Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: ASs4nC/F19Ib/SrrdyRghFnGzFHPsqt1tgm7xRp/YCc=
Subject key identifier: 4E:2B:C0:E1:D0:D6:24:A8:7F:A0:3E:9C:D0:CB:D3:F7:C2:21:63:6B
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 019EE7B26D96FBF9B163C7B437C54E7F3719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 04BA
Signing time: Sun 21 Jun 2026 01:01:30 +0000
Manifest this update: Sun 21 Jun 2026 01:01:30 +0000
Manifest next update: Mon 22 Jun 2026 01:01:30 +0000
Files and hashes: 1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: XLaGQ2n9rPxMwXds8eVySReMNoAPQrxs6DV4Q2sDHYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:b2:6d:96:fb:f9:b1:63:c7:b4:37:c5:4e:7f:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Jun 21 01:01:30 2026 GMT
Not After : Jun 22 01:01:30 2026 GMT
Subject: CN=4e2bc0e1d0d624a87fa03e9cd0cbd3f7c221636b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:86:ba:d3:3d:2f:c6:2e:c1:ce:c5:bb:f8:
b2:5b:35:c1:ff:e0:59:13:21:a2:0e:4a:1e:2c:08:
79:4e:5d:90:5b:16:8e:94:be:99:91:23:58:97:93:
53:fd:c7:83:57:a2:23:c6:10:83:b5:8c:cb:9a:6b:
bd:d2:bb:45:92:31:a0:70:53:e6:c4:fc:de:f9:70:
73:31:b5:95:e5:88:01:f2:94:1e:0d:cf:3d:dd:d2:
68:f6:73:2d:2c:19:7e:14:9e:d9:35:e1:19:12:7c:
36:2c:9a:b6:e3:28:94:31:07:0e:ab:56:5e:01:42:
92:db:87:da:be:2d:b9:58:ef:f5:37:b3:1f:9a:b9:
cb:5e:16:69:eb:74:d4:be:c1:34:c7:87:28:be:c7:
80:86:69:fb:a7:cf:a8:e6:4c:8b:d5:0d:58:e7:96:
9d:5a:cb:9a:64:88:1d:10:28:aa:de:c5:d6:e6:df:
39:66:b9:b1:ed:c3:23:ad:db:8d:20:24:fb:9b:15:
e7:cd:54:66:66:93:26:9f:fc:18:b3:f8:55:1e:4e:
c9:c8:31:d3:ed:51:3d:b3:e5:ad:94:c7:43:9d:46:
42:ee:7e:4a:24:15:93:cd:6b:c9:eb:97:8c:bb:a7:
22:32:14:75:3b:a7:41:15:df:b3:f3:6c:4c:a1:c1:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2B:C0:E1:D0:D6:24:A8:7F:A0:3E:9C:D0:CB:D3:F7:C2:21:63:6B
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1e:d5:2d:29:98:f3:09:6e:49:fb:12:35:9c:7d:3b:cd:03:
06:c0:44:d9:1c:43:f4:2d:f7:cb:b3:e5:52:f1:39:16:13:ed:
de:7a:64:5d:85:8a:c0:20:5b:99:30:2c:35:fe:23:27:75:81:
70:22:82:80:ff:1a:d7:fb:ed:a0:a6:92:77:8a:e3:65:f3:c4:
15:16:7a:5f:b8:8e:e3:c2:d4:77:e7:44:d3:38:92:6f:0a:cb:
7b:1d:63:c0:e3:8e:74:aa:cb:27:25:2b:c1:54:89:86:93:25:
3d:ec:1c:f9:44:05:82:c8:bf:51:08:34:2d:a0:d7:c8:1c:89:
7d:2a:3a:b5:cf:53:99:cd:99:40:11:a7:c1:07:10:fe:c9:85:
fb:76:cd:1a:01:d4:d2:19:65:94:04:e2:a3:d6:b7:f0:d8:a6:
73:f6:01:98:0f:c7:e3:db:33:23:ac:22:51:6a:dd:d5:91:c0:
3c:b4:60:3e:94:ac:c6:7e:dc:37:4e:14:0f:3a:49:37:98:84:
97:3f:c1:5b:ef:e5:8e:5f:04:a6:36:8a:0e:c7:c9:5b:0d:f6:
c2:ec:3f:2a:f1:d1:6d:b6:3e:7b:38:b1:47:28:78:73:b5:ae:
6b:99:0d:cc:a7:a9:a1:4f:a7:df:42:21:35:a3:ac:22:72:e3:
af:d8:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 11:21:01 2026 by rpki-client