Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: GckvRs5dK70wGXeKhiAW1mNkiKXKRKReMevQgCyWQq4=
Subject key identifier: 9E:D6:BA:DD:6C:DF:E8:9D:F8:AC:69:09:85:2D:55:62:E2:93:A9:B5
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 019EFCF28A981D37B1DB05C0BE7C18DCEB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: 014A
Signing time: Thu 25 Jun 2026 04:03:34 +0000
Manifest this update: Thu 25 Jun 2026 04:03:34 +0000
Manifest next update: Fri 26 Jun 2026 04:03:34 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: Y5T9E3QdkoEVvHamBpTv16hVwnDgCssU9/YcRa29N1g=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:8a:98:1d:37:b1:db:05:c0:be:7c:18:dc:eb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Jun 25 04:03:34 2026 GMT
Not After : Jun 26 04:03:34 2026 GMT
Subject: CN=9ed6badd6cdfe89df8ac6909852d5562e293a9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:2b:6b:f0:90:9b:d1:a8:aa:ac:58:0d:91:
fe:a9:61:8f:1c:ed:86:f0:79:8a:91:16:bc:59:94:
a9:42:dc:e2:80:ff:ad:83:de:c4:85:ca:4c:68:55:
67:bb:fd:6d:a4:df:1b:a4:f4:0f:55:35:5a:b3:66:
17:9f:38:56:88:02:c3:85:74:41:85:1b:b0:c6:1e:
1b:34:00:6c:6e:9c:3f:f3:31:6c:61:05:ce:ef:37:
f5:4c:69:0a:ff:e7:a5:1b:b1:ae:59:49:95:55:5a:
88:e7:35:15:f2:4d:70:58:4b:33:59:87:45:27:51:
cc:89:48:52:64:bf:a4:87:91:38:30:e7:26:a9:e1:
cf:a2:54:f3:f1:04:b9:ab:57:0f:ab:d6:c8:7e:fc:
e2:2b:b6:10:f1:89:9c:79:f7:e1:bd:16:26:73:c7:
92:37:4a:93:73:5f:59:54:2a:52:9d:6a:60:7e:8f:
a9:db:4a:61:39:66:3e:4c:64:5f:d2:10:de:a1:a7:
7c:e4:9b:13:b0:27:b1:3e:5e:b3:05:59:66:80:59:
af:fe:7c:20:19:8f:74:75:fa:e9:64:43:67:42:77:
64:23:05:38:0f:70:96:77:e1:4b:43:7b:4f:36:c4:
cc:f4:b1:a6:85:2c:4e:98:06:85:3d:c8:54:f4:7c:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D6:BA:DD:6C:DF:E8:9D:F8:AC:69:09:85:2D:55:62:E2:93:A9:B5
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5d:87:10:05:3d:df:de:a4:c2:6f:6d:ad:4e:fc:19:f9:1a:
75:03:87:af:b5:be:06:65:ce:8a:ac:2a:49:76:db:1e:7d:95:
6d:c8:36:28:4a:5f:50:f2:78:ce:1d:02:8d:3d:95:9a:59:a3:
93:f2:87:e4:aa:d0:39:87:2b:ad:2c:52:c2:d1:44:26:75:17:
d1:31:7b:56:3f:1e:bd:18:c6:6a:7c:9e:65:c4:d2:d2:e4:95:
9b:08:8f:87:05:87:9f:d4:d4:88:df:cc:e4:55:d1:e2:7f:6f:
90:ad:58:f9:30:14:4b:66:bc:01:c7:90:47:c7:e2:85:9b:fd:
89:27:0d:88:a6:cc:91:16:b8:21:01:ba:41:2d:93:3c:b2:f2:
49:3a:31:f8:28:52:1e:b5:54:b6:e6:7d:b9:4c:35:b7:0c:02:
0b:bc:3e:77:c3:73:30:90:01:29:99:2d:2c:41:29:09:1e:5e:
fb:5b:39:ea:08:fe:c0:34:0a:e6:c1:5e:73:61:74:31:cb:5c:
8e:a9:76:6c:96:40:fe:3d:9d:52:55:b1:bd:73:2c:ed:79:c4:
b8:7b:7e:2d:6d:b4:e5:7e:3d:22:dc:5c:4a:c3:b3:84:27:5c:
7d:9e:d7:b3:53:73:34:26:74:89:b8:47:98:12:af:03:a1:49:
c4:27:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:46 2026 by rpki-client