Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier: Jr9KHlzdD0V9GKO6ZmGjWTZEW4W1Bt4UH/1cVWE1vfw=
Subject key identifier: 60:F9:34:97:9F:51:1A:C4:5B:FD:7A:27:EF:DD:C7:4B:1A:90:D2:2F
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 019F1901245D01CAFE476C5D8881672F5D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number: 0CCD
Signing time: Tue 30 Jun 2026 14:48:52 +0000
Manifest this update: Tue 30 Jun 2026 14:48:52 +0000
Manifest next update: Wed 01 Jul 2026 14:48:52 +0000
Files and hashes: 1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: lgt95OEjmiYgFp9bwgrFQGoaAsI5b1GKDS2JWIIWF4M=)
2: F354eI049VK49q6Qgm7U8i60b2s.asa (hash: pA+2lvFRT5MH4svMFLwsCGwy8FSdH8pLNuayp6USO0E=)
3: WTnZHawCrFt92HJ5c52B4Lpjzyk.roa (hash: ULPffjH4r407eXPyl6PQZZu6OtSid0XwosfEwigrGuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:24:5d:01:ca:fe:47:6c:5d:88:81:67:2f:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Jun 30 14:48:52 2026 GMT
Not After : Jul 1 14:48:52 2026 GMT
Subject: CN=60f934979f511ac45bfd7a27efddc74b1a90d22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:a5:ca:a8:82:c1:7d:19:8f:6d:4f:5d:e2:
41:21:8e:52:92:71:99:01:d5:ea:ed:e4:b5:b6:b2:
65:08:15:79:dd:dd:0a:c1:a2:ec:fa:cd:dd:d2:97:
51:95:62:68:1e:4c:87:6c:e7:9b:51:a1:8b:69:d5:
b2:bd:91:b2:7b:2f:20:8e:97:1f:69:63:a5:ba:6c:
31:40:45:21:5e:0f:3e:19:22:d7:ac:11:bc:36:12:
93:4f:56:d5:61:ed:81:a6:20:e3:a0:e6:94:07:86:
95:1b:e8:86:c2:6b:fa:e1:c0:94:3d:73:c6:32:5f:
44:c7:24:32:73:48:8e:58:47:63:32:83:b7:83:4d:
70:f6:d3:4a:b8:ba:db:ab:c2:40:da:2d:7c:fd:c7:
ec:a5:08:55:07:a7:49:be:02:a9:c7:4a:eb:ce:0c:
da:74:09:05:a0:dd:b9:ba:9f:e1:de:81:b3:12:76:
79:4e:7f:5f:9b:d7:8c:80:67:15:76:a6:7a:05:75:
a1:23:54:c3:1b:6d:a2:e1:0d:d9:05:48:d5:7b:71:
1f:5e:1f:3c:3e:0e:b1:34:af:94:84:a4:2f:c1:cd:
d5:62:a6:84:89:2f:4a:26:79:4b:e8:18:8f:24:e4:
a5:92:ab:1e:ed:4b:8e:86:75:8d:3e:d6:a1:3a:b6:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F9:34:97:9F:51:1A:C4:5B:FD:7A:27:EF:DD:C7:4B:1A:90:D2:2F
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c3:74:bc:a3:a1:59:e5:ef:18:47:a3:f8:39:c0:c0:92:a6:
42:ff:7e:90:dc:9e:b4:0b:e7:70:b6:0a:9b:f1:58:01:ff:30:
0f:db:68:0d:95:73:9b:ce:a3:f6:ca:8b:1a:93:ba:02:f9:73:
c6:23:87:c4:6f:ea:70:36:60:67:11:5b:ed:20:5d:e4:93:29:
2a:a7:0c:4a:96:5d:41:f6:1f:18:e9:38:d2:74:ed:89:c5:84:
dc:0d:d5:d7:0b:a8:b1:3f:f7:ae:f1:c4:07:1d:f7:cf:d7:4a:
c5:f8:e1:ab:24:37:6d:c8:15:4d:0c:67:6d:1c:b8:2a:0d:96:
86:39:23:f0:7c:ff:7b:f5:52:91:23:9a:45:80:79:02:ed:9f:
de:ed:82:80:c9:3b:24:cc:11:06:23:27:dd:c6:d8:2a:3c:ea:
f7:d6:fb:cc:da:73:8e:34:d5:7c:02:69:db:b5:ce:0d:07:d8:
c3:85:fa:5c:36:a7:50:93:af:0a:f7:f6:12:5f:e2:77:c2:cd:
a1:2e:0d:18:e1:2f:d2:22:7e:20:06:40:9a:f7:97:01:56:8a:
02:a2:38:f6:48:92:a8:2d:ec:89:7e:f8:17:cd:07:4c:65:98:
4b:66:2e:42:74:5b:89:97:fb:2b:ae:5f:1c:df:f5:26:d5:c8:
90:0d:ab:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:20:04 2026 by rpki-client