Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: IsNrQTFSICZ6SxrbZ4SPBvPPkwhmVEa1ZG9eVBW3EkQ=
Subject key identifier: 6C:52:2C:30:09:F4:39:58:6E:A1:93:E1:F9:1D:9C:52:2B:7E:9E:54
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019EBB100DDF252C99723A5160FE70F5508F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0F6F
Signing time: Fri 12 Jun 2026 09:00:51 +0000
Manifest this update: Fri 12 Jun 2026 09:00:51 +0000
Manifest next update: Sat 13 Jun 2026 09:00:51 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: oGHNWFH2LLYIzNIwUnrLmGfuZiA6u3QJzo14rPbrNk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:10:0d:df:25:2c:99:72:3a:51:60:fe:70:f5:50:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Jun 12 09:00:51 2026 GMT
Not After : Jun 13 09:00:51 2026 GMT
Subject: CN=6c522c3009f439586ea193e1f91d9c522b7e9e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:97:f3:f0:e7:bc:38:5e:a4:b5:16:cf:aa:37:
1f:04:91:a5:af:72:ae:8c:78:7f:61:5e:f4:f4:4e:
70:ba:0b:e7:f2:98:ec:5c:f7:86:53:ca:60:37:32:
54:6d:2a:6b:15:f0:cf:db:7d:c2:20:b7:1c:50:93:
36:1a:80:e6:40:99:aa:81:0e:cc:b2:94:10:32:b1:
a7:40:92:31:11:f8:26:d4:5f:9c:51:99:d1:a6:0e:
2d:d2:d1:f4:79:10:e5:5f:57:d1:c5:62:c0:e1:21:
6e:d3:c0:14:a3:21:0a:32:25:f8:59:82:4d:72:36:
34:3e:ef:19:e9:bc:da:bc:f8:d1:5f:f5:93:a4:c5:
32:08:9c:2c:6d:b0:46:29:81:c2:ad:c8:20:77:e2:
8e:ca:05:ab:e0:41:37:0d:0c:8a:cd:06:3b:63:e8:
c0:9c:b6:62:f1:25:84:76:ef:ce:2b:05:ac:e3:e5:
fa:f9:e5:41:a8:5b:8d:1f:f6:27:b5:42:2c:7a:fd:
0c:94:14:60:5e:e0:bf:02:be:99:fe:1d:8e:64:87:
d3:95:2e:d4:f9:7d:9a:3d:e1:ef:7a:eb:28:ce:5c:
3a:bd:6f:df:af:3e:bb:6d:87:e4:73:f6:ec:58:49:
83:8c:f6:8d:d8:f2:dc:08:92:6d:18:c7:c8:ab:3c:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:52:2C:30:09:F4:39:58:6E:A1:93:E1:F9:1D:9C:52:2B:7E:9E:54
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ef:e0:95:a9:15:1a:36:ad:c6:7b:a0:c0:01:3e:fb:f3:08:
8f:33:69:3d:a2:cd:35:f0:b2:4d:a0:4b:34:94:1a:8d:5f:10:
6e:b9:b8:41:3f:db:ac:51:2b:26:dc:4b:d7:64:ad:77:4e:0c:
fe:28:88:72:50:d5:86:61:fa:ad:c2:3c:8f:cf:a8:5c:4e:2b:
2b:17:7d:08:38:63:59:a6:cb:f4:0e:27:dc:74:e4:cd:08:61:
38:7c:a6:77:12:b5:15:ad:8e:e5:a8:15:ad:63:07:27:10:e0:
db:7c:c7:c0:04:65:66:02:68:a2:27:bf:3d:d0:3b:6d:43:a1:
c5:c5:b5:77:64:39:15:32:b1:7f:66:06:85:0c:13:e7:b5:34:
a3:74:2f:1f:ac:01:1a:35:39:9b:1c:99:d0:e9:1f:06:be:be:
45:87:ea:72:f6:d3:51:47:83:3a:57:a8:db:1c:fa:ed:99:b7:
7b:05:f8:d9:f5:55:45:2b:c0:b0:5f:25:59:8b:69:a4:91:49:
89:d8:9c:71:32:99:3d:52:ad:18:79:cd:2b:95:b1:21:34:0e:
27:52:72:6e:ab:97:8a:1d:8f:50:a4:2a:f0:88:f1:98:8c:be:
f0:17:0f:a5:2c:3a:64:57:93:58:f2:28:85:fc:99:01:50:d5:
49:ad:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:06:49 2026 by rpki-client