Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: 5vPAu9EXSJpXCx4KgPsvmn4vVjru0Yk6jMpi50GMyH0=
Subject key identifier: 1A:9F:A1:E9:75:CF:74:81:9F:00:EA:FA:44:12:6A:9E:4B:EC:D4:C1
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 019F189DDC8B201E07049EB040676BC6D38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 093E
Signing time: Tue 30 Jun 2026 13:00:26 +0000
Manifest this update: Tue 30 Jun 2026 13:00:26 +0000
Manifest next update: Wed 01 Jul 2026 13:00:26 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: xj2OmfdBfNHia9uOIp/BNCQkZZtiuzTmpJ1o1UCW1dI=)
2: G2elpiRe3mLE21vYizlf0cxzEYA.roa (hash: Eg0ncyWZplHxiExP5Yc2JBQmHWqje615/1fpu2tFHEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:dc:8b:20:1e:07:04:9e:b0:40:67:6b:c6:d3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Jun 30 13:00:26 2026 GMT
Not After : Jul 1 13:00:26 2026 GMT
Subject: CN=1a9fa1e975cf74819f00eafa44126a9e4becd4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:cb:7c:24:3c:be:84:e3:c8:65:f3:75:07:
35:b4:cd:a5:32:ec:6a:fb:b1:b2:5f:64:8e:b0:3d:
f7:16:f7:b1:8e:1a:59:38:ae:0d:9f:4a:37:2f:bd:
04:38:bd:ab:a2:db:0e:55:10:b6:ef:78:31:b3:74:
8d:9b:19:bf:b5:f4:20:f7:4f:9e:c0:ae:45:bb:14:
5c:84:99:64:9e:c9:18:31:d8:6f:a3:f8:07:fc:cf:
36:6e:13:80:57:fe:3a:72:5e:49:ba:6d:4b:be:8d:
45:e3:fe:39:9c:4a:ed:30:4a:ca:a7:2a:1e:98:46:
29:dc:f4:ab:22:b8:6d:05:d3:05:dc:ae:ce:3a:f8:
e5:5a:2e:0b:2b:13:94:4d:4f:87:d1:ba:23:5f:d2:
e3:b1:ff:07:a4:9c:18:45:b1:31:ff:57:9e:89:01:
fa:54:e6:ac:ae:84:64:da:57:2e:60:9f:24:bf:4e:
94:e3:21:98:24:e6:23:82:a1:21:bc:72:0c:ab:00:
94:7b:05:2d:0f:6b:f3:6c:80:c6:76:58:68:05:51:
74:49:94:4d:d6:1b:9d:e6:f0:ce:fa:20:a7:49:4a:
54:19:7a:3d:31:44:c0:8f:71:58:0a:05:b7:5b:63:
00:d4:24:61:ef:01:5e:db:b7:b7:f3:67:9b:dc:66:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9F:A1:E9:75:CF:74:81:9F:00:EA:FA:44:12:6A:9E:4B:EC:D4:C1
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9c:9f:e4:95:19:57:8a:8b:ff:e2:06:53:02:14:70:55:11:
31:ad:5b:35:86:e9:4a:89:37:c9:15:45:0c:89:88:40:59:77:
34:34:47:aa:1a:4d:85:5f:93:bd:de:b8:4d:0e:08:1d:85:e8:
dc:e5:9f:27:9a:5b:86:d8:72:21:66:ac:20:a9:a7:59:3d:7d:
d5:9d:ac:63:99:4a:d6:31:ea:99:7f:dc:b0:35:e4:3f:23:c8:
b2:dc:d7:1e:47:04:ed:9b:d5:88:0a:bb:38:5d:61:1e:73:d1:
c4:58:08:98:56:5a:bc:ca:9b:46:43:8a:51:51:44:d6:aa:6b:
98:15:ce:fc:6e:55:51:ba:68:9f:68:11:28:e2:8d:1a:11:70:
ba:b7:51:32:ec:d4:dc:96:c1:77:d9:34:37:b6:83:db:b6:a6:
5e:dd:c1:51:b7:3c:0f:d5:94:27:d6:b9:a1:61:25:85:59:91:
23:17:ef:4c:c1:a6:52:0f:6b:aa:93:c4:5b:be:6d:e9:67:44:
42:09:1b:4e:28:8c:a6:56:d2:07:25:d3:06:94:a3:db:2f:0c:
db:b2:b2:32:a7:de:b7:c3:8e:c1:8d:fe:7b:9d:1f:b0:c5:88:
d1:58:a8:6e:28:66:c2:2b:f7:fc:73:28:ba:cd:05:5c:85:84:
02:89:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:41 2026 by rpki-client