Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: 6fSTjq6FQjOI9rzaeB2y6Kab2EUK4gidQKPgX1m00ao=
Subject key identifier: 27:4B:4C:D8:86:B8:05:20:DC:65:43:E8:4F:BA:F2:F8:C0:FD:92:64
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 019F17C35786970112DCC96DF54DDD76DBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 09:01:45 +0000
Manifest this update: Tue 30 Jun 2026 09:01:45 +0000
Manifest next update: Wed 01 Jul 2026 09:01:45 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: EHAUmyzhM8QTnByjbfc2tfqnGetePBdaOvIK4Mn61Oc=)
2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:57:86:97:01:12:dc:c9:6d:f5:4d:dd:76:db:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Jun 30 09:01:45 2026 GMT
Not After : Jul 1 09:01:45 2026 GMT
Subject: CN=274b4cd886b80520dc6543e84fbaf2f8c0fd9264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:27:f3:89:16:54:b8:5d:1d:b0:70:5b:c6:
32:aa:d0:74:a8:63:0f:c0:22:41:8a:30:90:14:2c:
81:6f:44:ff:e6:5b:41:22:05:78:2a:08:48:78:5a:
5a:2d:98:b1:33:15:10:b3:0e:9a:db:fc:59:48:e2:
7c:76:09:5d:73:d7:2e:1c:17:a8:dc:ed:c0:e1:6e:
01:d8:be:53:13:d2:3f:7a:55:36:b8:1a:2e:f0:41:
0a:6f:24:6e:ee:6a:82:44:65:b4:e3:70:f6:98:fe:
0f:66:98:98:dc:b0:fe:5e:46:5e:32:3c:ff:1d:e2:
cd:b2:24:b1:02:46:73:50:18:42:79:f0:89:43:bf:
2f:57:fb:ff:22:e6:3d:76:3b:ec:6f:b4:b1:19:f3:
18:cc:c4:b8:85:52:50:f5:24:49:14:df:d2:8b:46:
df:8c:44:c3:dd:e5:07:69:a1:d5:f8:b3:31:4e:07:
01:70:8c:dd:03:aa:75:b1:4b:22:6e:79:dd:e4:f6:
04:67:80:93:61:95:9e:5f:fa:f5:3c:2b:92:87:03:
2c:1d:08:a3:74:2f:05:63:93:c4:44:6e:20:3e:61:
80:49:7e:98:b6:af:d6:27:40:7b:50:4f:50:3f:28:
f6:bd:84:bb:e9:1e:85:62:97:a7:32:5f:e6:56:98:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4B:4C:D8:86:B8:05:20:DC:65:43:E8:4F:BA:F2:F8:C0:FD:92:64
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:50:e1:d7:c7:04:f0:3e:11:49:d8:31:dd:24:d3:b1:a1:
44:b9:47:19:47:64:5f:91:dd:69:8d:c5:bf:30:01:0d:93:69:
70:f1:77:19:36:e2:e4:97:bf:cb:d2:c1:49:4e:38:ef:03:15:
76:61:ce:50:a5:ac:17:c8:29:e6:9d:31:89:4c:a0:32:c9:61:
45:a0:7c:d2:5d:d0:49:fc:6d:ff:39:da:e6:83:e8:f6:f1:cd:
95:70:a9:b2:64:6d:e7:ca:13:61:b3:b6:6d:4d:d5:59:8c:c4:
53:c3:e6:4e:a0:9d:72:08:f4:3a:48:5d:81:23:63:20:ae:26:
82:c5:17:2d:f8:2a:25:2d:5c:6b:37:7f:a8:1e:11:26:a1:94:
fe:1c:f2:81:48:2d:23:73:00:8b:f5:1f:0f:9c:70:b0:f5:75:
10:ce:f8:fe:00:d8:0f:7c:eb:44:e8:c5:a3:95:12:22:f2:7b:
8f:98:24:92:aa:87:1a:f0:d3:55:89:70:71:cd:ab:7f:90:85:
65:b0:84:41:16:d1:ad:1c:6c:c5:b4:fb:f6:8a:07:a9:b6:1e:
15:ac:d2:0a:54:45:de:50:4f:1b:7e:6c:4f:b7:2a:ad:41:f9:
01:9e:5e:22:b5:46:48:05:b0:c7:97:7e:73:b2:ad:48:a5:fb:
36:65:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:04 2026 by rpki-client