Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: J3JM52khh0cb7JlFjHVlsvXpJBJ4XfxZm4QruKZdR4s=
Subject key identifier: 94:C5:AD:FA:09:FF:E2:02:85:77:AE:C5:26:D3:F3:CC:8A:F4:4E:2C
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 019F190C91F0903D08DBAA86FF35196D33B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0DB4
Signing time: Tue 30 Jun 2026 15:01:21 +0000
Manifest this update: Tue 30 Jun 2026 15:01:21 +0000
Manifest next update: Wed 01 Jul 2026 15:01:21 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: y/pVpc8L/wOR7rk7qFF9TKwr83uIs0IGusqz4Lz0SUM=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:91:f0:90:3d:08:db:aa:86:ff:35:19:6d:33:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Jun 30 15:01:21 2026 GMT
Not After : Jul 1 15:01:21 2026 GMT
Subject: CN=94c5adfa09ffe2028577aec526d3f3cc8af44e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b6:33:9e:2f:df:8e:64:98:a4:4a:94:1e:44:
5b:97:d7:5c:f5:a5:81:81:ab:24:ef:b4:d2:73:32:
02:73:03:60:27:c5:bf:f4:5f:fb:89:98:60:79:b4:
1d:9c:54:a0:0d:37:33:6b:c7:f7:17:78:4b:f9:b4:
26:ba:b8:c4:2a:d3:20:49:f9:24:48:1c:2f:70:cb:
e7:37:1c:8d:74:09:ef:83:79:7d:f3:18:8b:54:a0:
33:0a:26:28:0d:59:4e:6f:f3:47:e5:65:c0:fb:21:
52:88:c0:5d:7e:9e:7e:83:b9:8d:2a:6c:d6:ef:a2:
dc:7c:d2:6f:0d:84:ca:78:68:a5:29:a0:51:09:44:
e9:84:2d:75:1d:c1:89:84:10:e2:56:fd:b7:9a:58:
2e:00:85:fe:1d:eb:79:60:00:65:76:2d:03:ed:7f:
28:5b:b2:a2:12:d8:b1:11:5e:ad:f5:7c:af:56:a6:
73:4e:69:97:2e:49:ff:05:97:68:8e:94:9f:a0:6b:
1f:28:53:bc:8f:8f:3e:b8:3b:88:65:5a:18:47:21:
3d:b7:d1:1e:b6:18:2a:23:10:2b:bb:73:ef:c7:09:
2a:0a:64:4e:c9:33:4f:4d:ce:e2:b8:8a:82:e4:d9:
2f:27:b2:b0:21:f8:fa:8f:cb:f0:45:72:22:15:d5:
d2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:AD:FA:09:FF:E2:02:85:77:AE:C5:26:D3:F3:CC:8A:F4:4E:2C
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3d:6f:75:d4:16:29:4f:b0:75:8f:66:d9:e7:e4:85:61:91:
3a:f9:f3:6d:6a:b9:8e:8e:9b:48:3b:5b:df:0d:0e:7f:5d:80:
7d:c2:f3:89:3a:bc:84:c3:b4:ae:18:9e:a7:6c:87:87:c7:9d:
24:c1:0a:a3:c2:96:30:aa:f0:cf:cc:79:c9:33:c0:f7:10:87:
ff:72:e7:38:1e:43:68:1f:b6:aa:fb:aa:ee:1e:a7:4f:98:42:
16:71:fd:f9:53:b0:13:33:e2:bd:1e:43:01:66:e8:c5:cf:98:
e7:8a:67:fb:df:ba:c0:f8:16:a2:63:73:e3:72:ba:9c:51:a9:
06:ec:30:08:28:1c:e9:5e:1c:f1:8c:41:b0:a0:63:82:18:be:
62:ed:af:37:6f:88:36:e3:f8:80:f9:03:1a:7e:14:93:b0:2a:
8e:1f:c6:9e:78:eb:34:10:7e:95:44:bb:2a:17:65:e7:2c:2c:
4d:5a:bd:a1:b0:18:77:b6:97:2f:16:32:13:f1:bd:fe:27:f9:
19:ce:cb:e9:d0:e5:f1:f1:a3:53:90:2e:54:fa:6d:90:df:25:
5a:8c:4d:7c:ca:5c:d2:ae:60:d6:34:ea:cb:d6:54:10:f8:fb:
b1:f0:84:93:3a:43:d2:2c:68:20:ff:ed:56:c8:04:de:5d:c7:
05:7b:a0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:34 2026 by rpki-client