Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: fkSoLmDZ3fjOjy0zdqdUnxX75UKxHryy6CfRmoR2Wh4=
Subject key identifier: 8D:3B:66:D6:65:4A:B3:FF:A6:F5:3A:EA:19:8A:DB:9E:3B:17:53:9D
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019F190D1B2673F664E8D619A04ACC76857B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 15:01:57 +0000
Manifest this update: Tue 30 Jun 2026 15:01:57 +0000
Manifest next update: Wed 01 Jul 2026 15:01:57 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: jz3gllfrL2x8KT7Yb0W4P6AUzwnztNFni9BC4jWU45w=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:1b:26:73:f6:64:e8:d6:19:a0:4a:cc:76:85:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Jun 30 15:01:57 2026 GMT
Not After : Jul 1 15:01:57 2026 GMT
Subject: CN=8d3b66d6654ab3ffa6f53aea198adb9e3b17539d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:4c:4c:71:2c:7b:2d:92:2a:31:27:70:fe:
af:83:8f:8f:5c:1d:80:1c:12:70:13:8d:c0:74:6d:
c9:4e:09:aa:67:99:28:0c:eb:d8:de:23:ab:53:cd:
67:30:d6:3f:2c:f7:59:19:51:33:79:e7:d2:c8:87:
b0:1a:2f:3b:8c:9a:55:fd:45:58:6d:e5:35:45:f7:
23:10:dd:5f:eb:b7:71:f2:37:17:09:2c:2a:32:e2:
56:d0:4d:19:87:bd:97:44:50:1e:bc:66:12:f1:7f:
b8:67:0a:d8:38:7a:6f:4c:fb:a0:14:9a:f6:77:fc:
32:16:55:f1:ea:93:e6:11:b4:29:30:71:fe:2f:06:
be:f9:a9:ee:1d:2c:17:50:9f:4a:2a:23:ad:3b:0c:
51:ed:5c:4c:bd:e0:85:aa:20:18:05:d6:ee:69:46:
ed:8e:44:ac:70:76:a6:00:45:0d:55:3b:e9:40:99:
42:ff:dd:fa:77:67:94:29:8d:a3:e8:0a:80:a9:d6:
7e:f6:bd:0f:96:d7:d4:17:e9:56:69:b2:a3:9f:c8:
1a:db:da:c9:d2:7e:81:fe:25:1b:c7:f3:b9:61:7a:
17:5f:fe:6e:f2:67:e8:26:fa:05:d8:11:6c:89:bd:
ab:5e:e2:c7:a5:80:fc:e1:8a:61:c0:c6:10:d4:b9:
2f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3B:66:D6:65:4A:B3:FF:A6:F5:3A:EA:19:8A:DB:9E:3B:17:53:9D
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:60:7a:47:4e:4f:60:6f:03:2b:1e:43:58:d4:85:66:3c:c1:
4f:d0:5c:28:e0:97:55:53:3e:33:eb:4d:ce:1f:be:44:e3:51:
c3:8b:ab:b2:c3:b7:4b:d2:56:2b:6a:5f:68:d3:c6:01:4d:bf:
66:aa:fa:1d:13:a5:cb:fb:71:a4:57:ba:b8:3b:3b:46:2e:40:
78:55:87:6c:8c:32:2c:e8:f2:68:2e:58:11:f9:e8:2a:b1:0a:
06:15:d1:f5:9a:fc:a0:cd:0c:9c:c3:50:1f:07:15:37:6d:a4:
8a:78:c1:0b:5a:f0:cc:18:b6:20:fe:4c:15:2d:59:30:d6:14:
82:1b:25:4d:4c:8c:e5:70:1d:47:72:a4:cc:d3:43:c3:8b:e1:
e2:f4:70:7b:97:25:8e:d3:b0:25:8e:1f:2b:5d:a3:48:dc:48:
e9:d5:3f:57:44:a8:51:b1:80:fd:03:94:10:92:a8:4c:8b:02:
3d:6b:18:44:e0:a9:f4:16:7d:b7:a5:45:da:06:cf:5a:fa:0e:
8d:1a:54:55:5b:91:77:9e:fd:9f:20:64:e3:44:2e:2e:fb:db:
71:e0:88:56:78:05:44:c9:52:be:6d:28:b8:44:14:6f:2e:27:
71:5b:e1:4a:3e:6a:db:ac:a6:e7:41:77:7e:aa:d7:3d:b2:62:
5c:4d:34:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:12 2026 by rpki-client