Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: B+9QqLkuP2D9BT1xgvsXxuAzdJrU78XEgiv816zuY+k=
Subject key identifier: 41:81:B2:B7:05:83:C5:39:F4:93:1F:00:A1:A3:B9:13:A0:18:8D:D9
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019F18D65EF6659C7C3F37985457A8A1FE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 14:02:09 +0000
Manifest this update: Tue 30 Jun 2026 14:02:09 +0000
Manifest next update: Wed 01 Jul 2026 14:02:09 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: USVKWWqjQqYzICkvr002GMNypYLugHZ4mPBqf+Br28k=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:5e:f6:65:9c:7c:3f:37:98:54:57:a8:a1:fe:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Jun 30 14:02:09 2026 GMT
Not After : Jul 1 14:02:09 2026 GMT
Subject: CN=4181b2b70583c539f4931f00a1a3b913a0188dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:a7:99:07:0b:12:a3:91:05:66:54:40:e6:
58:f2:ef:29:b1:79:74:c6:f2:14:1d:45:99:33:4d:
32:26:60:ee:e8:ea:5f:5c:e4:bc:ac:16:4c:65:5d:
d6:b4:44:5c:05:6c:e6:a0:36:2d:5e:5a:07:8a:b8:
f3:2d:24:36:26:33:9b:e6:7b:57:96:89:b1:5d:25:
6a:42:ea:d0:59:5f:cc:ce:e2:d2:6d:e2:16:18:11:
b5:50:18:1b:95:04:90:5c:94:f0:fb:2a:c4:25:70:
8d:f0:2c:1b:ee:7c:fc:d3:18:2a:9d:0a:92:2e:e9:
4e:85:0c:e2:b5:67:24:8a:cd:dd:99:95:d0:5b:1f:
86:31:4b:c8:a5:8e:1a:03:2d:a1:68:76:34:bc:42:
6e:04:2b:c7:c8:a8:7c:7a:04:7e:6d:0a:21:c7:19:
e5:7d:a1:05:6f:54:cd:98:29:f7:4a:28:82:81:b7:
73:48:b4:e3:e0:af:25:94:91:a1:dc:09:fa:f2:b5:
ba:2a:11:18:26:4d:c9:b1:c2:41:b7:11:14:f5:a9:
32:00:65:cf:49:1c:b4:d3:9e:0a:70:a7:c2:48:93:
ca:6d:d3:33:ca:69:76:45:1f:5b:fe:9b:99:bd:6b:
cd:69:42:f4:03:4c:14:99:8a:94:fa:09:5f:6f:80:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:81:B2:B7:05:83:C5:39:F4:93:1F:00:A1:A3:B9:13:A0:18:8D:D9
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0f:c3:f7:e8:05:d3:7e:fa:f0:8e:d9:61:ad:f2:b1:4d:39:
f5:8d:11:67:b1:4d:80:26:4e:a2:36:92:37:30:22:68:8a:3d:
71:8b:36:78:66:d4:f3:67:c1:35:1f:5b:e2:55:ed:27:b5:48:
06:17:09:2c:f6:ed:96:f7:c1:18:23:30:75:b6:e2:b7:d0:58:
b5:14:eb:c3:e0:70:42:fd:3f:40:a5:c8:49:52:72:f7:af:97:
57:4f:2a:6c:a8:5c:25:6e:86:84:38:fe:bf:b5:61:52:53:12:
32:2e:56:3b:43:64:f8:51:8c:82:5c:ca:d6:0d:b8:ce:36:ae:
54:58:28:6c:43:44:06:42:c6:bd:86:b6:12:30:28:0b:6f:ae:
42:e9:75:05:04:bc:f1:09:74:94:ae:88:2a:d6:c3:34:ee:a3:
27:98:5c:b6:94:7d:db:1e:19:b5:1d:81:80:15:13:f3:7d:b2:
96:91:aa:e0:51:0c:1f:c6:6d:3e:a9:0f:5b:6d:75:c4:c6:ac:
a2:4b:53:d4:29:5e:cf:f4:5f:b9:7f:e4:fe:f4:d4:75:5c:7c:
55:2f:d3:6d:3a:64:63:1b:d0:3c:aa:1f:11:3b:4d:2f:22:51:
d4:4e:46:a4:a7:b3:60:06:c8:fb:b9:1c:c3:51:ea:57:e4:12:
36:18:6a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:28:59 2026 by rpki-client