Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: v0IQMhaNBSnSKc8tQ0nXKWQdnJr3gUaVNriLZj+gXuw=
Subject key identifier: D1:A8:CC:3D:FD:DE:6A:50:3A:A4:68:55:EE:53:1B:36:7E:20:3D:DE
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019F11F7C1FA714AFF7A75D0EDF460170735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 04D0
Signing time: Mon 29 Jun 2026 06:01:17 +0000
Manifest this update: Mon 29 Jun 2026 06:01:17 +0000
Manifest next update: Tue 30 Jun 2026 06:01:17 +0000
Files and hashes: 1: 69-gm5sAHUb2zlkusSsJwnhPOtw.asa (hash: w8dP42z3PzlgsL7213s07oZP842qzAir4wVoWzTTHUs=)
2: 9CS7xyErSCJY_wQFDW0wV1rIDq0.roa (hash: e2yWbh2yduLvhGO9ZZhdKHXEB8OOHqP7OQbj14TpHIU=)
3: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: PbUnDFBl8PtDbFJU9/sdiI0jpLIvcrYTFrgTeE6wNWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:c1:fa:71:4a:ff:7a:75:d0:ed:f4:60:17:07:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Jun 29 06:01:17 2026 GMT
Not After : Jun 30 06:01:17 2026 GMT
Subject: CN=d1a8cc3dfdde6a503aa46855ee531b367e203dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:85:de:c9:ea:cb:54:9f:61:99:85:83:36:
78:df:d7:78:58:86:7c:4e:f6:9d:de:1b:25:b8:6b:
68:d5:e8:ea:c3:a1:a0:9f:52:a7:f2:88:ee:7a:13:
4d:90:ba:57:a6:de:51:eb:6a:93:b0:6e:95:35:c5:
c0:33:a5:6e:cd:f7:58:ba:42:0e:85:cb:41:0b:7d:
3b:b7:96:31:e6:00:5f:f0:33:44:2b:c9:b3:cc:dc:
b5:e9:91:07:0d:84:02:c1:b7:42:30:98:58:c1:e1:
b0:83:a5:9d:14:71:d0:21:b2:83:f0:60:dc:29:e7:
aa:64:cb:61:2a:04:a0:b0:a7:8b:82:e2:45:d2:a1:
f3:76:51:4a:82:87:a8:f5:2b:3b:ee:a8:c0:61:9e:
b4:41:c6:6b:22:28:fa:e2:d7:41:f7:4b:46:32:c9:
2d:aa:0f:dd:20:f3:a2:cf:aa:38:31:b4:99:63:6a:
5f:ba:51:f7:f1:c2:93:75:2a:7b:81:75:8d:b3:0a:
17:41:fc:f0:92:0c:24:68:31:2b:fb:b8:43:68:a6:
b8:28:75:f8:25:ae:43:79:d0:8c:0b:d6:76:80:b1:
8c:0f:f8:dc:80:55:66:56:8e:a3:fa:e4:73:ff:d9:
6a:b6:b8:e2:00:86:0a:0b:97:e0:6a:39:cc:f9:aa:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A8:CC:3D:FD:DE:6A:50:3A:A4:68:55:EE:53:1B:36:7E:20:3D:DE
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:40:fe:c1:4a:7f:0d:0d:15:c9:bd:b2:37:bb:3b:79:69:fa:
00:ce:cd:53:fe:fe:c2:a7:db:3b:ba:a0:0d:e1:a7:74:d8:c3:
4e:8c:ce:da:8c:2a:d5:d9:7d:76:4f:ba:eb:e6:8a:31:67:3d:
e2:b9:c8:32:82:f4:4d:29:c8:ef:3d:cf:6b:ed:6b:fb:e9:97:
7d:c3:b7:11:19:bc:e5:75:12:81:2a:59:52:1f:9e:38:e2:79:
96:8a:b7:77:20:f9:fd:56:aa:bc:ee:68:ac:08:5f:ea:32:0d:
ca:09:c7:50:6c:61:fb:c1:1d:70:7e:ad:76:f6:64:b9:11:27:
9a:f3:3c:f0:02:06:79:4a:1e:29:9c:f0:0b:b8:d2:1a:de:6d:
64:01:ef:db:c3:1b:62:b3:87:47:bd:3d:49:75:5c:4e:b2:aa:
a3:22:85:f6:85:d8:2c:6f:cf:d4:7d:c2:6f:cc:a6:c0:da:30:
9d:23:09:c0:2a:1f:21:8b:bb:0c:2e:b3:b5:bd:e7:45:14:82:
2c:e9:10:57:99:54:5f:be:ae:c4:59:54:73:b3:a1:0b:9e:59:
0d:8a:c9:b5:d6:e8:a4:38:29:d2:4e:b7:e8:79:66:10:da:2e:
bb:1f:45:75:00:f6:e0:3f:bb:70:f7:01:b2:73:04:7d:cd:0d:
38:f2:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:37 2026 by rpki-client