Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: LZbZsRGE9+rYG3oPEG3agYy0XtVWhMF49Da6hIecaNk=
Subject key identifier: 19:EF:7A:42:32:3E:AC:DA:6D:DC:9E:A2:4C:27:FE:A6:BD:18:F0:35
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 019F189DDC57CDC2C38D2606A20025B096BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0E9A
Signing time: Tue 30 Jun 2026 13:00:26 +0000
Manifest this update: Tue 30 Jun 2026 13:00:26 +0000
Manifest next update: Wed 01 Jul 2026 13:00:26 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: HHELJfdKkQ7qKDZVTWJV3MIS6z0w2uSC4jD2/rfKwUA=)
2: 9WoXYCC1VJqnbGFNUpMF4rAgukA.asa (hash: 4Zq19YZTaukYMmJEdYX0CF4BWbwlExA/FZSk3vxkg/k=)
3: C9aXP0xnVks0GG--bUI7lSn9Og4.roa (hash: 7iquRG4sj7MdDkAUl6cu4d537zzGxzoS3U6EkDKWErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:dc:57:cd:c2:c3:8d:26:06:a2:00:25:b0:96:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Jun 30 13:00:26 2026 GMT
Not After : Jul 1 13:00:26 2026 GMT
Subject: CN=19ef7a42323eacda6ddc9ea24c27fea6bd18f035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2a:8e:f0:4d:66:12:8b:26:5f:f6:e8:84:c1:
11:21:72:5d:60:1f:b7:29:7f:9f:f1:00:30:cd:f8:
cd:c8:9d:f4:bf:a2:48:4a:1c:0c:7c:2d:fd:43:e3:
08:a5:12:56:ee:7c:c4:f1:3f:e8:0d:9d:0f:60:14:
cf:c4:fe:7c:b2:02:32:a2:ee:ee:7e:c8:40:70:b2:
bb:c4:9c:20:16:00:35:0e:25:55:ee:6e:02:63:35:
9b:e3:da:87:5a:31:4e:07:7b:29:94:c4:5d:4f:cd:
60:a0:76:0e:4b:80:24:b2:0f:03:b4:de:67:07:92:
77:a7:e9:aa:20:1f:04:91:e5:42:64:05:49:c1:07:
5e:56:c6:98:44:6d:59:a2:1e:b6:70:40:cc:e4:ed:
5e:4a:c0:88:c7:9d:08:df:e2:a0:0c:21:22:94:f8:
3b:69:a3:5e:d6:11:c8:42:b2:60:57:e8:52:e4:0a:
88:98:68:10:a8:26:00:42:d6:0c:bb:6e:7f:f0:f3:
3b:af:fe:11:0c:7f:76:25:15:3f:13:6a:f0:50:67:
ac:c6:b5:86:40:03:cd:c8:fb:ee:6a:89:71:63:d8:
fe:7c:ba:f7:7c:27:41:7c:ee:67:60:56:bc:a5:c2:
84:c7:8e:14:14:aa:aa:6c:50:f3:db:a1:7f:e6:1e:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:7A:42:32:3E:AC:DA:6D:DC:9E:A2:4C:27:FE:A6:BD:18:F0:35
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:31:e2:8e:f8:e0:53:39:53:92:87:50:c8:7d:73:fc:2c:d2:
3e:2d:14:04:9f:ca:43:db:e4:74:7d:21:55:9c:44:ba:51:ac:
99:ba:be:39:44:b9:46:da:cd:fc:c2:6f:28:95:6e:c2:26:61:
38:9e:07:de:36:e7:a3:2f:b6:71:94:99:b9:96:5a:bf:43:4e:
36:99:1f:66:ed:ea:ce:0b:66:a3:bf:aa:b1:03:0c:24:60:a0:
e1:7a:b3:40:f8:49:05:0d:30:cf:ae:46:ac:2a:0e:60:0d:a4:
8b:bc:d2:21:da:cf:bd:ef:d9:23:34:30:5a:65:fe:07:0b:23:
0d:33:c4:d9:b3:26:32:eb:a6:15:f8:e0:be:59:ab:90:0d:b1:
83:79:33:12:9c:a3:ac:b4:30:0a:5e:7c:ab:eb:06:34:2f:66:
c5:31:0e:0d:3b:7f:63:73:38:9f:4e:a9:05:90:7a:7d:99:c8:
8f:aa:eb:f8:2f:41:e3:22:f6:42:d4:69:b0:65:11:f8:e9:e0:
76:3f:5d:b6:f0:10:81:7e:af:80:9e:d0:5e:48:90:e6:52:2c:
0d:2f:dc:43:60:a9:9c:57:a0:fd:a9:a3:84:d9:40:22:41:e9:
1c:5d:da:a5:bf:4c:87:c6:e2:24:cb:4a:df:66:90:10:ba:07:
a7:bf:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:57 2026 by rpki-client