Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: vvEaMw7jJS1k+s3TTqtC9MI9+S5eQ1kuzje6ufbCvmc=
Subject key identifier: 59:7A:62:55:94:46:83:67:76:B9:1B:82:80:1C:6E:F8:18:43:4F:0E
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 019F1830B08DB3FAAE62294B2961A9C23702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 1058
Signing time: Tue 30 Jun 2026 11:01:11 +0000
Manifest this update: Tue 30 Jun 2026 11:01:11 +0000
Manifest next update: Wed 01 Jul 2026 11:01:11 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: LVa9uRnka1RUY+tfbPpvce63YPevint5NtZ/fmZ5K30=)
2: sIZQ5tszAsQWV3tSj16L1GSVX6c.roa (hash: UbS6Ylynq2ME7l06L5T3TkFEta0v6LJ++TVobQTXGgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:b0:8d:b3:fa:ae:62:29:4b:29:61:a9:c2:37:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Jun 30 11:01:11 2026 GMT
Not After : Jul 1 11:01:11 2026 GMT
Subject: CN=597a62559446836776b91b82801c6ef818434f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:bd:5f:88:df:79:1a:d5:2a:33:dd:fa:81:
9b:81:9e:56:0b:8d:18:e9:d1:25:23:b0:c7:65:bf:
c7:76:64:6c:ad:fd:e1:22:b3:2a:9d:27:5d:32:9a:
2d:f5:97:ac:81:75:40:09:8b:d1:1b:2a:db:9d:f4:
e9:90:aa:92:03:20:8f:0f:b0:67:fb:ad:f1:3b:5c:
f3:99:64:4e:b6:ee:d1:23:a5:d5:b1:54:11:7e:83:
0e:17:82:7a:62:62:4a:e7:07:07:a7:cd:5b:a8:50:
7a:ac:e8:68:73:3e:7f:e6:fd:9e:60:b6:24:b5:5b:
ce:ea:42:64:17:98:60:f2:79:4c:4c:6b:e5:ee:ff:
a6:e3:c6:97:0e:1b:0d:69:a0:fa:f2:0d:e6:7c:fd:
5a:12:6e:fb:68:88:75:f6:81:9e:56:be:bb:de:ac:
76:f9:28:9c:67:c7:c0:7a:f7:34:db:eb:bd:a2:07:
21:2d:47:5e:d3:8c:35:8f:c7:d6:cd:13:12:45:8c:
27:3c:36:1b:f8:50:07:17:7b:76:20:31:6a:72:dd:
ce:55:34:5e:40:ab:d1:9d:c3:18:89:1b:dc:b2:7e:
be:1a:51:02:b0:49:12:f5:6b:62:8a:06:68:32:fd:
5a:e3:fe:ba:fe:5e:08:c6:18:e3:fd:9c:ea:31:dd:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7A:62:55:94:46:83:67:76:B9:1B:82:80:1C:6E:F8:18:43:4F:0E
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f7:11:1b:c4:69:0d:e0:b4:b6:6f:43:28:04:55:b3:22:cc:
81:af:f1:f8:a7:0f:56:89:12:eb:d9:fe:65:ba:d5:cb:fe:43:
82:8d:32:d7:3c:b9:06:1a:34:58:1b:e4:b7:2d:20:79:cc:7e:
f2:b9:a5:ca:fe:37:37:50:8a:6e:bf:9e:15:e6:d8:1c:01:5e:
ef:0e:71:d1:a2:55:4c:f8:b1:01:9b:88:27:98:da:b6:0b:29:
55:46:24:32:a7:35:06:e1:2b:f8:34:f0:42:3d:b5:94:63:8f:
e1:c8:79:c7:33:04:75:be:a4:2c:82:fd:af:38:6b:07:d1:fa:
3a:ba:2e:fe:4a:cc:84:dd:6b:00:aa:00:f6:db:85:13:11:14:
9f:8e:a9:46:87:d7:7e:8f:81:38:65:68:d4:7e:51:42:7a:b9:
10:e6:10:d4:50:07:ef:0c:19:69:63:b3:2f:48:d4:94:98:e3:
ed:a6:d5:9a:68:91:ad:11:da:98:77:74:58:ed:cd:89:00:ca:
da:b9:55:78:d0:a3:fb:d3:f3:0e:68:4e:5e:df:05:0b:ff:39:
2a:3a:10:be:31:01:d4:d6:3f:3d:74:25:1b:72:f3:79:cb:0a:
12:ae:30:30:34:be:98:15:c7:27:cb:09:7b:44:f8:f7:65:12:
75:04:08:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:20 2026 by rpki-client