Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: v6DucaNNX5Y8/8lqQ8daMdzxRc9vJN00XgX+4fBi5Ag=
Subject key identifier: 3E:C2:BE:B6:A8:8A:2E:15:26:C6:9D:51:4C:F5:2B:7E:15:75:C7:E7
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 019F17C335BFBCA8737FE11D997D5C8ECBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 0BFD
Signing time: Tue 30 Jun 2026 09:01:37 +0000
Manifest this update: Tue 30 Jun 2026 09:01:37 +0000
Manifest next update: Wed 01 Jul 2026 09:01:37 +0000
Files and hashes: 1: 1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa (hash: sbcGPB93z3YNWrVB4YHHakteB4jeVAtpbXTGFYuXZTU=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: z6Y2OVtva6a0qcdrNwJdL6kv2tj2ssQpLTCDM/E8O1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:35:bf:bc:a8:73:7f:e1:1d:99:7d:5c:8e:cb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Jun 30 09:01:37 2026 GMT
Not After : Jul 1 09:01:37 2026 GMT
Subject: CN=3ec2beb6a88a2e1526c69d514cf52b7e1575c7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:23:08:35:f1:62:14:6d:89:ae:67:a1:af:
39:4b:cd:9e:17:15:1a:a3:6a:e0:22:bb:a0:21:aa:
c9:92:87:59:2f:67:a9:0f:26:a9:c4:ff:bc:c2:03:
79:cd:9f:2f:50:b5:9b:2d:10:a1:11:59:26:17:de:
56:cb:98:43:24:fa:1d:eb:aa:16:39:9e:10:96:f8:
80:82:80:e7:81:e6:76:f1:f6:c3:96:20:c1:d3:be:
88:51:8f:02:1d:12:80:95:eb:73:40:ab:23:8a:83:
cd:3b:fa:b0:14:a2:c5:41:bf:53:9b:b1:61:50:d9:
2e:51:ea:e6:5d:f7:c2:ec:46:07:da:40:ba:eb:1d:
51:f1:57:ab:1d:e0:25:30:bb:56:c4:b4:3d:7f:be:
25:d5:6a:b4:fe:53:fc:49:a5:d2:c9:69:16:db:e0:
b6:53:d5:6d:b4:7e:a0:aa:6f:0e:16:97:d4:76:22:
b9:37:97:d1:8a:c6:1f:58:0c:19:9a:ca:56:f9:b8:
7a:65:c1:78:1f:32:92:bb:f3:95:5b:f6:10:c0:ae:
4a:b5:0a:94:fe:30:d9:94:ce:4b:d4:3e:a9:e9:4b:
3f:c0:14:de:0a:0c:b2:12:51:90:6b:04:1b:56:b5:
93:34:a3:2b:30:60:8c:98:9b:09:51:67:d8:4d:5b:
17:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:BE:B6:A8:8A:2E:15:26:C6:9D:51:4C:F5:2B:7E:15:75:C7:E7
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:40:99:a5:8a:fd:59:cf:ba:64:08:58:c9:e6:06:f2:89:41:
0f:c3:48:c6:24:bd:46:2f:e9:68:a4:53:56:29:7e:33:1a:6b:
b2:76:3f:26:bd:38:f6:c0:3e:4f:d8:60:89:a7:ca:1f:7b:c5:
cb:24:91:53:9b:44:30:6e:81:52:8e:d5:5e:45:ab:0a:17:9c:
ad:13:8e:c4:aa:74:20:cd:83:2a:28:c5:65:7a:df:cf:58:56:
43:45:ed:4e:8b:25:50:bc:3b:59:86:d1:2c:3a:81:bd:16:13:
7d:ae:8a:45:ad:73:95:2f:83:31:1c:c6:32:ba:77:98:dc:1a:
fe:ee:b4:b7:9c:5f:26:9c:7c:6b:b3:6e:0e:92:74:17:51:9f:
e2:7b:ac:bb:b5:36:7b:56:b1:bb:ca:ca:08:7e:0a:eb:d0:30:
e1:c3:6a:e6:55:1e:9c:9c:aa:32:1d:d6:3d:f7:2b:64:b4:1d:
af:6c:42:38:20:17:32:78:e7:dd:9e:c6:a6:40:88:45:74:b8:
72:97:b9:3a:77:9a:3f:18:dc:6d:27:3e:89:73:10:47:f8:00:
33:2e:57:09:ba:aa:69:25:60:bf:25:c4:31:aa:d4:dd:15:f1:
3a:5a:20:32:6d:a1:cf:2f:cd:d1:56:8a:d3:88:46:e5:c0:dd:
5e:e1:75:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:05 2026 by rpki-client