Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: EgEOVhTB9A37UeSOlcZ2aqsq3LAEs24crt7ZjanmiXw=
Subject key identifier: 88:81:EB:51:8B:75:32:A5:D0:60:13:C8:5C:69:63:86:EF:15:00:69
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 019EB80F40241D880F301AE3810EFACD4B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 0530
Signing time: Thu 11 Jun 2026 19:01:07 +0000
Manifest this update: Thu 11 Jun 2026 19:01:07 +0000
Manifest next update: Fri 12 Jun 2026 19:01:07 +0000
Files and hashes: 1: PeY6_L-X-zspT56i1C5OrFfnugg.roa (hash: 6ufhim7uAO49+RCgSfwQkljsubk6/U5duEsADbT1o7c=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: /tFUR8jx+igqYnOwl8CKR5mMjDwZOVUkP8jaIb16Vtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:40:24:1d:88:0f:30:1a:e3:81:0e:fa:cd:4b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Jun 11 19:01:07 2026 GMT
Not After : Jun 12 19:01:07 2026 GMT
Subject: CN=8881eb518b7532a5d06013c85c696386ef150069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:5b:ad:b0:f3:55:f8:52:4a:c1:57:df:b0:
f7:1c:ff:b1:8b:e3:3c:4a:1a:9e:7b:a2:30:aa:49:
43:7c:c7:53:2a:e5:4d:ad:ff:72:b5:4b:2d:d5:31:
28:89:df:7d:0e:a8:53:7b:a0:bb:0d:92:95:36:b6:
db:57:f1:10:ba:4d:b1:ed:ca:70:aa:03:45:72:6a:
08:32:3a:f0:27:df:43:cb:ba:63:c4:54:8c:33:e0:
3f:87:26:2b:fe:39:a6:0f:10:11:a9:9a:75:b6:7e:
21:b2:43:03:97:00:d7:d1:1c:cb:82:38:dc:97:f7:
53:a1:cd:d2:4c:61:ab:fe:dc:2c:6d:e8:47:1c:63:
44:89:74:1f:9d:e9:ba:69:ed:0c:34:9e:27:8a:9a:
04:bf:56:61:a2:a8:8c:e6:c9:f7:8d:cd:aa:c4:d9:
55:49:d1:c8:35:24:07:97:b7:4d:be:d2:56:78:2f:
65:ba:52:9c:12:02:66:36:b6:f4:0c:99:ae:8d:31:
3d:a6:a5:94:ea:20:d6:2c:69:0c:0a:41:c8:89:f8:
f9:70:03:ca:a0:d1:42:a6:41:0b:25:a5:7b:ca:51:
24:ea:f9:c3:26:09:f4:4a:a1:94:2e:ae:e3:e3:0e:
d5:3d:3a:1e:f3:ce:c4:11:a3:1f:c8:b6:0a:a2:3b:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:EB:51:8B:75:32:A5:D0:60:13:C8:5C:69:63:86:EF:15:00:69
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a2:4b:c4:9b:9b:f5:a0:af:5d:d8:c3:e9:83:96:b9:08:60:
80:c3:7e:29:28:6a:98:21:af:a7:e3:5a:bf:c0:12:d8:8f:e0:
0c:92:9a:ac:19:2d:a3:87:bd:26:b3:c1:94:c0:16:af:9c:44:
18:cf:aa:b3:9e:aa:74:4f:3b:b2:9d:8a:5e:44:81:4e:50:74:
ee:5e:4c:81:c6:49:55:c2:7e:b3:37:e8:51:cd:7d:a5:fb:72:
2b:b5:49:74:d0:24:09:09:13:0e:6d:37:a9:57:92:8f:a8:58:
41:4d:e1:ed:e8:9b:10:24:0e:f6:57:44:d1:25:06:61:79:4e:
73:e4:21:7b:eb:60:9b:30:f4:ce:8e:3b:ea:d3:14:ee:85:e9:
ed:d4:f2:a5:cd:0e:c3:af:5f:c5:7b:f6:ad:8a:79:30:cd:a0:
09:67:4b:4b:23:d9:bf:0c:4d:9f:61:05:ee:27:22:10:0d:1a:
f2:e1:84:ad:7d:c1:e0:08:4c:12:41:f4:ff:de:6d:8f:34:09:
7f:1e:fb:3d:13:90:b7:ac:a5:46:0d:25:35:43:c2:0a:f9:78:
f1:46:61:21:5d:07:34:b5:34:f7:6e:50:31:de:c2:59:9b:2d:
51:05:2d:26:ac:43:cd:c7:f9:94:53:4f:54:79:30:99:70:90:
ae:44:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:45:25 2026 by rpki-client