
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: EY+vPAfhvlXDCkcgGXtCrEXdehja6lMLrrkMrp2y8zY=
Subject key identifier: 60:2E:94:79:8B:D0:55:13:C6:7F:18:D9:3E:16:F1:ED:94:B8:48:5F
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 019F122EDF6323051A2FAFE7F8A742CF8401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 0AE4
Signing time: Mon 29 Jun 2026 07:01:29 +0000
Manifest this update: Mon 29 Jun 2026 07:01:29 +0000
Manifest next update: Tue 30 Jun 2026 07:01:29 +0000
Files and hashes: 1: ILa8ZoCJZMkNP3VlFiAUG63QFj0.roa (hash: ithiJooqYNVv+hqIuWx9pXDq5+Ysuyh5ujkHJJ0K2Hg=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: cgrzprF/rTXOgiLke65m1VhLVkeJZnpE9s2JyN+8wvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:df:63:23:05:1a:2f:af:e7:f8:a7:42:cf:84:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Jun 29 07:01:29 2026 GMT
Not After : Jun 30 07:01:29 2026 GMT
Subject: CN=602e94798bd05513c67f18d93e16f1ed94b8485f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:fd:cf:81:1b:63:0c:6e:91:c4:5c:69:df:
12:4a:a7:d5:b9:3f:9f:79:05:36:de:4c:0e:be:c1:
11:91:d0:33:9b:20:24:dd:60:38:40:a2:d2:64:cb:
a0:30:d7:7a:25:e7:c1:5e:59:9e:aa:9c:57:9e:51:
2c:57:cf:5a:21:94:58:a4:6f:6a:52:59:ea:73:7f:
cf:dd:a0:4e:d3:b9:e5:f8:8c:b9:5d:06:31:6a:de:
3d:00:40:bc:d6:50:f2:3a:89:23:20:3a:53:9a:0b:
32:1a:4c:86:da:8b:5a:cd:69:98:40:70:4a:7c:e6:
6a:de:e2:34:fe:e6:39:36:8c:4f:a0:69:b3:fb:69:
28:0b:5f:7e:12:5c:bc:e1:01:cc:ac:2c:2c:d0:4c:
0b:85:a4:59:9c:68:6e:0d:c3:b9:a7:8a:85:11:5b:
f0:03:ff:e0:d3:01:0e:86:b2:0a:ff:95:f4:ba:d2:
2a:61:61:5b:72:d5:a1:45:db:bc:1f:ce:a3:52:60:
4f:c5:52:39:04:58:6d:3a:57:53:1a:36:f1:61:20:
63:b4:00:fe:e1:8f:70:6d:64:a1:ba:ba:af:27:a9:
80:9f:ce:a4:8a:5e:83:6b:ac:0b:3b:72:b0:c7:35:
46:31:db:b5:22:8a:2f:1c:b7:e6:51:01:e6:e0:1f:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2E:94:79:8B:D0:55:13:C6:7F:18:D9:3E:16:F1:ED:94:B8:48:5F
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4e:e5:bf:bc:8a:90:7e:8f:2e:bf:0b:bd:c9:97:a0:7f:3d:
4f:da:ee:56:3c:fc:2e:01:ae:dd:f2:ee:04:85:94:ef:fb:40:
47:6a:d4:86:8c:4c:e8:a7:2a:28:5e:f2:25:0b:2c:e1:88:9d:
93:5b:99:01:32:fb:f1:07:ba:a3:83:03:d1:a1:2d:64:a6:ac:
3d:1f:36:67:b2:df:8e:96:36:ee:10:b9:dc:64:06:1f:8c:3c:
0f:e8:7c:65:31:7f:a1:98:1e:a7:7e:39:e4:82:a0:00:d2:f1:
23:38:c7:32:25:da:a3:ca:0c:94:74:25:a4:47:cb:e1:98:59:
d8:e9:f0:b2:f5:56:0f:60:4e:7f:dd:d8:79:41:9f:76:e4:3d:
16:f2:a1:35:f5:6f:54:9a:85:a0:c7:c6:62:0d:e7:08:b4:fd:
ac:08:dd:47:61:f4:fb:c8:9d:27:c1:46:59:c9:0a:8a:9c:ce:
07:d8:3a:32:44:55:8d:d1:85:6d:02:c7:66:e1:24:ab:7f:bf:
5d:58:63:2a:7e:1a:b2:10:e9:c8:e9:be:47:c1:83:0b:f2:0b:
41:49:25:05:06:19:91:01:3a:1e:80:60:47:ec:83:22:8b:ac:
bb:4e:8e:5e:e3:6a:77:e6:06:09:55:ee:31:46:69:4d:b2:a2:
59:f4:54:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:44:48 2026 by rpki-client