Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: iizXQMUon1WdeWYho4M8llQOleL3iVJOOMyV9D/zooM=
Subject key identifier: C3:FB:93:1E:D7:6E:88:33:4B:E9:0D:1B:B7:10:5A:C5:6F:40:81:82
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 019F18300239A6C2BD4CA6657FD7A85E9B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 1260
Signing time: Tue 30 Jun 2026 11:00:27 +0000
Manifest this update: Tue 30 Jun 2026 11:00:27 +0000
Manifest next update: Wed 01 Jul 2026 11:00:27 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: QEIuXLXhh9SyLJoL5XOaxZavc18zCXEEA2qe2s0Mrrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:02:39:a6:c2:bd:4c:a6:65:7f:d7:a8:5e:9b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: Jun 30 11:00:27 2026 GMT
Not After : Jul 1 11:00:27 2026 GMT
Subject: CN=c3fb931ed76e88334be90d1bb7105ac56f408182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:e0:a1:6c:32:d0:64:54:15:1f:43:ff:0d:
e4:30:39:b9:01:08:3f:3a:65:26:d2:e0:b0:24:1e:
58:e1:76:95:ee:30:8e:db:b7:f8:72:d5:8f:61:d7:
d9:20:fd:18:46:30:e5:3b:bc:92:9e:38:81:3a:15:
0d:32:f0:15:52:8f:3d:bd:f4:39:f9:29:3a:59:47:
27:25:72:ce:dd:22:ec:bc:b7:7f:cb:29:46:f4:8f:
58:25:c1:b3:d7:9f:9c:27:88:af:59:43:d4:11:c8:
4c:9a:79:d4:da:bf:f6:a9:98:5f:17:9a:95:a5:38:
f2:d3:73:bc:8b:3c:3c:ad:13:7d:e8:ae:41:7f:79:
f8:e3:f8:cf:ee:0e:d9:63:d5:5d:31:75:1c:92:51:
fa:6f:19:7c:20:cb:f3:7b:59:62:65:d5:f6:f5:72:
14:af:d2:07:1a:76:8d:3b:22:ea:c6:84:1b:e7:9e:
06:1d:16:9c:0a:87:df:9a:43:fc:4d:02:72:36:c3:
aa:f2:d5:59:1f:f1:71:99:44:78:1b:85:cc:01:12:
ee:72:7e:1a:07:8a:c4:cd:57:b0:dd:40:b2:4e:20:
70:2e:6a:32:7b:aa:86:f2:bb:18:3d:dd:f3:02:2d:
ec:5d:8a:70:22:ae:a9:24:6a:3e:0b:87:67:49:b6:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:93:1E:D7:6E:88:33:4B:E9:0D:1B:B7:10:5A:C5:6F:40:81:82
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:15:6d:77:c3:4b:f0:e9:6a:ee:17:3a:d4:cf:c3:00:24:9d:
4f:8b:9a:64:73:a0:5c:da:bf:f5:73:fc:9f:64:db:61:e3:78:
65:d1:80:2d:57:64:6a:92:2c:d0:0c:09:9f:7c:00:f0:48:58:
38:44:4b:21:12:c8:1b:74:7f:e4:2d:de:e1:bb:a2:c7:3d:9f:
d8:1a:57:8b:1a:a4:0e:90:ab:71:92:8d:ca:15:67:86:42:d5:
c9:0d:27:a1:99:53:32:64:ce:3c:2b:3c:e5:6d:57:f9:1c:b9:
ca:dd:f7:73:89:9b:6e:d4:db:5a:26:52:e1:a7:55:ae:5f:a1:
82:61:cf:65:3f:f7:0c:fa:69:3d:d1:93:05:72:46:dd:79:1b:
05:27:74:97:f7:76:07:43:dd:75:e9:94:f5:95:d2:13:92:16:
a9:b2:61:35:56:4d:9b:a0:d1:94:8a:ae:61:69:b1:98:32:2f:
56:96:18:e8:34:d2:38:2e:d7:7a:71:c9:fa:cc:40:8e:da:61:
b9:34:e6:4a:17:95:98:14:3a:5c:cd:b2:ef:5b:07:b4:9e:39:
e0:a1:91:41:b7:13:85:f1:cc:13:2b:39:3a:df:53:f8:de:7f:
f8:0d:09:91:80:fa:03:3b:6a:7d:f1:71:b0:76:07:55:02:3a:
82:07:85:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMAI5psK9TKZlf9eoXpt8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDYzY2EwNTQyODMyZTY0MjY0ZjNhY2IxNTYxOTkyMmZl
Y2Y4M2IwHhcNMjYwNjMwMTEwMDI3WhcNMjYwNzAxMTEwMDI3WjAzMTEwLwYDVQQD
EyhjM2ZiOTMxZWQ3NmU4ODMzNGJlOTBkMWJiNzEwNWFjNTZmNDA4MTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7/goWwy0GRUFR9D/w3kMDm5AQg/
OmUm0uCwJB5Y4XaV7jCO27f4ctWPYdfZIP0YRjDlO7ySnjiBOhUNMvAVUo89vfQ5
+Sk6WUcnJXLO3SLsvLd/yylG9I9YJcGz15+cJ4ivWUPUEchMmnnU2r/2qZhfF5qV
pTjy03O8izw8rRN96K5Bf3n44/jP7g7ZY9VdMXUcklH6bxl8IMvze1liZdX29XIU
r9IHGnaNOyLqxoQb554GHRacCoffmkP8TQJyNsOq8tVZH/FxmUR4G4XMARLucn4a
B4rEzVew3UCyTiBwLmoye6qG8rsYPd3zAi3sXYpwIq6pJGo+C4dnSbbg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMP7kx7XbogzS+kNG7cQWsVvQIGCMB8GA1UdIwQY
MBaAFOLWPKBUKDLmQmTzrLFWGZIv7Pg7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hYmE5ZDMtOTkxMi00ZjVlLTk4ZGEt
YzViMDBjYjhkOTE0LzEvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9hYmE5ZDMtOTkxMi00ZjVlLTk4ZGEtYzViMDBjYjhkOTE0
LzEvNHRZOG9GUW9NdVpDWlBPc3NWWVpraV9zLURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhVtd8NL
8Olq7hc61M/DACSdT4uaZHOgXNq/9XP8n2TbYeN4ZdGALVdkapIs0AwJn3wA8EhY
OERLIRLIG3R/5C3e4buixz2f2BpXixqkDpCrcZKNyhVnhkLVyQ0noZlTMmTOPCs8
5W1X+Ry5yt33c4mbbtTbWiZS4adVrl+hgmHPZT/3DPppPdGTBXJG3XkbBSd0l/d2
B0PddemU9ZXSE5IWqbJhNVZNm6DRlIquYWmxmDIvVpYY6DTSOC7XenHJ+sxAjtph
uTTmSheVmBQ6XM2y71sHtJ454KGRQbcThfHMEys5Ot9T+N5/+A0JkYD6AztqffFx
sHYHVQI6ggeFtw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:09 2026 by rpki-client