Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier: 3wGLkQCnS7XBEXPysepOPqxA+g50mLCdJfXAPdo8lC8=
Subject key identifier: 22:A8:E6:33:D5:F5:64:93:4C:04:56:F9:2F:51:64:51:77:FE:67:3D
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial: 019E9B4DBD57DCEC0B056EB7917C01599E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number: 1A48
Signing time: Sat 06 Jun 2026 05:00:23 +0000
Manifest this update: Sat 06 Jun 2026 05:00:23 +0000
Manifest next update: Sun 07 Jun 2026 05:00:23 +0000
Files and hashes: 1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: O6mTYBaFShQwpN5oFzLiQhEi6jwbiStiL3kVitD37jU=)
2: NY6Ok0dfnOmCyxsnLgfAqiMr3Ds.roa (hash: q98kPVGsSgebzUsBANtOwCfH6a2G28dI/IdaQaF9Il0=)
3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=)
4: WJQDqjdU85qKX_z9ajXtlIeeqwc.roa (hash: mlb+3yfxZjm9N1+YQt1lMML9aFyHgMQVkXXsZICY1yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:4d:bd:57:dc:ec:0b:05:6e:b7:91:7c:01:59:9e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Validity
Not Before: Jun 6 05:00:23 2026 GMT
Not After : Jun 7 05:00:23 2026 GMT
Subject: CN=22a8e633d5f564934c0456f92f51645177fe673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:58:5d:fc:06:9a:a9:03:a4:5c:b5:bc:00:
6c:5c:93:5e:8e:ad:9a:2f:29:be:1f:b4:b2:f1:82:
26:ac:5a:df:6c:96:c8:3f:03:63:77:e6:56:4e:1e:
45:42:75:55:56:ec:22:06:45:3e:9f:1e:e9:32:8a:
79:22:6c:9d:15:60:56:64:03:9b:f9:2f:bd:72:5f:
ef:e9:0e:97:a8:c0:56:a0:ee:0b:a2:72:ad:9a:ae:
e1:aa:d4:f1:c7:fe:c9:3f:fe:d4:cf:3b:90:00:a8:
27:87:36:57:64:f2:50:6c:d9:22:aa:c9:eb:23:1a:
40:27:b0:1d:07:fd:c3:14:d8:95:a9:37:dc:fb:4d:
b8:1f:9e:79:66:45:37:72:03:bb:e4:29:4c:21:c7:
b1:e3:17:50:49:cb:20:43:dc:c7:1d:53:f7:66:c3:
94:85:d4:53:e3:b9:13:03:f7:cc:80:de:f6:46:5c:
b6:72:8b:56:4e:e7:55:0f:f3:e5:d2:aa:57:83:f2:
82:2e:2b:e1:76:fc:74:0f:b4:8a:4a:46:e4:72:08:
ce:51:4b:92:a6:b0:a1:0a:a6:41:50:ea:a5:10:c6:
4f:d6:42:9d:f2:6d:98:23:f5:2e:4c:4b:b2:73:3f:
e2:14:56:3f:26:c5:28:43:e1:89:ae:86:49:d1:11:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:E6:33:D5:F5:64:93:4C:04:56:F9:2F:51:64:51:77:FE:67:3D
X509v3 Authority Key Identifier:
keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:94:8f:58:82:86:72:5d:06:19:37:aa:51:a9:21:fb:82:60:
55:43:93:db:4c:8e:93:07:47:59:b0:b1:cb:04:d6:51:8b:56:
f4:f2:97:1f:07:a9:04:97:57:00:21:36:37:da:e7:f4:56:3b:
a9:9e:e1:d8:c6:b9:6a:ac:24:20:57:f6:f5:6c:12:51:50:5e:
67:55:03:30:79:fa:15:ba:17:f2:b3:4d:26:d8:11:18:da:ee:
25:14:f0:c2:12:38:32:a7:f1:24:59:20:32:25:f5:fd:73:e3:
0b:02:2c:83:49:9a:6f:28:d9:f8:6e:d2:6c:4d:aa:f2:d9:6b:
fd:d1:a7:b5:b4:2a:4d:94:bc:75:28:0a:6b:f1:c0:e0:b1:fa:
cc:d3:32:3e:c1:8e:0f:99:c7:1d:b4:16:5a:52:1a:8e:84:c5:
72:b3:11:f9:12:a9:6b:17:a2:be:0d:49:9d:f9:72:1d:2d:28:
f7:ad:30:79:4f:32:e5:2d:cc:bc:80:6f:58:d6:c3:65:3d:0e:
8b:94:7e:e3:9a:4e:b6:b2:e9:48:28:99:d4:9c:44:aa:08:e8:
c2:83:fb:2e:91:c7:98:b9:73:0e:8c:dd:0c:1d:23:39:f9:33:
e8:90:ab:0f:c1:61:c3:be:52:f8:29:94:27:31:06:d6:af:eb:
e0:36:9c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:59 2026 by rpki-client