Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: A1GYnGSdl4l7QlYxkDyo9+QaWOQ2I5c720Khvzc90as=
Subject key identifier: 13:77:95:59:06:67:FF:D7:F9:3C:07:58:6A:5D:51:FC:58:A4:B4:CE
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019F18D6AAF7CC952D154D8C987D76C92A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 14:02:29 +0000
Manifest this update: Tue 30 Jun 2026 14:02:29 +0000
Manifest next update: Wed 01 Jul 2026 14:02:29 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: jIKsoyBd6Qrbqt18c+kGxBk0fs91yIfzuREuG0Fr9GE=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:aa:f7:cc:95:2d:15:4d:8c:98:7d:76:c9:2a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Jun 30 14:02:29 2026 GMT
Not After : Jul 1 14:02:29 2026 GMT
Subject: CN=137795590667ffd7f93c07586a5d51fc58a4b4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:fd:12:b3:ae:92:23:f0:32:b9:f9:8d:97:
ea:2a:f4:35:10:fa:00:86:0c:10:3e:76:0d:54:7e:
7f:52:c3:81:2a:33:d5:22:36:3a:e7:f7:95:c2:84:
63:d2:74:82:ff:7f:b6:44:ef:57:94:a6:8f:ff:fd:
85:12:13:f5:3c:71:cf:89:14:b6:db:0c:6f:0c:bb:
fc:4b:b0:4d:9e:04:f2:4d:bc:20:d0:55:9d:3d:74:
3a:1d:fd:71:8e:d5:a3:31:51:67:a6:4a:b5:36:7f:
b3:cd:84:ce:b8:18:d0:4b:96:14:56:d7:17:62:97:
69:7e:11:a4:32:5c:c2:32:95:88:82:20:74:c7:59:
65:ef:23:c4:17:bd:48:44:6b:e0:cf:43:e9:06:e6:
38:e1:79:68:74:ed:39:47:43:d3:f8:6c:a5:79:32:
8a:78:07:a0:0c:2f:49:ec:bf:65:1f:3e:1f:9a:92:
c8:83:6a:f8:d8:7e:83:78:46:f1:8f:d0:74:f9:a2:
4a:e2:b0:c5:80:6b:a6:83:81:be:39:46:a8:43:5a:
6f:7b:5d:c4:0c:eb:49:fd:66:11:75:76:d1:6c:a7:
e8:d7:a0:71:67:a4:08:c4:6f:1d:c8:b1:b6:87:ca:
af:94:0c:9d:e9:ae:ae:93:53:5c:fb:97:27:4d:ca:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:77:95:59:06:67:FF:D7:F9:3C:07:58:6A:5D:51:FC:58:A4:B4:CE
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:88:cb:c5:ee:c4:5b:27:eb:62:55:1e:71:ad:04:66:72:fd:
c3:3b:5c:93:51:52:93:df:cc:80:87:29:db:4d:f7:f7:70:6a:
a8:4f:85:d0:6b:d6:86:d4:e0:5e:1f:2a:e1:be:a6:46:1f:4e:
04:05:d2:77:4f:15:80:c1:e0:f3:62:8b:b7:cd:dc:47:5a:f8:
5c:ac:4e:33:4f:1c:4d:e0:a2:3b:0e:b4:e3:95:f6:d1:57:aa:
fa:f7:0c:00:de:01:41:5c:6e:61:a5:24:68:75:2c:b5:fc:17:
b6:61:40:7a:96:ad:19:08:68:10:e8:2c:8d:46:43:1d:35:5e:
fd:71:6d:89:ac:b3:16:a0:4d:46:d1:b6:f4:a1:e8:11:42:48:
98:9e:43:05:5f:bb:7a:3c:83:5c:20:23:bc:1a:c8:88:b0:75:
73:23:0f:90:58:b6:1a:a0:41:34:52:e6:45:cd:4d:70:0c:94:
3c:99:82:d0:d0:af:72:36:43:a2:da:05:05:8c:d6:cc:0e:3c:
33:c3:fe:e0:2e:fd:10:d0:05:d6:d5:53:d9:09:70:d8:e8:c9:
b1:3b:78:6e:15:6e:86:58:8b:34:c9:3e:f2:b4:ad:a0:98:70:
30:93:f7:a1:89:3b:87:f2:d5:b4:da:94:d9:19:e7:10:e2:39:
68:15:ae:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:45 2026 by rpki-client