Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: UsSrUZh6mK3wnbPjqV/j97NS102mKZw0h8SfntkFht4=
Subject key identifier: BE:4E:6B:72:63:52:A2:72:93:1F:DD:42:96:A0:2F:47:4A:72:47:E7
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 019F189DDDDA1E02F6D0129BAFEE8C362851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 1057
Signing time: Tue 30 Jun 2026 13:00:26 +0000
Manifest this update: Tue 30 Jun 2026 13:00:26 +0000
Manifest next update: Wed 01 Jul 2026 13:00:26 +0000
Files and hashes: 1: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: t4AqZfBtNOoM5HCXJ5VIr6bAKT7NVKG6KdEcC2lDfJM=)
2: JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa (hash: g0z8GxHhTedzHVjLXB39V9yW7Ab4PjyuLrPENMUU7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:dd:da:1e:02:f6:d0:12:9b:af:ee:8c:36:28:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Jun 30 13:00:26 2026 GMT
Not After : Jul 1 13:00:26 2026 GMT
Subject: CN=be4e6b726352a272931fdd4296a02f474a7247e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:02:93:a7:b2:1f:3b:13:21:0f:87:ee:db:
13:b9:a2:72:fa:5c:2d:e7:9c:9a:a9:c2:7c:20:71:
ab:7c:74:57:ff:27:41:bf:91:3a:22:18:aa:76:17:
b8:55:43:92:1f:4a:e3:f2:25:13:98:d6:8d:7a:80:
7b:ab:20:cb:67:e2:75:09:d2:f8:c4:0e:43:2f:e3:
c7:75:50:25:e1:9d:7c:8e:56:7b:c0:a1:eb:11:72:
cc:c5:2a:b3:4b:a4:72:db:ad:57:85:50:67:3c:b4:
b4:4e:91:9b:c5:00:47:b1:03:6f:7c:68:73:c0:12:
b0:01:89:81:40:fb:bd:ab:63:2b:c2:74:7f:8e:48:
30:92:35:08:00:5f:d4:67:7a:cb:51:bf:7d:60:0e:
92:da:51:8d:b1:0f:41:2b:2d:92:da:dd:5d:7c:37:
61:75:7d:96:1d:0d:b4:6e:22:86:2a:c5:f2:52:10:
ee:ec:aa:87:67:4c:e0:60:79:f4:15:16:c6:42:0c:
40:e2:41:15:28:c1:54:05:bd:b2:e2:a3:d9:d6:8b:
ee:ae:51:ca:69:56:4b:4a:b4:84:89:20:07:f0:e9:
e7:eb:7b:e0:14:5f:86:79:0e:36:13:e2:9d:ad:0b:
9c:58:53:b9:1a:81:94:46:08:c1:a2:50:39:19:8a:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4E:6B:72:63:52:A2:72:93:1F:DD:42:96:A0:2F:47:4A:72:47:E7
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9a:70:b8:29:48:63:25:d0:d5:c0:17:e9:d6:4f:dc:da:bd:
cf:8a:f1:14:11:37:c2:0f:32:8e:b8:cb:94:89:0c:a6:56:73:
f9:0a:9e:24:6a:cd:ff:c4:4e:3c:79:a7:b2:81:e2:2c:7d:6f:
10:be:ae:ff:bc:60:cd:22:c6:b8:14:b1:c3:57:64:97:e9:84:
ad:e6:c6:d3:6f:e1:c2:9e:5a:bb:c1:72:b0:2f:a4:3d:0f:99:
88:b2:b9:b0:db:24:6d:6d:cf:8b:c0:5b:e9:35:f5:b7:f7:d0:
4c:21:63:06:62:f1:f0:5c:98:10:fb:a4:07:ad:f6:2e:02:f0:
44:1e:3e:dc:80:43:15:0d:01:0f:27:71:15:f3:fd:5c:a9:18:
55:65:29:fa:76:e9:f2:b8:0b:33:56:54:e4:ea:6f:03:42:6e:
72:37:1a:e8:07:83:63:d0:45:c1:7b:65:df:af:17:92:13:a3:
3f:53:4d:11:04:a0:1a:81:27:d4:ca:7a:2e:8c:d5:08:f2:35:
06:75:f5:ab:a0:d3:7e:2e:6d:d5:cb:83:a9:04:ee:f3:45:10:
0f:8a:2a:d1:6a:bf:56:c2:60:f1:bb:bb:9a:76:86:23:2b:98:
35:67:da:1d:09:be:43:2d:24:fa:48:40:2f:71:09:af:ed:a0:
a3:84:c0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:05 2026 by rpki-client