Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: gmTdqymdFkevf3YxBCMNxB9Se3R+j+xkr6v0vcsNubI=
Subject key identifier: 9D:9B:F6:F0:B1:D0:57:35:E5:B2:3B:C1:36:49:0F:78:6A:C7:97:DB
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 019F1867A28E20B47EECE4D536A814426C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0BEF
Signing time: Tue 30 Jun 2026 12:01:12 +0000
Manifest this update: Tue 30 Jun 2026 12:01:12 +0000
Manifest next update: Wed 01 Jul 2026 12:01:12 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: Z21SrW5AgAnQRHl7p3uynTPCQfcriZvFAViJ/g/ua1A=)
2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:a2:8e:20:b4:7e:ec:e4:d5:36:a8:14:42:6c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Jun 30 12:01:12 2026 GMT
Not After : Jul 1 12:01:12 2026 GMT
Subject: CN=9d9bf6f0b1d05735e5b23bc136490f786ac797db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:97:1f:d7:66:7f:3b:e9:ce:cb:de:6c:c5:a1:
5a:77:17:e5:78:15:35:a4:0f:e6:6b:14:f6:17:7f:
3b:43:ae:de:02:2b:1d:15:cd:64:66:f6:46:6e:c1:
85:f3:2a:9a:2d:f8:0e:75:09:e3:a1:86:a7:ba:d0:
40:ee:05:e1:4f:ee:37:9b:ae:6f:66:ee:60:17:78:
7b:8a:88:66:4b:2e:1c:c1:b2:ca:4a:f7:9e:70:e2:
dd:af:f6:76:7f:ee:c5:63:54:f7:fa:79:72:68:a6:
bf:3c:75:70:c6:c1:92:1d:06:69:65:72:94:22:cf:
0e:fc:90:e2:3c:b1:08:e9:87:35:68:ed:87:70:b3:
b1:89:19:28:b3:b6:a6:6d:ba:ca:f0:ae:3d:37:da:
12:3a:3d:e3:e8:04:c1:aa:a0:b9:b7:d5:51:9d:3a:
8d:e9:a6:81:1f:7f:02:26:be:3d:ef:ba:5b:c9:cf:
90:3f:12:a2:ff:59:6a:bf:ad:01:9a:c2:13:16:8c:
7c:ad:e2:4a:92:fc:17:04:c5:1d:7c:e8:76:4b:69:
5f:6c:53:76:5d:a1:b0:40:ac:6c:ff:13:af:7c:56:
4c:b5:14:37:f8:a2:da:2d:fe:5d:eb:33:75:1d:78:
7c:c7:61:2b:a5:31:ae:a3:eb:98:bf:ca:d6:7e:33:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9B:F6:F0:B1:D0:57:35:E5:B2:3B:C1:36:49:0F:78:6A:C7:97:DB
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d3:9e:26:86:89:05:ca:a4:43:1c:95:63:b7:77:85:b4:af:
d8:d2:5b:eb:d6:bd:06:0a:b3:68:83:50:12:e0:e2:3c:50:dc:
67:d2:f3:49:f6:96:af:50:25:43:5c:b6:52:09:66:1f:97:97:
ac:08:34:b4:6c:1d:45:f8:b2:a2:32:d6:2e:f1:67:9b:5a:f4:
5a:62:1b:d9:c2:a2:3f:ee:a6:44:53:25:09:fe:2a:72:85:be:
8f:16:5d:13:a7:97:20:44:f8:41:36:60:43:72:83:61:11:d8:
bd:ef:7c:17:f7:8e:cb:10:aa:8f:de:00:7d:ec:3e:60:f5:d1:
df:ee:28:9a:42:40:0a:88:64:ff:18:bd:49:47:57:6b:c4:d1:
f8:74:c2:5c:62:c3:2a:3d:76:d9:44:d3:3b:7c:d3:15:14:8b:
c0:b8:3a:56:cb:c7:b4:4a:58:55:d6:7e:e7:6b:b6:90:77:dc:
69:18:25:65:f6:98:cc:dd:8f:ef:72:7a:90:df:a5:f9:cd:57:
18:a4:91:41:00:e5:17:fa:41:52:dd:a6:c5:ea:c3:47:f3:fd:
8b:11:55:d7:aa:c1:e9:f3:4a:96:6e:bb:bf:9d:b8:4d:ea:40:
8c:6b:1f:21:0a:92:03:2a:cb:70:ea:e7:2d:5a:0c:c0:94:14:
7c:ff:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:16 2026 by rpki-client