
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
File: 4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft (raw, json)
Hash identifier: fAsPAPzoTfLYB5uSgSVKQYUF7WPOxjzYbmUMCl8nrVc=
Subject key identifier: 08:7F:71:68:55:A2:A2:9F:1B:82:F3:1C:3C:C4:19:74:17:AD:E0:A1
Authority key identifier: E0:97:38:5E:91:6D:CD:17:5C:F3:8B:96:5F:C3:2A:FF:30:3C:E4:25
Certificate issuer: /CN=e097385e916dcd175cf38b965fc32aff303ce425
Certificate serial: 019EFD27BCDBBEBE0573A9C58CA1B5217FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
Manifest number: 2A
Signing time: Thu 25 Jun 2026 05:01:40 +0000
Manifest this update: Thu 25 Jun 2026 05:01:40 +0000
Manifest next update: Fri 26 Jun 2026 05:01:40 +0000
Files and hashes: 1: 4Jc4XpFtzRdc84uWX8Mq_zA85CU.crl (hash: EHXNwKB9OrfclhRwPnV6HehoKrXd6s/3i6+LQEERYoc=)
2: hvZKToBFprnrpLaFvP2GP4f29o8.asa (hash: adL+Hr0Myv5tfA8wDedAlh2DFcBTImxKKAjiZtHMF+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:27:bc:db:be:be:05:73:a9:c5:8c:a1:b5:21:7f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e097385e916dcd175cf38b965fc32aff303ce425
Validity
Not Before: Jun 25 05:01:40 2026 GMT
Not After : Jun 26 05:01:40 2026 GMT
Subject: CN=087f716855a2a29f1b82f31c3cc4197417ade0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:a4:1e:fc:f8:5d:3e:eb:85:4a:0b:2c:9d:
33:ec:c9:af:34:1d:cc:e2:bd:44:6e:2c:45:84:f5:
96:35:c4:7a:92:58:21:c1:64:7b:bd:f5:ba:76:46:
96:03:b9:70:1f:06:5f:83:fd:40:5b:0c:c1:5e:c9:
79:de:f3:15:55:15:cc:ef:fe:ea:b3:8b:1a:53:f4:
9d:a4:89:5c:21:99:5b:2d:b9:c0:9d:18:11:8c:81:
73:9e:c8:ce:1b:43:95:36:19:78:c3:43:99:5b:fa:
1c:be:fe:80:da:ae:1f:c4:ca:06:c7:11:d7:28:b9:
52:5d:5f:48:37:56:0e:ff:d2:66:e3:6c:a8:33:00:
cb:b8:bc:d4:6a:ac:4c:b1:5d:0d:24:63:7d:24:87:
4d:69:6c:6e:98:b7:01:c0:60:bb:18:74:f6:c5:75:
80:08:26:22:72:e1:1a:da:2d:73:b9:c5:be:16:62:
78:be:53:03:d3:19:75:3c:41:79:ce:33:d8:03:ed:
ea:60:65:04:25:0c:89:e8:2e:75:4f:53:25:4f:63:
b0:7a:fb:5e:bf:f6:34:0d:82:df:c1:42:05:fa:12:
52:37:7a:3d:70:4b:89:2c:59:48:d9:df:a8:40:f2:
ea:4a:cc:ba:1a:12:88:60:56:e9:6f:e0:c5:a6:ec:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:71:68:55:A2:A2:9F:1B:82:F3:1C:3C:C4:19:74:17:AD:E0:A1
X509v3 Authority Key Identifier:
keyid:E0:97:38:5E:91:6D:CD:17:5C:F3:8B:96:5F:C3:2A:FF:30:3C:E4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Jc4XpFtzRdc84uWX8Mq_zA85CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f751b6-5d86-47ee-8fd2-4c49704565c8/1/4Jc4XpFtzRdc84uWX8Mq_zA85CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ee:df:fb:3f:65:87:5e:28:e0:e6:a3:c3:01:43:61:9a:ee:
16:21:b5:9a:c7:df:62:5b:b1:3b:46:29:95:59:b3:9d:1e:42:
3c:64:03:1c:82:bc:3a:58:d9:d5:dd:66:a1:ae:1d:2e:21:d3:
19:df:98:38:64:e0:8d:6f:5d:f2:e5:55:a9:f1:9a:a4:0a:d1:
94:6f:6b:b6:0c:fb:64:91:42:32:92:b8:27:ea:ce:0c:ed:88:
88:81:61:25:2e:4e:0b:58:12:38:06:67:da:85:ca:5f:94:b6:
0f:10:dd:5d:fd:f8:aa:a5:77:b0:5c:a7:25:7a:7f:16:7e:37:
dd:d6:86:52:86:06:8a:b5:ed:d5:6c:c8:97:9b:d0:17:65:da:
49:a2:68:35:46:b6:a0:5c:c2:1a:be:15:c8:e4:a7:f0:78:09:
ba:bc:c9:d7:2d:43:db:0e:df:10:02:48:c2:81:e4:7e:89:b2:
95:b7:aa:65:73:c3:e8:40:30:76:3b:c6:f7:52:3b:6c:5f:83:
9f:4e:10:5e:cd:d6:18:02:eb:fc:53:ff:67:9c:1c:9e:42:d8:
0c:1b:68:23:9b:5c:71:d1:0b:f2:0e:93:c2:a6:d9:6e:2c:a5:
c9:a4:11:cd:d4:7b:80:c8:5e:49:26:0f:ac:79:d9:86:8f:76:
94:9c:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:34:36 2026 by rpki-client