Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: am154S9xzx3GgqFfe6vPsmS6eUU4Ew0H2ylIClAn940=
Subject key identifier: 8D:82:4C:EC:DB:A8:CF:EB:F2:F2:52:B9:86:CA:B5:17:7E:C0:29:56
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019F17C2A2D6C4A220D29E6C38E9963E865E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 1346
Signing time: Tue 30 Jun 2026 09:00:59 +0000
Manifest this update: Tue 30 Jun 2026 09:00:59 +0000
Manifest next update: Wed 01 Jul 2026 09:00:59 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: TilqzntwD4OzpabR8i0d3CRwQNbI6q0seRa+NZFpBcs=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:a2:d6:c4:a2:20:d2:9e:6c:38:e9:96:3e:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Jun 30 09:00:59 2026 GMT
Not After : Jul 1 09:00:59 2026 GMT
Subject: CN=8d824cecdba8cfebf2f252b986cab5177ec02956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:26:01:4b:fd:ab:a7:e0:1d:5f:13:9f:d2:
78:c0:33:b3:b8:ec:8d:77:dc:f4:1f:1f:d9:4d:e6:
b6:71:a4:63:37:f9:79:c1:f1:33:4a:9d:cd:2d:8a:
dc:1d:9f:53:6b:55:6c:5c:4a:9d:8b:23:1c:fd:8b:
f0:e2:b1:23:26:32:8d:85:05:1b:e3:e6:7e:2d:fa:
18:5e:0b:a6:ee:98:a7:b0:7d:e4:bf:b5:29:2c:9a:
cc:08:ce:c1:9e:19:e9:48:68:7d:8a:b9:13:19:96:
76:52:cc:e9:29:2e:c8:db:6c:03:87:6a:ce:61:bf:
65:3a:f4:fd:0f:d2:a2:87:08:9e:33:48:a5:0f:17:
fa:6b:e3:79:8f:9f:44:98:43:7b:21:6d:1f:47:b0:
ec:07:4c:37:ce:b6:25:20:7f:59:e3:c1:7e:f4:68:
13:45:5d:a0:18:22:a0:47:da:be:a4:a3:bc:de:fb:
c3:15:ce:7f:e8:9a:7e:d3:a3:ba:8d:56:0a:03:4c:
ee:05:33:38:f9:df:07:d4:e8:9b:5b:44:a6:23:1a:
8e:3d:d8:39:ce:3c:b9:c8:6f:62:da:da:9b:32:8d:
cb:93:09:3d:a1:c0:a4:2c:f4:00:7e:6c:cf:78:7b:
b3:63:c2:75:48:14:3c:15:1a:62:b7:ab:1e:a0:7d:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:82:4C:EC:DB:A8:CF:EB:F2:F2:52:B9:86:CA:B5:17:7E:C0:29:56
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:06:cd:a5:4f:6a:a7:11:bd:0a:67:9f:8f:29:40:7c:82:33:
73:48:07:d6:25:ef:c1:36:40:8b:f5:13:e6:a7:53:23:b6:25:
e3:c8:35:43:9a:b8:40:ed:b3:5e:16:ac:ee:2c:cf:22:2f:3e:
3c:86:06:aa:9c:16:57:95:36:d1:75:00:63:c5:ee:f4:5c:6d:
ad:2f:b3:d5:a3:1a:b5:75:40:87:02:0c:42:21:5b:96:43:79:
4f:21:86:4f:7c:2f:2a:f5:7b:fe:f1:e5:17:02:7b:c7:a4:13:
d3:15:26:05:5a:35:b0:76:fe:72:80:99:e2:c9:05:21:03:66:
9e:2a:30:3d:06:f0:e7:28:e3:24:4e:3f:a0:af:fb:cf:70:d8:
d8:34:54:a3:8e:47:49:94:8a:e8:79:31:f3:dc:70:24:db:85:
50:fe:22:02:84:a4:49:01:39:0e:33:2c:87:f5:57:89:3c:b4:
c8:f4:b3:56:25:28:87:d4:4f:1c:40:a2:48:dc:cd:69:7f:f6:
33:0d:4d:7b:2f:a1:99:a4:29:78:04:16:3c:4f:8e:11:eb:88:
46:99:79:e7:26:3b:60:69:68:4b:4e:8a:02:b7:8d:5d:4e:07:
bb:a1:59:66:fe:b0:b1:29:a2:75:68:b8:de:1b:f8:e4:ef:b5:
41:16:aa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:14 2026 by rpki-client