Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: VvsbBdvxF5PBsw1nekscM6yPPnG9uHZPN63hKUJCjBw=
Subject key identifier: 3E:55:FD:0C:51:0A:6F:C7:F1:4D:2E:50:7B:DB:3B:62:1F:7D:09:C2
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 019F190D0E9C24B0374BC0A062C6E69368D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 0843
Signing time: Tue 30 Jun 2026 15:01:53 +0000
Manifest this update: Tue 30 Jun 2026 15:01:53 +0000
Manifest next update: Wed 01 Jul 2026 15:01:53 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: Z+CBIfHtxUd50L/LbIv+rLNlddyOaoLBajgM0wmBUeM=)
2: 6-2FD8HR51guZuZo3woN4IVR9zc.roa (hash: PJc3A8dXSGr4yP32dRfCtlI52+k/p1Mtsy/ZQcI6iOs=)
3: X7BmyTsEbGnFLW3J_leT1himypU.roa (hash: YLQzVzV/7MjHj/da8FwrBCVQuruzlxfvIrqTRIBeu1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:0e:9c:24:b0:37:4b:c0:a0:62:c6:e6:93:68:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: Jun 30 15:01:53 2026 GMT
Not After : Jul 1 15:01:53 2026 GMT
Subject: CN=3e55fd0c510a6fc7f14d2e507bdb3b621f7d09c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b6:62:22:31:30:4b:59:9a:ab:a2:6b:1c:87:
cc:f9:7e:97:0b:7b:05:8e:a7:6d:ba:70:2f:2c:5b:
f6:31:c9:f1:07:b6:74:ad:77:21:ef:52:1b:31:6f:
17:b0:ae:e4:27:c3:34:83:96:60:f4:1c:f7:d5:bd:
ef:ab:cf:a9:be:09:99:0d:ec:87:cf:12:71:b7:0b:
e7:64:0a:e1:3d:00:bc:3d:56:68:ba:b2:66:c1:28:
73:5e:0c:85:14:7a:49:e9:79:19:cd:25:8b:b6:09:
1d:47:ab:dc:19:e8:2d:43:7c:52:70:65:26:dc:69:
c8:ec:c7:9c:f7:19:40:40:c6:8c:7e:39:2b:fb:79:
58:43:02:1d:89:5d:a3:78:d1:ab:91:f6:08:63:d6:
a5:81:ee:63:82:5f:c4:0a:42:b4:47:c8:5e:e3:fb:
39:cf:a2:4a:67:a2:8e:f2:ca:a0:ad:9d:cb:1a:01:
7a:bf:72:8b:9f:84:12:ea:db:8b:ab:a2:ee:47:93:
db:18:9d:c0:9d:0c:68:3e:29:71:bc:5a:77:bf:25:
6a:e5:5c:5a:a4:12:72:13:cd:57:71:e9:89:68:26:
a1:4d:85:2e:a1:f4:6d:83:e2:9e:0e:4c:af:52:cd:
e3:d3:9e:ce:55:93:69:88:d6:7a:78:8b:a1:9d:d0:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:55:FD:0C:51:0A:6F:C7:F1:4D:2E:50:7B:DB:3B:62:1F:7D:09:C2
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:46:a1:87:87:8d:b1:cf:9a:7d:41:81:c0:d8:ee:6a:d9:a6:
47:9e:4e:3a:bd:78:09:98:ae:e9:16:40:1e:36:c3:49:82:03:
e8:28:fc:a5:44:7c:45:ee:e6:9b:d9:55:26:55:ec:03:68:c9:
a5:ec:9b:37:22:f8:df:7a:6d:e0:6c:31:b5:e8:9f:bf:f3:22:
61:a7:e9:5e:7b:02:91:b6:b2:a1:48:15:cb:79:ce:42:3f:c5:
1a:81:56:f3:32:6b:3d:cc:bb:ad:cf:75:9e:4a:5a:96:59:cd:
71:cf:d1:35:20:e3:31:03:b3:3f:5a:9a:c7:dd:a6:c8:c3:cd:
8a:5b:56:da:a9:e9:c6:b1:ac:1a:0b:5d:e3:3e:92:1d:30:f6:
8b:37:3e:b0:b6:a7:3d:0b:1b:bd:dd:1c:bd:d1:bc:de:e3:00:
27:f5:37:42:13:eb:0c:ff:86:5e:e9:2e:ad:8f:7f:14:47:99:
b8:3b:6a:af:de:83:88:ad:ed:0c:74:c3:9e:f8:c5:bc:99:82:
e6:3c:31:1a:80:52:8c:a9:7c:85:25:9a:f7:da:25:67:4e:7e:
ec:f5:52:e9:b6:66:60:7d:8d:e9:d4:35:25:a4:d1:a1:92:c4:
22:b6:d8:c1:0d:b6:3c:c1:ab:4f:d2:ba:66:39:70:16:83:a1:
48:64:bf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:28 2026 by rpki-client