Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: 5ljVViw//afL87YRfH5IXfP0oNbx/tbiI0znAnC3QVE=
Subject key identifier: 6A:3E:EF:9C:BE:2C:9A:C3:FA:2B:0B:31:48:18:93:38:F3:25:82:A1
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 019F189DFE5F2B471911A9C14CFAE9AB6AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 198E
Signing time: Tue 30 Jun 2026 13:00:35 +0000
Manifest this update: Tue 30 Jun 2026 13:00:35 +0000
Manifest next update: Wed 01 Jul 2026 13:00:35 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: kUVlKsYRcAUEyS1QIiJ1OJNmLxiQ/3RMWb3VL4jFJL8=)
2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:fe:5f:2b:47:19:11:a9:c1:4c:fa:e9:ab:6a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Jun 30 13:00:35 2026 GMT
Not After : Jul 1 13:00:35 2026 GMT
Subject: CN=6a3eef9cbe2c9ac3fa2b0b3148189338f32582a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:08:36:8f:e2:96:ca:cf:e2:0e:9f:c5:41:
77:20:1a:5f:f2:1f:d6:81:49:18:5f:82:bd:c0:16:
e1:a6:a0:10:34:d8:5c:e4:74:ce:f6:e0:7c:a3:1b:
43:28:7f:ce:b8:8f:0d:5a:2c:63:fe:9d:c9:e1:bb:
6c:af:b1:6e:3a:c2:ff:54:b5:4b:d1:5a:d3:ec:65:
ad:76:94:45:4e:54:e1:a6:02:f6:e7:c0:1e:11:34:
ce:5c:4d:40:00:e0:ff:51:fa:b8:0c:53:92:03:2e:
a4:55:8c:c3:05:cc:c8:7e:eb:53:cf:2f:22:33:f3:
79:1c:c9:ea:9c:9a:6c:2e:17:a9:ee:70:96:1c:02:
4a:93:07:b3:56:78:ee:a8:ed:b9:9e:c2:d6:a8:fb:
05:63:e2:11:45:ad:97:73:41:8e:01:c5:b7:5a:63:
be:a3:50:fa:6a:40:fb:85:fc:0a:2a:8b:ba:7e:92:
9f:55:cc:55:b6:bc:11:3c:67:d0:e2:1e:18:43:91:
3e:a8:ef:e9:78:cc:fa:12:a2:5b:80:ae:57:92:ff:
f5:1c:04:5c:ef:c7:c8:e9:86:69:3b:58:87:93:67:
07:94:59:eb:9e:f4:07:3c:ba:5f:04:04:b0:ee:f8:
32:cf:99:a5:b3:68:c5:2c:b5:c8:ed:51:92:32:8a:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3E:EF:9C:BE:2C:9A:C3:FA:2B:0B:31:48:18:93:38:F3:25:82:A1
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:91:f6:ab:99:8d:7e:04:35:1e:cc:74:52:8d:eb:23:62:83:
8d:4a:1b:71:11:1b:e7:90:d8:6f:d6:8a:b5:17:2f:3d:6a:9e:
60:13:a1:6a:31:a4:68:38:f2:20:0c:af:54:0b:a1:8a:19:b5:
cc:08:c3:95:84:19:d0:ae:8b:bd:da:27:37:21:e0:f7:03:c8:
e4:c2:59:db:8d:61:c1:59:36:0b:a2:60:c4:14:68:0f:d1:b7:
4d:7f:32:f5:94:d0:0b:d6:49:10:65:ec:7b:e7:0f:3d:83:1d:
07:bc:81:57:12:5a:45:c1:e0:86:16:b1:c0:62:4c:a0:97:d7:
f7:d5:b8:8c:4b:92:c3:dd:1e:e3:16:b2:ab:87:61:d7:b8:9e:
2b:eb:8d:93:5e:4e:07:a9:e9:16:9e:1a:d9:69:b5:10:aa:57:
25:cd:f5:6c:89:43:a2:41:6f:b0:10:a2:f6:5f:a4:ab:df:ba:
32:0e:ba:84:a7:c0:c2:d5:94:ea:09:dd:e8:dd:c6:9f:bf:28:
b9:52:c0:dc:aa:07:65:f7:d5:92:39:66:f6:18:e7:05:fa:09:
d1:bf:9a:70:fb:a8:3c:0f:d2:12:9c:af:20:9f:98:29:66:88:
9c:45:91:53:e0:26:4a:23:f6:53:25:a3:90:d0:a5:b5:d9:30:
80:32:a3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:42 2026 by rpki-client