Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: +f80bCI4R5RiTIlAErIhZ/UPpXXGmyMwTXql9ji/3kc=
Subject key identifier: 7B:A4:7F:B8:83:0C:F4:09:DE:FE:95:9E:93:28:B5:E7:07:B7:98:6E
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 019F197A4A9CF8FB40A60FE321A71BCB6BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 1992
Signing time: Tue 30 Jun 2026 17:01:12 +0000
Manifest this update: Tue 30 Jun 2026 17:01:12 +0000
Manifest next update: Wed 01 Jul 2026 17:01:12 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: Q+XJbKC10gcV4EooI+xt1H0smhgQ3UukdNGPEkQgr+A=)
2: CpV5ifZcjPyGOZZo5Kthc-0aYIE.roa (hash: lgb25S95umOL8YFj63EWLcLTY42lwBMqoGZsvrLzBnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:4a:9c:f8:fb:40:a6:0f:e3:21:a7:1b:cb:6b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Jun 30 17:01:12 2026 GMT
Not After : Jul 1 17:01:12 2026 GMT
Subject: CN=7ba47fb8830cf409defe959e9328b5e707b7986e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:a5:15:7b:2c:18:4e:77:c6:60:65:b9:e6:
56:47:db:ae:3a:aa:a8:5a:e9:9c:26:58:38:50:5f:
2f:de:34:f3:a1:cc:40:30:f3:db:d9:c3:ef:14:87:
fe:07:38:22:22:46:ea:8d:50:57:51:4c:a0:39:6b:
6a:32:7f:97:2f:d7:55:fd:1a:29:9e:bc:c5:80:fb:
7d:5a:93:a8:46:1d:28:c7:5c:2a:03:6e:e9:2d:dc:
58:2c:5c:b2:68:ca:04:43:85:5c:73:09:b6:03:30:
df:21:0f:ff:39:e3:0b:61:a8:22:15:19:d8:11:0d:
87:59:4c:74:dd:06:17:2b:4b:06:06:60:7d:7e:82:
79:a4:c2:7b:1c:b8:49:10:f9:b5:0c:37:b5:68:16:
8c:5a:94:3a:f1:c3:5e:1f:8c:f2:9c:53:24:a5:75:
7c:69:18:57:2c:23:32:bc:8c:08:8d:f9:12:ca:5b:
3d:76:05:fc:3c:ce:cf:d6:b8:a0:4b:b2:10:8f:d2:
f7:28:5c:e7:9b:cd:97:a7:d3:2e:76:0c:be:89:4c:
f6:1d:11:fe:49:a7:70:ed:c6:3b:a4:4b:17:a6:b6:
e1:b5:14:70:4b:19:e2:33:da:19:5b:3c:ee:02:50:
03:76:c3:81:89:21:64:34:83:f1:d6:aa:63:04:66:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:7F:B8:83:0C:F4:09:DE:FE:95:9E:93:28:B5:E7:07:B7:98:6E
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:56:e8:61:c6:e9:51:b4:60:8a:88:05:f7:0b:4a:d7:fd:09:
c8:0b:6a:54:d5:9e:ba:3b:b8:05:34:1c:9a:14:f9:ea:d0:06:
d7:58:80:47:57:30:1f:87:b4:74:70:b4:ec:4d:b4:13:86:18:
78:0f:3b:44:6c:1d:e7:22:9e:f9:13:10:d5:40:4c:5e:40:44:
a1:a3:03:9a:e3:4d:da:4b:e3:f9:42:1a:d1:2c:c8:3d:68:02:
a8:f3:2a:63:94:12:7e:c9:33:c9:e3:e1:e9:d7:b1:34:6f:7d:
71:34:30:57:25:27:67:34:dc:2b:81:8c:23:f4:ce:c8:d0:2a:
b1:c1:19:17:5c:f6:9a:83:cb:11:84:19:b5:80:e4:af:3b:34:
75:d7:f9:cf:5f:30:90:fd:71:50:91:1c:ed:62:36:3f:d7:37:
dd:f2:7f:25:d6:b8:4c:0c:1b:41:d3:9d:b7:d1:e6:9f:fb:d0:
c5:18:04:b1:95:6f:5d:47:5e:ee:bb:69:5c:cc:04:6f:03:e6:
40:35:93:87:76:d7:d5:24:36:92:06:e9:9c:36:9e:f6:c3:f9:
a6:3c:45:be:52:44:22:9f:9a:35:54:cc:65:e8:3b:f8:a0:d2:
ca:23:12:a1:8a:9e:28:2b:2e:aa:8c:7e:b4:30:b8:98:d2:71:
dc:8c:d3:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Zekqc+PtApg/jIacby2vsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjI3N2ZkZjY1ODI4ZWY0MGI1OGNlMTAxOTQ2NTk1NTA3
ZjEzMzAwHhcNMjYwNjMwMTcwMTEyWhcNMjYwNzAxMTcwMTEyWjAzMTEwLwYDVQQD
Eyg3YmE0N2ZiODgzMGNmNDA5ZGVmZTk1OWU5MzI4YjVlNzA3Yjc5ODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+SlFXssGE53xmBlueZWR9uuOqqo
WumcJlg4UF8v3jTzocxAMPPb2cPvFIf+BzgiIkbqjVBXUUygOWtqMn+XL9dV/Rop
nrzFgPt9WpOoRh0ox1wqA27pLdxYLFyyaMoEQ4Vccwm2AzDfIQ//OeMLYagiFRnY
EQ2HWUx03QYXK0sGBmB9foJ5pMJ7HLhJEPm1DDe1aBaMWpQ68cNeH4zynFMkpXV8
aRhXLCMyvIwIjfkSyls9dgX8PM7P1rigS7IQj9L3KFznm82Xp9Mudgy+iUz2HRH+
Sadw7cY7pEsXprbhtRRwSxniM9oZWzzuAlADdsOBiSFkNIPx1qpjBGboQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHukf7iDDPQJ3v6VnpMotecHt5huMB8GA1UdIwQY
MBaAFOIid/32WCjvQLWM4QGUZZVQfxMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2Ut
ODIyYjg0MmMzYzBlLzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2UtODIyYjg0MmMzYzBl
LzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFboYcbp
UbRgiogF9wtK1/0JyAtqVNWeuju4BTQcmhT56tAG11iAR1cwH4e0dHC07E20E4YY
eA87RGwd5yKe+RMQ1UBMXkBEoaMDmuNN2kvj+UIa0SzIPWgCqPMqY5QSfskzyePh
6dexNG99cTQwVyUnZzTcK4GMI/TOyNAqscEZF1z2moPLEYQZtYDkrzs0ddf5z18w
kP1xUJEc7WI2P9c33fJ/Jda4TAwbQdOdt9Hmn/vQxRgEsZVvXUde7rtpXMwEbwPm
QDWTh3bX1SQ2kgbpnDae9sP5pjxFvlJEIp+aNVTMZeg7+KDSyiMSoYqeKCsuqox+
tDC4mNJx3IzTxA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:47 2026 by rpki-client