Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: 8kn1SohRuQ3qwSNy19PQArS+iGU0izjuT5M8Fy5c1kI=
Subject key identifier: 8B:97:9E:74:F3:54:EA:A3:CB:02:0F:03:9E:D6:2A:4B:D5:75:07:FC
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 019F18D6B22C933FF3173C6AA37CF88F447E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 14:02:31 +0000
Manifest this update: Tue 30 Jun 2026 14:02:31 +0000
Manifest next update: Wed 01 Jul 2026 14:02:31 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: KK8LAE78x1CzQdfBFEUpEHAkHVStmjt59TmtTh/IpTo=)
2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:b2:2c:93:3f:f3:17:3c:6a:a3:7c:f8:8f:44:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Jun 30 14:02:31 2026 GMT
Not After : Jul 1 14:02:31 2026 GMT
Subject: CN=8b979e74f354eaa3cb020f039ed62a4bd57507fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:0d:27:53:46:47:dc:6b:f0:bd:ee:6c:64:
08:87:d4:a3:cb:fb:07:8d:df:16:43:4c:d1:24:e5:
7d:8b:ca:78:3f:ff:14:97:21:82:d6:33:6e:cb:8e:
23:6e:9d:e5:2f:a5:3e:d1:43:69:a7:f3:03:fd:5d:
fa:45:54:10:1f:51:76:c4:8d:15:58:f2:69:5b:ee:
30:e6:5e:43:f3:50:5b:76:24:88:5c:a5:8d:be:47:
1d:11:2f:a6:c9:35:ac:e3:0f:c5:25:a5:87:4b:e5:
c3:63:8c:2c:90:55:cc:30:07:7b:9c:20:9e:a9:c6:
21:83:f2:46:9d:f2:b4:8e:c7:4d:9f:b0:ad:b0:e5:
f8:2a:1a:4f:3d:e0:07:ff:a8:0e:b6:95:05:a4:5b:
19:a7:39:1a:5d:29:fb:0f:57:10:cd:73:78:ea:ad:
4e:fe:1f:cf:08:5c:92:45:3e:cd:6a:04:db:68:dd:
ec:3d:87:6e:81:2d:56:24:de:59:c3:85:8f:fd:5c:
6e:a5:c5:ff:0d:c2:a6:ae:32:ad:f0:8a:5a:b3:63:
82:c9:97:27:0a:ae:c0:b9:ee:26:57:11:a1:68:8f:
5a:04:33:22:53:ad:0e:ec:f8:48:71:8d:d0:b9:a2:
4b:a9:ea:e9:c4:4b:86:e1:d0:8c:0b:19:9b:13:84:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:97:9E:74:F3:54:EA:A3:CB:02:0F:03:9E:D6:2A:4B:D5:75:07:FC
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6f:8e:f1:4f:d8:6f:c1:4c:62:7b:ae:96:38:ce:a9:f8:fb:
ab:05:12:88:49:dc:91:eb:c2:34:b7:c2:b7:31:c5:de:62:ef:
43:de:0e:a4:15:64:ad:31:43:f4:97:3a:70:c6:db:e5:f9:9a:
d7:db:7d:c8:e1:42:79:87:d3:6f:4e:f3:cb:e7:0b:0d:9d:14:
66:ec:08:fe:eb:9d:47:6c:c6:7c:c4:d6:8b:58:dd:a4:8d:74:
0f:8f:c0:b2:ef:8f:be:99:0f:a1:1f:c4:b0:df:a2:f3:26:cd:
23:c9:09:7a:1d:7c:b1:b3:39:1f:af:1b:9e:24:8f:b3:aa:c1:
d5:7b:cf:59:eb:a4:c1:f5:8c:1a:b7:b3:02:cf:01:c5:ea:a0:
a1:7a:8a:09:87:fd:91:9d:f5:1a:13:01:c5:03:22:78:45:c6:
3d:1a:9d:91:f3:29:de:db:ae:1c:1f:04:2f:a8:1b:c3:7b:ee:
60:1d:c8:0a:24:66:7c:0b:6e:56:bb:a9:e5:a7:f6:8b:6b:44:
da:b8:02:06:38:6f:77:92:04:fe:7d:e1:92:b7:3d:98:83:3c:
70:46:d2:d6:c7:10:01:e9:02:6d:66:90:2f:40:f1:da:e7:d7:
63:6b:b8:e7:c3:4d:bb:52:4a:da:a7:82:70:63:e7:91:37:a0:
db:fe:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:13 2026 by rpki-client