11 2026 GMT
Subject: CN=acd630cb433815ac6fe8d9be9a06382361b886bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:b4:62:c8:f1:18:e6:73:f8:45:09:06:4f:
d3:8b:e3:2b:5a:bf:b1:b4:c4:1f:b5:94:dc:c1:a0:
ea:f3:bc:0b:e9:08:38:e8:2e:cf:2e:cc:1a:96:fc:
b6:4f:24:14:96:ce:10:f2:18:42:25:94:ab:7b:d9:
31:33:d9:de:8f:ad:f2:48:0e:cc:67:7d:26:0e:df:
11:ec:b0:d3:71:0f:7d:55:6d:52:0f:38:f6:bf:f0:
ac:ff:35:d7:a5:4f:f6:25:c2:84:d9:e9:43:d2:c2:
52:67:88:8b:ec:4a:a0:61:82:f9:78:7d:c0:cb:4e:
c8:2d:d3:bc:19:d3:ab:92:ba:40:3d:b3:cc:33:59:
71:d0:79:0b:af:e0:9b:1e:0c:08:49:f1:ea:86:63:
e3:4e:32:7d:1f:eb:bd:02:d5:32:50:c7:08:15:87:
ff:c3:77:19:a7:8b:7a:96:eb:8d:e6:68:93:14:af:
5a:16:8d:fa:63:98:ae:08:18:5c:e7:f4:d8:5b:00:
22:03:79:8f:44:55:25:ae:03:72:61:bb:00:41:51:
13:bb:e6:c1:02:f5:59:e2:26:c6:12:0f:f3:33:d2:
54:5a:59:88:23:bc:df:57:e0:4f:92:a1:f8:44:2c:
2b:b5:ea:fe:67:e4:7d:f6:98:c7:0c:57:17:c0:f5:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:30:CB:43:38:15:AC:6F:E8:D9:BE:9A:06:38:23:61:B8:86:BC
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:26:d2:e7:c4:7c:ab:4d:c3:51:c3:ec:74:c0:47:5a:1a:fe:
01:00:47:95:df:8f:4f:40:8a:00:7e:43:96:8a:76:17:f7:30:
14:8e:3b:ea:3a:0f:5d:92:c2:2c:3b:a7:75:b6:e1:00:d0:9e:
c2:28:f4:bf:c1:d6:7a:44:1f:19:44:9a:bc:bf:4d:40:9d:24:
bd:16:47:29:4d:6f:7b:8e:f0:a3:48:4d:f5:3e:36:c5:9f:e8:
23:c3:34:42:2b:c9:88:5d:7b:f7:b3:0d:4d:28:28:1b:1f:9e:
94:be:86:8e:f6:b9:53:a8:c6:06:2e:7a:08:c3:32:1f:ea:83:
b3:a4:96:7d:57:ee:71:cb:d9:dc:2e:b8:8d:c0:a6:22:eb:6c:
3a:d6:d8:64:06:91:8a:82:42:f5:aa:3d:12:59:ec:d5:30:f2:
4d:d8:82:1d:7a:d1:93:45:7e:2e:83:b0:aa:d9:91:77:31:cc:
d7:c3:be:f4:ef:17:22:3e:53:2a:61:65:87:c5:0e:77:37:c5:
d9:4c:fa:2d:bf:91:29:e5:af:d9:10:75:d3:8d:e3:0d:8a:e9:
cf:9b:9d:03:30:23:d5:6e:f5:76:7d:6d:4e:46:7f:47:bb:c6:
51:6c:93:c7:be:19:0f:1b:cd:56:bf:83:a9:31:70:fc:5f:0e:
f1:c0:9e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDGii9FRATfWpUaI08ebjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTkyYTc4OGE0MTA1N2QyNzc2NGYxNmYzYjFkMmEzZWY2
MzQ1ZDYwHhcNMjYwNjMwMTUwMTExWhcNMjYwNzAxMTUwMTExWjAzMTEwLwYDVQQD
EyhhY2Q2MzBjYjQzMzgxNWFjNmZlOGQ5YmU5YTA2MzgyMzYxYjg4NmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I60YsjxGOZz+EUJBk/Ti+MrWr+x
tMQftZTcwaDq87wL6Qg46C7PLswalvy2TyQUls4Q8hhCJZSre9kxM9nej63ySA7M
Z30mDt8R7LDTcQ99VW1SDzj2v/Cs/zXXpU/2JcKE2elD0sJSZ4iL7EqgYYL5eH3A
y07ILdO8GdOrkrpAPbPMM1lx0HkLr+CbHgwISfHqhmPjTjJ9H+u9AtUyUMcIFYf/
w3cZp4t6luuN5miTFK9aFo36Y5iuCBhc5/TYWwAiA3mPRFUlrgNyYbsAQVETu+bB
AvVZ4ibGEg/zM9JUWlmII7zfV+BPkqH4RCwrter+Z+R99pjHDFcXwPX9+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzWMMtDOBWsb+jZvpoGOCNhuIa8MB8GA1UdIwQY
MBaAFODpKniKQQV9J3ZPFvOx0qPvY0XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgt
YmE1OWZiMmM0NjEwLzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgtYmE1OWZiMmM0NjEw
LzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCbS58R8
q03DUcPsdMBHWhr+AQBHld+PT0CKAH5Dlop2F/cwFI476joPXZLCLDundbbhANCe
wij0v8HWekQfGUSavL9NQJ0kvRZHKU1ve47wo0hN9T42xZ/oI8M0QivJiF1797MN
TSgoGx+elL6Gjva5U6jGBi56CMMyH+qDs6SWfVfuccvZ3C64jcCmIutsOtbYZAaR
ioJC9ao9Elns1TDyTdiCHXrRk0V+LoOwqtmRdzHM18O+9O8XIj5TKmFlh8UOdzfF
2Uz6Lb+RKeWv2RB1043jDYrpz5udAzAj1W71dn1tTkZ/R7vGUWyTx74ZDxvNVr+D
qTFw/F8O8cCexg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:36 2026 by rpki-client