Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: p7owTTSbCFI6mmlhr+H3MRmAej2lxxyEjbKqJuYE/aw=
Subject key identifier: 3C:C9:40:CD:B1:0C:F6:F2:06:64:E5:60:0D:6D:AB:22:B4:1F:7C:9A
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 019EB5E9AB45B640181615F4C6C4D4F5D32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 08D8
Signing time: Thu 11 Jun 2026 09:00:50 +0000
Manifest this update: Thu 11 Jun 2026 09:00:50 +0000
Manifest next update: Fri 12 Jun 2026 09:00:50 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: C7xZ4NKvA0q9Z/GC8teay2i7tJon13PpaN1FQq1EPUg=)
2: PhborNJW4v901OmJBHlugkCPu9Q.roa (hash: Woe0vtydZEfAzh9wNFeDl+e4gU+OEGllk8tizf6C77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:ab:45:b6:40:18:16:15:f4:c6:c4:d4:f5:d3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Jun 11 09:00:50 2026 GMT
Not After : Jun 12 09:00:50 2026 GMT
Subject: CN=3cc940cdb10cf6f20664e5600d6dab22b41f7c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:59:d1:84:64:21:28:b6:35:bc:c3:f3:b6:
5b:14:60:d2:4d:82:87:dc:4a:fc:ce:ff:4f:07:8d:
77:02:d0:1f:a8:37:e8:7b:57:eb:58:4e:ed:d6:8d:
f5:01:63:2c:98:59:44:cd:f1:ec:bd:39:86:3f:be:
b7:3f:1c:69:34:2e:4e:6a:7c:e8:d3:45:3d:d2:d8:
7f:94:26:49:dc:ea:b4:ab:e4:a8:02:45:00:fb:51:
81:a9:b4:84:2a:bf:99:79:ca:aa:5a:84:51:ba:7a:
89:62:24:e1:68:80:89:ea:dd:df:dd:07:5c:8a:f2:
77:32:83:39:db:db:89:e8:ec:3e:cf:d3:c2:cf:f4:
61:3e:ff:49:07:4f:2e:10:32:b4:58:92:5c:c9:b3:
55:59:42:51:41:0c:e6:db:6e:62:0b:85:05:e9:e9:
da:7c:74:7c:b9:e6:1c:27:84:46:4a:79:c8:97:5e:
da:3d:b8:78:dc:94:ec:fa:f9:f7:2b:ce:b2:ee:44:
aa:af:f1:ff:ac:06:c2:71:c0:a7:cd:9e:28:f6:61:
3a:95:60:59:09:7a:3c:e3:c2:18:22:67:2b:93:a8:
e8:71:51:7b:d1:7d:d4:1b:b0:db:1f:c4:a1:20:41:
6c:d1:19:73:5f:a4:e2:4d:15:2d:80:64:ba:00:79:
56:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C9:40:CD:B1:0C:F6:F2:06:64:E5:60:0D:6D:AB:22:B4:1F:7C:9A
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:31:69:00:c2:7c:87:d5:86:f7:42:b1:7b:05:ff:9c:fb:6e:
ef:0f:72:ad:90:6d:d6:d6:4d:54:40:de:7f:12:ed:a8:db:db:
1f:89:03:bf:98:be:c6:a1:76:3d:27:a8:05:0b:52:31:6c:65:
3e:f2:c5:73:f6:da:20:8d:1b:c1:66:bf:ef:16:82:7f:89:66:
0b:e8:7e:8f:de:47:22:e5:25:8b:5d:a2:23:22:fd:a9:c5:dd:
05:60:4b:5d:d9:c2:13:5e:8d:75:a5:9f:60:90:f0:be:2c:a0:
a2:cb:40:3d:db:cc:63:3f:ef:cb:47:38:b6:8a:b6:35:ed:0c:
85:4f:77:66:89:5c:2c:a4:39:ad:c3:01:33:09:24:6d:e0:65:
89:74:ed:ea:34:d7:fe:0b:96:89:cd:8c:6d:5c:97:8b:76:0c:
8d:39:e5:67:9f:6f:a7:ff:60:21:c8:b3:f4:46:e9:75:7c:9f:
11:09:3e:71:86:e9:51:aa:85:6c:81:aa:c7:4f:37:8a:ad:1c:
05:f4:c9:12:99:e0:37:c3:88:d3:84:9a:43:5e:2e:ea:26:12:
91:20:f7:8d:a7:d5:0a:fc:96:08:37:e5:59:b4:0a:a1:ff:be:
1d:01:48:d8:14:2e:13:18:14:dc:ba:a3:f9:e5:aa:f3:50:fd:
9d:81:ad:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:39 2026 by rpki-client