Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: qPc4Gg5m4nt2WNatEFlxSDeveVsMzwEMVLUCM299iwQ=
Subject key identifier: E2:F9:5C:8C:17:58:8E:57:B2:AD:7F:01:FF:46:B9:D4:11:CE:4E:B3
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 019EB5E9248D7DDD3A2E933747FBD1741A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 09:00:15 +0000
Manifest this update: Thu 11 Jun 2026 09:00:15 +0000
Manifest next update: Fri 12 Jun 2026 09:00:15 +0000
Files and hashes: 1: B8hP3lu4x-v6AGdd-NBMTGbKn60.roa (hash: J5ElDZLvmlw9NvMlGd8Bg3jT1oh60NlhHSd2q9Cwhys=)
2: EbW3NvEPl1oV2yNd4gPEWc6IX4k.roa (hash: 6sbRbAzpkVZnbmwGmFls1zgBgBPqZlTzKVvW2qe/0sQ=)
3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: RtX4iYH9UxzJ6aXjISSfQv4JOYeichhuU3B+zz9L/vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:24:8d:7d:dd:3a:2e:93:37:47:fb:d1:74:1a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Jun 11 09:00:15 2026 GMT
Not After : Jun 12 09:00:15 2026 GMT
Subject: CN=e2f95c8c17588e57b2ad7f01ff46b9d411ce4eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:13:58:7d:3b:5d:1d:90:b1:65:d8:b8:8e:
ae:a3:cc:04:6d:8f:76:03:7d:9b:83:59:ad:4b:3e:
54:f8:d2:57:0e:a0:b6:d6:99:32:e2:83:1d:d5:08:
32:8b:2c:32:d7:36:e4:85:c0:35:16:67:eb:ab:1c:
73:d3:80:cb:82:02:2b:a1:00:01:60:23:78:02:ce:
1b:43:12:cb:1b:9f:7d:a1:89:21:93:89:a8:2a:fd:
9b:3a:b6:5c:ef:f0:2f:22:da:33:11:4e:57:fd:ee:
14:4e:3c:db:ad:e2:28:de:e0:69:bf:60:2c:0f:c4:
a2:70:29:40:ec:c0:ad:8d:5d:02:18:86:d9:3f:30:
81:8e:78:25:29:63:c6:d7:50:fc:1c:73:ad:63:ce:
1b:85:03:0c:a4:e3:d3:dd:1c:d7:75:07:be:e0:be:
66:82:10:90:92:21:44:45:b5:62:74:51:60:45:71:
e2:81:ed:59:f4:93:9b:34:5c:e4:4a:89:b2:57:8f:
ab:09:a9:3d:27:1a:1f:10:a9:46:25:8b:70:43:17:
af:6d:df:37:68:d1:49:da:da:0f:1b:62:d6:e7:c3:
ea:a7:0f:ef:be:3f:d8:2a:76:5f:90:bd:18:6e:51:
00:a2:6e:3f:80:eb:6b:10:ad:a9:21:ee:3f:17:2e:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:5C:8C:17:58:8E:57:B2:AD:7F:01:FF:46:B9:D4:11:CE:4E:B3
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d1:ec:bd:60:66:11:57:f4:e3:e6:6e:34:62:ed:8d:91:54:
4a:98:cd:b6:ca:69:e3:43:3f:34:90:8c:e7:f2:ef:f6:c0:b4:
3f:71:9a:51:32:d8:28:61:9b:e7:37:65:8e:9e:eb:0a:6c:a8:
83:1e:5c:cb:87:92:6e:55:4d:49:56:47:51:fc:00:00:de:05:
ab:cc:37:87:2e:5f:3e:a0:38:5e:ae:33:9e:2f:ee:b0:70:94:
9e:f2:6f:a2:7d:e3:15:db:0d:a2:ee:29:79:2d:5b:87:4d:a7:
c1:94:6a:13:63:f3:d9:a5:f4:ae:f9:a0:8d:5f:db:a7:b6:0a:
10:fc:26:6a:89:cf:2a:75:1a:3e:23:f5:28:ae:56:b8:d1:4e:
65:9f:18:0e:c7:7a:01:5c:98:ed:a3:5a:3d:3c:9c:b5:95:a1:
71:d5:43:a7:35:6f:4d:30:40:8e:b3:44:69:2e:56:66:8b:6a:
ea:30:82:c0:0f:4f:dd:ec:b4:ef:50:87:28:67:9e:62:1b:51:
98:52:2b:88:ce:95:bb:2f:7b:94:80:9a:73:be:9b:b7:45:95:
c9:2f:72:6e:55:55:d9:1c:89:75:ea:ca:5a:83:f2:6b:b3:74:
9d:a6:2b:8e:10:a1:a1:66:c9:6e:09:e0:2c:eb:88:f3:b1:7a:
01:50:52:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:19:51 2026 by rpki-client