Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: JVX+VvCNysx0MMnQbIL8NPbMSZrwtQJxjm5HWcDTRcc=
Subject key identifier: 89:C9:3B:20:F2:7C:BE:A5:EC:C0:3E:D9:B2:F8:94:68:F6:69:A8:D0
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019EB7331C86293A82667E9CA85980FD3A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 16A8
Signing time: Thu 11 Jun 2026 15:00:40 +0000
Manifest this update: Thu 11 Jun 2026 15:00:40 +0000
Manifest next update: Fri 12 Jun 2026 15:00:40 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: WOqRNuwMQIu160lZVSX7EsKUAvheBu8xS5O5F/gpLRo=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:1c:86:29:3a:82:66:7e:9c:a8:59:80:fd:3a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jun 11 15:00:40 2026 GMT
Not After : Jun 12 15:00:40 2026 GMT
Subject: CN=89c93b20f27cbea5ecc03ed9b2f89468f669a8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:f9:a3:c8:ce:ab:69:c4:2e:76:e5:8b:09:
24:8a:7d:c2:28:f7:77:84:2b:be:db:03:4c:22:08:
fb:57:2d:3b:75:cb:10:d0:0b:09:9b:22:b7:db:ab:
11:13:bf:72:b7:14:1d:ff:bb:3a:ae:95:6f:cc:43:
0e:82:8f:16:cf:e1:41:55:95:a4:7d:bb:d8:0a:09:
23:34:17:ec:3e:7c:f6:18:ef:ea:78:62:d1:59:37:
c7:c5:c8:a3:5b:7d:54:0d:2c:7f:6e:66:ef:08:a6:
99:63:0c:0b:49:ea:f4:af:07:57:6c:fe:bb:7e:7f:
ba:83:41:8a:60:2a:6e:98:7b:41:be:49:d3:4c:dd:
0a:f2:62:82:40:45:cb:24:26:e3:87:da:b5:a2:d3:
38:7b:8a:1f:31:7b:63:88:d6:f8:85:08:06:7a:5a:
71:bf:03:1c:12:05:3f:12:5c:8a:4a:87:7d:fc:7f:
62:b3:90:c3:96:f4:19:3b:64:d1:7c:c9:77:63:e2:
ef:30:36:b7:a7:5f:71:46:c7:af:59:d3:51:0e:f8:
1a:83:6a:37:fc:31:fa:68:06:7d:b2:99:85:ec:7d:
6c:63:1e:60:17:61:b1:ea:fe:fb:db:d0:28:6e:2e:
3e:51:48:da:af:38:e2:76:83:c0:19:3e:bc:38:32:
34:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C9:3B:20:F2:7C:BE:A5:EC:C0:3E:D9:B2:F8:94:68:F6:69:A8:D0
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:20:33:cd:8d:a1:16:62:b9:cd:53:90:4e:0a:88:ab:3f:35:
d2:67:54:9c:62:28:e4:16:61:1f:bd:1a:10:c7:f8:75:1b:45:
3b:02:0d:61:7a:d6:98:a8:ff:f5:fb:f4:d7:65:f4:86:25:bf:
9d:e4:d9:2f:16:5f:35:44:71:8f:eb:c0:75:4c:48:2b:7c:60:
d1:69:a6:0a:30:6e:7b:33:c8:f9:37:a6:b1:a0:cc:42:96:0c:
f7:ee:31:52:f5:d9:75:d5:35:08:42:de:aa:ec:53:31:53:dc:
0d:34:a5:b4:97:73:0e:b6:1c:18:f3:33:81:e2:6c:08:f6:88:
44:41:8b:8e:0c:87:2c:8c:15:81:65:77:64:e9:52:d0:0d:69:
52:a1:d2:12:46:46:bb:d1:41:0c:42:04:a2:ca:97:7a:6c:4e:
2c:37:25:f3:3c:42:f2:0c:f9:27:8d:ba:95:c5:98:1e:06:da:
9c:5e:80:f8:7c:02:72:a6:26:4d:67:b3:b5:da:3e:74:aa:8b:
9e:34:0d:2c:2f:f9:36:1c:15:2d:59:b0:42:9b:bb:ba:2e:82:
19:e5:b6:74:d4:30:3b:d9:fd:8f:65:44:42:89:e0:17:97:9e:
f2:6d:91:e6:00:32:9a:1b:3d:d2:6b:74:6f:0e:2a:08:71:05:
19:48:b4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:07:21 2026 by rpki-client