Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
File: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json)
Hash identifier: TzQIAAKzu5qERdUNzlmQ1DK3dXQyn0Dsk3JkaqRi3C4=
Subject key identifier: 69:84:62:53:F3:D0:76:8F:3A:9C:CE:2A:9D:46:D9:91:BD:28:FA:A0
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Certificate issuer: /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial: 019F18D6ACC803C2D9707B6A38F44C4569D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 14:02:29 +0000
Manifest this update: Tue 30 Jun 2026 14:02:29 +0000
Manifest next update: Wed 01 Jul 2026 14:02:29 +0000
Files and hashes: 1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: TLBo+QNIlo55fPyCtsZApIUobn7t//Q+q7y3BczuAMc=)
2: R887zp6sFk_dmP9fKtjrY24hpnk.roa (hash: xMhP2OXxBMHOz2sXZctb+22OEYUQG/I6CAM/IUlPtic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:ac:c8:03:c2:d9:70:7b:6a:38:f4:4c:45:69:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Validity
Not Before: Jun 30 14:02:29 2026 GMT
Not After : Jul 1 14:02:29 2026 GMT
Subject: CN=69846253f3d0768f3a9cce2a9d46d991bd28faa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:7a:bc:a7:c7:c6:b1:e4:83:08:4c:c0:d5:
01:3f:98:42:26:89:69:b1:a2:7e:8e:50:a9:85:38:
66:47:1e:bf:88:b9:16:e8:af:e3:f5:10:69:58:ad:
4a:4c:27:ff:53:4f:1a:12:b8:38:5a:a1:e6:69:ab:
62:d0:84:84:80:8a:6c:a5:08:86:32:e0:d3:01:3e:
19:d6:89:3e:c6:7d:9b:7f:1a:06:5c:ce:f2:d7:92:
83:00:fb:6e:67:40:c3:5b:2b:c5:8f:34:85:77:43:
80:e0:2a:8b:01:f9:d7:d1:a7:83:15:f4:f7:1a:93:
02:e3:25:e9:62:1e:9f:bf:f8:4e:a1:1d:7f:ce:6e:
e0:35:49:2e:61:aa:6a:82:0e:26:a5:40:ce:46:bf:
f6:51:9b:89:52:ec:9b:fc:22:65:28:c4:4b:72:83:
c0:4a:e1:fa:fd:9b:cf:37:51:bf:be:ed:fc:14:c0:
c1:c5:31:c3:86:90:2e:40:f8:f4:63:f7:c9:2c:68:
73:25:70:66:82:9a:29:fe:ba:33:e3:9c:e0:60:9a:
25:b3:4b:2c:6b:fd:69:33:fd:cf:25:3e:ab:06:2e:
21:18:d2:fe:71:45:03:b9:a9:3c:3f:b5:06:f9:2c:
07:ff:36:d6:d1:72:c9:e4:b3:73:f1:d9:17:0c:c1:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:84:62:53:F3:D0:76:8F:3A:9C:CE:2A:9D:46:D9:91:BD:28:FA:A0
X509v3 Authority Key Identifier:
keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:57:1c:36:f6:28:c3:fb:be:ec:df:57:d5:1c:61:39:90:08:
2a:ad:4e:44:dd:13:c3:e8:9b:50:df:c3:a2:f4:cf:c3:1b:8c:
3f:a3:37:9e:2d:bb:b8:49:09:c5:d7:6d:53:c8:44:77:c5:7a:
87:4a:54:d8:62:6b:57:25:84:51:3e:0b:b6:1d:b2:d8:dd:7c:
33:eb:df:07:cf:17:be:33:7c:1f:1e:96:4f:18:f3:e4:71:54:
17:4f:c5:e8:ee:39:54:51:71:fa:bb:ea:9d:ba:9d:5f:ab:cb:
70:c3:f8:78:32:58:57:bf:2d:0c:7e:45:52:12:37:72:25:92:
aa:5b:26:9c:49:4a:76:aa:2b:db:d2:28:5b:0d:12:22:5c:3e:
2a:76:45:ab:a7:85:7b:fe:75:0f:95:90:1b:78:2c:ad:f0:c4:
2c:6d:fe:78:84:12:ed:c0:9f:70:93:8b:72:2c:c9:5c:84:4d:
41:9c:f0:db:28:1b:fe:62:00:88:f9:8c:82:23:90:e7:6e:fb:
9f:c0:58:da:a7:70:24:42:b9:02:eb:a5:de:63:f8:3d:b3:ab:
df:ba:9b:0a:d6:f7:ae:1c:90:9c:c7:3f:2f:ec:4b:13:84:b5:
21:25:9d:a6:06:58:02:d6:c2:ee:c3:e1:cd:dc:f9:66:32:d5:
5b:1c:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:20 2026 by rpki-client