Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: RJfIgr4ScV7se06M4IJgyYLXsFMWIBIFiJyb+Dx9fL4=
Subject key identifier: 7B:96:72:B2:D0:6E:FC:DF:1C:48:28:5D:AB:8E:33:D3:FD:0C:CB:45
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 019EB8B40B8F101734008079D9005D89B3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 03C3
Signing time: Thu 11 Jun 2026 22:01:07 +0000
Manifest this update: Thu 11 Jun 2026 22:01:07 +0000
Manifest next update: Fri 12 Jun 2026 22:01:07 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: QPgBZF/qnkdkXs90qNthkWdanXyDzb+/ILE2kH5yDaE=)
2: EOa20siYhVvooEhEC-epku9D3Yo.roa (hash: CaHqewaEFsaPKRUAGEnwAKh1/0YdOwyqr30Vur/C7RQ=)
3: F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa (hash: zuk3r9ZBjNWRUgr9lOJrcdso6ykt5/DxOmxhn65NsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:0b:8f:10:17:34:00:80:79:d9:00:5d:89:b3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Jun 11 22:01:07 2026 GMT
Not After : Jun 12 22:01:07 2026 GMT
Subject: CN=7b9672b2d06efcdf1c48285dab8e33d3fd0ccb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:c4:b9:02:2d:7d:d7:2a:cf:8c:91:d8:b1:
85:92:7f:d7:ac:82:05:40:48:fe:61:9d:1e:67:d4:
cd:51:37:0e:e2:6f:a0:35:73:e4:f4:f9:11:ce:78:
4a:6e:74:c5:59:85:50:53:1e:88:d7:c0:10:27:71:
ae:20:19:31:89:55:ca:65:52:6c:28:05:b5:0d:19:
7f:d3:bc:2e:fc:90:e3:5a:48:88:08:fd:79:09:00:
15:14:36:c7:c5:cb:ea:b7:8e:94:79:eb:5c:85:a5:
ce:5d:bb:c8:d2:17:9c:8e:1c:77:96:36:96:c5:46:
88:79:d5:70:1b:f9:9f:ea:ed:ba:63:37:b1:07:41:
9b:a0:a1:20:cf:6f:d0:17:1d:aa:9e:1f:29:85:d7:
c8:b6:da:f3:1e:68:19:ea:57:8d:0e:3b:23:e0:72:
d4:e6:96:2d:b3:0a:46:16:c6:48:22:e4:70:50:be:
da:7f:cf:35:2e:4f:bb:46:58:12:5f:46:9c:1a:79:
83:94:4b:0c:be:fe:a2:6a:08:b8:82:3e:b5:b1:97:
39:35:e1:3e:93:49:ee:bd:2b:d0:90:7e:f5:c4:49:
31:89:59:e3:9c:8b:c3:c2:c3:30:37:fd:d2:6c:e6:
4f:60:92:c9:f1:48:cb:dd:9b:d2:e1:59:a3:6c:50:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:96:72:B2:D0:6E:FC:DF:1C:48:28:5D:AB:8E:33:D3:FD:0C:CB:45
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4e:de:8c:b9:81:63:a0:43:2e:1a:0f:46:0f:74:09:d7:0c:
14:89:b9:c7:c3:2f:41:2b:c0:07:73:9d:60:f7:9b:6f:8d:ca:
1e:54:48:5d:9e:a1:2d:de:50:66:eb:27:cf:11:1e:bb:9f:21:
04:66:07:06:31:2c:fe:23:4b:6e:ef:fe:8f:ae:a3:48:ef:8b:
cb:56:64:8d:66:84:f5:f6:bd:2f:71:ce:6e:f1:24:d4:d8:68:
a2:0e:23:9d:da:65:ba:6b:6d:c4:25:9e:4e:66:74:5b:07:24:
3b:b4:c0:35:31:f9:7c:d5:56:92:c6:67:db:a9:dc:43:40:5c:
d9:31:e8:e8:5e:e2:d2:40:6c:f7:d4:49:e6:0f:2e:fa:cc:c0:
4b:26:74:b7:17:80:2c:86:18:6b:d5:72:6e:d9:f7:23:c5:15:
7a:f6:c5:ac:79:45:f9:6b:be:81:cd:d1:46:47:21:b1:bd:e2:
96:b6:d9:c7:c4:a2:2f:f7:fa:3b:1b:a7:6a:31:a4:13:02:df:
0b:bc:c8:d2:29:fa:91:96:3d:6b:53:03:da:cd:b4:2d:bb:26:
00:e0:fa:37:fe:b8:ee:1f:a7:c4:25:05:7b:06:c5:51:ce:65:
71:98:09:b5:10:3d:aa:a2:39:c1:52:da:ad:62:a0:86:49:0b:
09:cf:6f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:01 2026 by rpki-client