Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: OyaEVTnw41EsPvK9zZpsl5YS2MGYkGFkhBQMJIRx82E=
Subject key identifier: 02:9C:B1:64:7A:DD:03:F3:FD:9B:CD:4A:7A:D3:9C:51:0D:18:96:26
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019F197A3B3D768F95BBBB60835CF869030C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 17:01:08 +0000
Manifest this update: Tue 30 Jun 2026 17:01:08 +0000
Manifest next update: Wed 01 Jul 2026 17:01:08 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: MCOxM+DTpkOQhZh4uqAiolLF8Piz1W1OhxjKuBGxeVU=)
2: WIclx685icB5o3UOREAKLFzzP34.roa (hash: uDpM1rHiGL2CuGW9o80RIXGPENrx4ls410ovEwWq5XE=)
3: hCTpwVd8i1hPStdoLxWMzM8N_TE.roa (hash: ihYHu1XwJ3avyhb/XoPHgm87ZbqnGY5kgmNHjUUXafY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:3b:3d:76:8f:95:bb:bb:60:83:5c:f8:69:03:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jun 30 17:01:08 2026 GMT
Not After : Jul 1 17:01:08 2026 GMT
Subject: CN=029cb1647add03f3fd9bcd4a7ad39c510d189626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:1b:38:b5:ab:17:52:90:23:cd:e6:dd:bb:
cc:d4:68:ec:fd:eb:ff:c3:6b:e9:18:1f:2d:2f:7b:
be:cc:84:8c:ef:61:f1:45:38:27:97:6b:e0:7a:df:
23:fa:db:22:44:1b:ee:d4:be:8f:24:e5:2d:98:8b:
69:e0:02:f3:43:b9:07:6e:42:44:d8:81:24:5a:f8:
28:de:95:aa:28:db:fc:c5:ee:2d:f7:5d:6b:00:42:
5e:47:74:47:d9:e2:7e:27:9f:3a:83:96:20:8b:89:
cb:6d:6b:1a:c2:ad:c9:bf:83:a7:2a:c8:3f:1a:0d:
30:62:bc:cf:d9:92:de:67:f7:8b:73:7b:68:fe:f0:
64:7a:d1:38:65:6a:79:0e:17:5e:33:0f:40:52:b9:
13:f9:ab:2a:30:c9:d8:f5:c1:67:2a:96:34:6b:28:
55:e6:b7:f0:10:85:14:c2:0c:12:e7:53:9f:4f:db:
fb:8f:ec:eb:b5:ff:f4:24:04:87:e2:6b:5b:1d:2e:
3e:14:18:81:f6:cd:a1:46:d4:80:7e:f2:1c:ec:29:
9c:66:9f:25:6f:49:e3:d1:da:ed:4b:51:71:7e:32:
ed:1a:64:11:b8:96:f4:bd:c1:b6:e2:ea:e5:15:c7:
d7:5d:67:c9:ce:71:f2:d3:c2:08:da:a6:cc:d8:12:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9C:B1:64:7A:DD:03:F3:FD:9B:CD:4A:7A:D3:9C:51:0D:18:96:26
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3d:58:fa:44:b4:30:f0:5c:b8:8c:95:92:37:47:b5:de:f8:
04:4d:7d:d7:e9:c9:b9:32:46:f8:ed:27:5c:e4:61:1c:7a:37:
5f:3f:3b:34:b2:e1:65:e8:7c:e2:57:46:80:d3:37:76:ec:21:
f1:9c:08:47:51:50:50:e9:0d:04:dc:d0:dc:57:87:97:cf:bb:
4d:b1:a9:25:80:9a:28:6a:49:8c:c1:1c:48:27:75:12:59:06:
06:6e:6b:1d:ce:b6:01:01:6e:cc:74:f7:85:e0:b4:9a:eb:fc:
6b:26:e9:10:3a:74:a3:14:60:d9:28:f0:87:1d:ac:1d:40:00:
a9:d5:aa:f3:71:0b:82:7b:cc:51:48:6a:14:68:d5:e9:78:08:
7d:11:5c:f1:6d:cd:a8:68:07:d5:2d:9b:36:87:9d:02:f0:50:
59:5a:a0:93:73:f7:2b:87:29:3e:27:f7:5e:2e:cc:87:73:c6:
58:c4:c1:7d:09:51:f0:e5:f9:0d:96:4d:c6:87:de:e2:a8:5a:
02:4e:b0:22:87:93:3c:ec:7d:89:1c:45:0a:b8:ce:e8:45:89:
98:da:f6:15:41:b5:65:38:2e:f1:5a:7e:50:0d:62:d9:32:ad:
be:be:04:a6:94:c0:60:94:9c:f0:1d:36:ee:66:63:60:9a:7f:
9c:e1:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:19 2026 by rpki-client