Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
File: 4iUB2aQBcJg48z0a4nm85xALPM8.mft (raw, json)
Hash identifier: odudu3g5+kiG5cSueI6Eaz8W0O/hMGZWoCvMn+K9rlc=
Subject key identifier: 88:99:57:43:E1:7D:6B:43:F7:52:88:83:36:B3:E5:05:1D:E1:74:A1
Authority key identifier: E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
Certificate issuer: /CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Certificate serial: 019F1943A9D4149D3ED439B58E4B75B594A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
Manifest number: 13FF
Signing time: Tue 30 Jun 2026 16:01:32 +0000
Manifest this update: Tue 30 Jun 2026 16:01:32 +0000
Manifest next update: Wed 01 Jul 2026 16:01:32 +0000
Files and hashes: 1: 4iUB2aQBcJg48z0a4nm85xALPM8.crl (hash: TtJSmtQ9BfbaX/dnOI6IOS+yTUfAC8QFP73us7KRtl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:a9:d4:14:9d:3e:d4:39:b5:8e:4b:75:b5:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Validity
Not Before: Jun 30 16:01:32 2026 GMT
Not After : Jul 1 16:01:32 2026 GMT
Subject: CN=88995743e17d6b43f752888336b3e5051de174a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:77:c2:f2:bb:42:8d:a8:fc:8a:fb:7e:32:
ca:96:39:ff:e9:63:2e:04:0b:3c:bc:ef:8a:3f:75:
3c:90:18:fe:86:31:09:96:ab:12:b7:e9:e3:f3:89:
33:74:3e:54:e4:ac:48:35:27:ef:74:05:f1:ee:f0:
80:7b:bf:27:ce:71:20:75:e5:9a:af:7a:93:78:92:
c7:7c:05:84:57:6b:f6:01:d6:96:43:28:12:95:63:
ec:4e:d4:7b:2b:54:e5:31:5f:2a:d5:53:76:3e:ec:
4d:cc:36:25:a5:ce:1a:a6:25:e4:3f:e5:96:4f:79:
3a:e4:c5:c7:55:bc:e7:d3:e4:bd:58:60:b6:25:3a:
ae:d2:32:2c:a1:f9:91:d6:04:5e:92:0d:a9:e8:43:
1e:37:ee:6d:ee:43:ee:f4:1a:82:3c:3f:32:c1:29:
ac:3f:e9:1e:3b:91:7c:63:48:74:1a:a3:22:fd:d9:
08:ee:49:04:ec:09:92:c4:1f:54:29:51:23:62:bd:
80:34:e6:61:52:42:53:f4:3a:48:5e:ac:a4:4e:19:
40:d8:90:96:00:14:35:ae:b0:19:41:15:55:f4:68:
05:c5:9c:1a:88:44:b8:81:cd:74:88:de:77:05:28:
90:ac:9d:7e:42:0b:96:dd:bc:cf:93:04:f7:93:c6:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:99:57:43:E1:7D:6B:43:F7:52:88:83:36:B3:E5:05:1D:E1:74:A1
X509v3 Authority Key Identifier:
keyid:E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3f:ae:ca:7d:95:62:b5:4a:23:97:e1:93:4c:db:fa:8a:a4:
06:cc:c6:12:c9:97:01:fa:11:8c:75:7c:1e:f6:88:63:bb:d7:
a5:25:ff:33:7a:d1:08:52:a9:02:11:22:16:d8:22:1f:3b:e9:
70:45:65:40:3a:8b:d4:ca:98:2b:7b:1e:4d:90:dd:ab:0b:bb:
7e:5c:c7:82:9f:e6:a3:ef:63:05:a5:b3:8b:9f:8c:75:5e:e6:
22:86:4d:12:1d:30:23:dc:fb:4c:a3:89:14:4c:5d:ea:b8:9e:
d2:90:6b:34:b8:8a:4b:78:7f:fe:01:da:74:05:cc:f2:d5:37:
61:b1:77:52:4a:bc:b8:f2:b9:9e:c4:d9:98:73:62:4e:7a:b5:
62:c4:b0:cc:41:8d:d4:23:7e:6a:e8:40:e2:e0:38:ea:35:83:
b8:29:15:29:0d:ef:7a:99:bd:ce:90:7c:68:90:01:6d:27:b0:
8b:7c:06:12:3f:73:3c:3f:73:1f:ce:29:9b:6c:f6:7f:80:90:
1c:ee:99:d8:3e:0a:77:73:df:73:22:ce:fe:da:29:49:e8:e1:
a4:a6:e1:2c:c6:7c:a4:c2:2b:16:f3:fb:54:1c:9e:4f:5d:66:
f1:7a:0e:0a:b4:f3:8e:d5:41:fc:07:44:30:36:4d:b9:d5:53:
8b:d6:d1:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ6nUFJ0+1Dm1jkt1tZSpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjUwMWQ5YTQwMTcwOTgzOGYzM2QxYWUyNzliY2U3MTAw
YjNjY2YwHhcNMjYwNjMwMTYwMTMyWhcNMjYwNzAxMTYwMTMyWjAzMTEwLwYDVQQD
Eyg4ODk5NTc0M2UxN2Q2YjQzZjc1Mjg4ODMzNmIzZTUwNTFkZTE3NGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPl3wvK7Qo2o/Ir7fjLKljn/6WMu
BAs8vO+KP3U8kBj+hjEJlqsSt+nj84kzdD5U5KxINSfvdAXx7vCAe78nznEgdeWa
r3qTeJLHfAWEV2v2AdaWQygSlWPsTtR7K1TlMV8q1VN2PuxNzDYlpc4apiXkP+WW
T3k65MXHVbzn0+S9WGC2JTqu0jIsofmR1gRekg2p6EMeN+5t7kPu9BqCPD8ywSms
P+keO5F8Y0h0GqMi/dkI7kkE7AmSxB9UKVEjYr2ANOZhUkJT9DpIXqykThlA2JCW
ABQ1rrAZQRVV9GgFxZwaiES4gc10iN53BSiQrJ1+QguW3bzPkwT3k8bSiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiZV0PhfWtD91KIgzaz5QUd4XShMB8GA1UdIwQY
MBaAFOIlAdmkAXCYOPM9GuJ5vOcQCzzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlVQjJhUUJjSmc0OHowYTRubTg1eEFMUE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My82M2ZhZTktNDk5Zi00M2Q1LTg3Njgt
Zjk4MTFlZTNmYTg3LzEvNGlVQjJhUUJjSmc0OHowYTRubTg1eEFMUE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My82M2ZhZTktNDk5Zi00M2Q1LTg3NjgtZjk4MTFlZTNmYTg3
LzEvNGlVQjJhUUJjSmc0OHowYTRubTg1eEFMUE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYz+uyn2V
YrVKI5fhk0zb+oqkBszGEsmXAfoRjHV8HvaIY7vXpSX/M3rRCFKpAhEiFtgiHzvp
cEVlQDqL1MqYK3seTZDdqwu7flzHgp/mo+9jBaWzi5+MdV7mIoZNEh0wI9z7TKOJ
FExd6rie0pBrNLiKS3h//gHadAXM8tU3YbF3Ukq8uPK5nsTZmHNiTnq1YsSwzEGN
1CN+auhA4uA46jWDuCkVKQ3vepm9zpB8aJABbSewi3wGEj9zPD9zH84pm2z2f4CQ
HO6Z2D4Kd3PfcyLO/topSejhpKbhLMZ8pMIrFvP7VByeT11m8XoOCrTzjtVB/AdE
MDZNudVTi9bRtA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:30 2026 by rpki-client