Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: sqGD3Js3hktaibmEOIM2qFoQ8kGSizEfIsUr85s0DIE=
Subject key identifier: 9A:2A:74:22:A3:37:09:8B:1E:73:7B:38:22:A4:CA:17:F1:0E:6E:78
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019F129C8A3555A2111E6EF3BAEC622DE9C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 14E1
Signing time: Mon 29 Jun 2026 09:01:16 +0000
Manifest this update: Mon 29 Jun 2026 09:01:16 +0000
Manifest next update: Tue 30 Jun 2026 09:01:16 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: lrUvuGW4uUq0jOB7EQQ9+W8SQezsR7OvfZAgjaVDr7U=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:8a:35:55:a2:11:1e:6e:f3:ba:ec:62:2d:e9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jun 29 09:01:16 2026 GMT
Not After : Jun 30 09:01:16 2026 GMT
Subject: CN=9a2a7422a337098b1e737b3822a4ca17f10e6e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:5a:52:35:aa:10:a2:b3:f1:88:ac:f7:7f:
d2:35:60:42:46:8e:a6:d8:3e:62:89:ac:f2:7b:e5:
70:4a:8b:62:42:9d:eb:f0:9e:0f:57:18:cd:f8:cf:
ec:be:f4:5c:37:22:f2:b8:11:16:d5:1f:c4:39:e4:
12:a0:1c:03:b7:79:70:61:ec:56:ed:1c:d8:28:64:
be:52:ca:a6:01:f9:53:f1:19:33:92:82:a7:f2:9e:
ab:c0:a6:3f:1e:40:fc:54:07:6f:3e:7a:5e:e9:dd:
1d:a9:06:e8:8e:ea:7d:09:4d:bf:f3:d1:7b:da:97:
ca:12:c0:db:5e:bc:e9:69:56:0c:d3:aa:ab:e5:28:
39:80:1a:ca:89:ae:e9:4f:c9:5d:56:37:73:79:8b:
63:4a:0a:49:1d:67:36:dd:30:39:c3:f7:1b:e3:27:
ac:dd:ad:05:28:08:7f:79:b5:95:f5:23:8d:05:30:
3f:ca:80:4e:3c:da:cd:c3:ef:a1:9f:aa:41:a5:79:
25:50:30:dc:d6:de:26:56:33:6a:c8:5d:f6:62:98:
18:e0:c6:61:73:86:1e:76:c8:82:40:78:d4:aa:3c:
9e:f5:e2:0d:77:28:9f:19:db:7d:9a:99:8a:3d:cf:
46:d8:bf:fc:47:85:ad:f7:67:ae:a2:21:7d:7e:ae:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:74:22:A3:37:09:8B:1E:73:7B:38:22:A4:CA:17:F1:0E:6E:78
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bf:10:04:74:14:26:57:50:0c:cc:83:3b:ed:05:80:13:04:
de:c2:d2:93:30:7f:b5:58:ad:6f:b1:d8:f3:3e:61:31:d5:43:
79:8b:74:c9:fc:88:43:86:5f:c5:87:4b:5d:0e:7b:cf:f1:88:
09:bb:dd:a5:b6:4f:54:a9:d3:0f:49:4a:aa:f0:11:96:fb:f1:
2c:14:eb:e6:34:86:d2:8c:22:ab:ba:c5:da:42:2f:b7:31:6c:
0c:28:dd:24:08:56:b0:96:62:64:b3:be:84:24:b1:0e:13:5b:
90:a9:24:90:22:58:22:2a:16:97:08:c4:de:dd:75:41:48:22:
89:5b:aa:34:3e:f8:31:6f:01:b0:65:38:e2:cc:c7:9b:70:19:
0a:80:2c:53:fd:48:07:89:64:a5:67:b4:e9:29:f2:3e:8e:4c:
48:37:08:dc:ba:b0:c5:eb:c9:61:44:19:63:d6:45:10:4e:a7:
23:d7:9b:0e:2a:7a:bd:4b:c2:a1:de:8d:e3:92:cc:4b:96:5a:
a3:12:69:d0:c7:b1:8a:0a:f4:99:83:94:17:bd:45:87:12:e8:
75:0a:ec:8a:40:0d:98:eb:e1:46:ef:df:0d:f6:b9:fd:71:d6:
f2:36:f3:19:1a:76:32:dd:81:4d:b1:e1:3a:71:12:ae:00:f2:
b0:f4:65:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:40:35 2026 by rpki-client