Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
File: f4_zrPyu0gPpbekasIxu-2QDGmM.mft (raw, json)
Hash identifier: bJXlQbjBwvjLFVMX8xi5Ybx4TTuIpXB44IkCqdTIcmE=
Subject key identifier: 1D:EF:85:E3:8B:F1:72:C3:B7:34:76:4E:20:8A:ED:1F:92:FC:0D:B1
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 019F10E51539F7AC6C97D1818DF4A97A1E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
Manifest number: 3C
Signing time: Mon 29 Jun 2026 01:01:16 +0000
Manifest this update: Mon 29 Jun 2026 01:01:16 +0000
Manifest next update: Tue 30 Jun 2026 01:01:16 +0000
Files and hashes: 1: f4_zrPyu0gPpbekasIxu-2QDGmM.crl (hash: 8J4ubIRGjoad+5/HgUd6srMQjjPlotQOgDeJMRERld8=)
2: lf4UXwwCiStKMPFSMPyNM0g2zZ8.roa (hash: QmN5YcqljhCgdP2JOMV6nb5xM3S3y5gCkyo63tNhBUQ=)
3: yLl9hut5-79pC7adyuGSTuX_5sU.asa (hash: 61Xj0gQa/Th7F++DmhWcMRLvfxIvqCNmmXnO1BzHxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:15:39:f7:ac:6c:97:d1:81:8d:f4:a9:7a:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Jun 29 01:01:16 2026 GMT
Not After : Jun 30 01:01:16 2026 GMT
Subject: CN=1def85e38bf172c3b734764e208aed1f92fc0db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:25:8b:72:2e:38:d8:0a:f4:72:e7:70:05:
81:c7:96:37:77:7d:9f:0f:90:10:6a:ce:12:19:1b:
31:28:19:2c:b1:79:d1:84:a6:ba:ec:8d:2a:9f:6e:
24:df:06:c6:38:cd:19:37:f6:28:0a:d5:6d:3f:c7:
19:1c:da:10:a3:99:54:07:0b:55:59:a1:2c:21:3b:
54:db:42:fc:01:51:8f:8a:bb:41:4e:e1:4e:9e:0d:
ff:4b:85:78:b1:fc:9b:bf:17:d4:ff:78:e7:ba:f1:
fc:b1:19:d9:bc:66:15:2d:d9:da:7b:16:dd:81:4d:
51:f3:f9:17:5c:0f:c0:ba:9c:90:dc:6b:87:ec:9d:
67:e3:7f:e1:08:99:04:f9:55:c0:fe:de:66:b8:cb:
bf:f1:fa:e6:88:a4:a0:84:fc:e9:51:a0:15:5d:9b:
d6:a4:f8:67:e1:c1:01:ef:50:38:f9:0c:06:40:47:
29:07:f6:66:61:d8:a6:22:4b:13:c8:c1:fa:35:44:
88:c0:8e:c9:ca:20:1b:23:6e:1b:63:46:02:f6:1f:
bc:3c:9c:5d:ff:97:ee:d6:0a:65:cc:29:49:87:12:
e5:1e:21:9a:eb:ea:90:22:f2:ac:1b:40:d1:eb:a6:
e2:45:6e:a9:37:ff:dc:1b:27:ee:66:f0:8d:5d:a7:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EF:85:E3:8B:F1:72:C3:B7:34:76:4E:20:8A:ED:1F:92:FC:0D:B1
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6c:49:d7:b9:da:28:ee:f1:b8:b5:34:a9:fd:57:a9:09:24:
d7:6f:ec:67:1c:cd:00:d5:35:f7:98:d5:01:14:47:93:31:d2:
2b:a8:21:10:2a:b1:aa:8f:6a:97:29:d9:ec:65:ca:df:31:8b:
e2:16:6b:7f:ce:04:31:41:28:af:6a:ff:f0:62:d1:ee:22:96:
20:5c:3a:2b:a2:0b:3c:5c:7e:9a:9a:19:a2:3c:e7:9c:c1:bc:
6f:f0:2b:15:20:5f:6b:33:4e:37:ee:02:42:71:83:87:ab:f7:
e0:ac:de:ce:29:9a:02:24:77:de:c5:81:75:5d:c7:ce:75:c5:
1b:a4:a2:51:82:fe:57:3d:4d:8f:32:e2:52:6c:9f:98:4e:55:
63:99:0d:fc:46:de:92:1e:e2:3c:c5:13:30:c4:53:20:14:6b:
c6:f1:d9:58:39:53:30:bd:09:d1:c3:d4:c1:56:68:c1:e3:1b:
f6:8f:77:84:f7:8a:d5:ba:25:75:54:81:a3:3e:c0:37:ff:14:
df:9a:df:e5:eb:5e:4a:3c:f6:02:c4:a6:9e:3b:3a:7d:70:75:
00:03:19:55:19:24:8f:53:43:4d:22:fb:bd:cd:00:62:48:27:
30:a9:7f:92:9b:49:d9:b9:7d:c2:53:51:2f:9b:c7:be:66:a6:
4d:90:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:36 2026 by rpki-client