Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: BwwNLBP6DVZxnDWRUhudvjq9xe06iFrr7/zyznFqPHE=
Subject key identifier: 5B:AA:74:11:36:BF:6B:65:86:4D:4F:2D:DE:3A:72:F1:FB:97:B3:39
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019F12D3C4B597FDE4824E4CA85F9DD5FB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0CBD
Signing time: Mon 29 Jun 2026 10:01:35 +0000
Manifest this update: Mon 29 Jun 2026 10:01:35 +0000
Manifest next update: Tue 30 Jun 2026 10:01:35 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: Ww86DUv7Um1bizg/c1kzQzyNZvTjm/E3zDKcWu73kfU=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:c4:b5:97:fd:e4:82:4e:4c:a8:5f:9d:d5:fb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Jun 29 10:01:35 2026 GMT
Not After : Jun 30 10:01:35 2026 GMT
Subject: CN=5baa741136bf6b65864d4f2dde3a72f1fb97b339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:99:0a:35:f1:11:6f:7a:be:27:c1:72:8e:
94:d3:21:c3:a8:4b:02:d8:da:d3:ae:98:e2:11:b5:
4d:52:74:e4:a6:cf:3d:64:32:4d:47:55:9f:6b:12:
30:c2:44:ee:7d:a1:c5:29:f0:ef:81:7b:ff:aa:44:
7a:8e:16:df:c3:bf:d9:11:f0:82:07:3e:74:f2:9b:
57:96:8a:1e:ee:4d:65:a1:e5:06:13:43:42:76:76:
7b:f8:2c:fb:3e:32:9f:41:1c:bb:a6:f5:53:e9:78:
37:4d:34:ed:6b:f2:f7:04:a5:ef:d2:9e:ee:a2:8a:
53:35:30:bc:a4:75:fc:3a:91:a3:a0:5b:23:08:d3:
92:41:bf:cf:7c:89:13:9d:59:fd:c0:ad:70:18:2c:
3e:28:8b:6c:f9:97:5c:da:bd:7e:16:7c:0a:45:4c:
1f:55:a9:f4:90:38:05:44:59:ec:1b:07:8e:fa:86:
d9:f7:50:b2:e0:6b:a7:c6:91:2c:15:e9:43:23:c0:
bc:13:25:e7:12:f3:c9:0c:a3:31:1a:8e:ec:1e:e9:
49:ec:aa:d0:52:2c:28:cd:05:69:fa:c6:7c:4e:95:
dc:93:03:6c:1c:00:9b:c1:4e:2b:8d:f5:12:21:87:
07:fb:fd:de:a7:fd:84:42:a7:80:5a:86:0d:ff:14:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AA:74:11:36:BF:6B:65:86:4D:4F:2D:DE:3A:72:F1:FB:97:B3:39
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ae:62:d5:d9:5c:d2:c0:16:3b:fc:89:d3:39:6d:21:ca:d1:
2c:df:de:e1:16:02:56:3e:80:13:b4:8e:19:6e:f7:d6:66:d1:
76:74:61:20:01:5b:1d:64:84:fb:19:a8:f0:33:7f:5c:13:f3:
c8:8f:a1:27:9c:9c:7e:86:20:57:b3:de:18:26:a5:e1:a5:e0:
5b:60:32:94:ac:2e:b0:76:03:1d:f5:d1:52:00:6a:3b:22:a7:
88:f7:18:90:e7:0d:5c:ab:3e:02:01:ae:c5:7f:e5:a8:86:4c:
1e:ab:f7:4a:25:b3:93:ce:68:3d:4b:9d:64:f7:1c:d8:26:21:
45:1d:e5:b4:f1:db:5f:1b:17:78:40:24:5d:56:2a:7d:35:ba:
1a:7f:55:26:00:65:f4:f6:25:29:df:ec:7f:a9:82:71:ed:a4:
60:95:e6:95:4b:e7:51:22:40:4b:47:1d:6c:67:0a:4f:ba:ec:
ae:c9:66:2c:b5:ff:5f:00:05:cf:67:b9:1f:4e:c2:60:ef:1c:
39:a9:db:e3:10:6a:fa:d0:f2:0d:9d:f7:56:3c:a0:b0:70:71:
ad:51:99:15:86:a4:29:2b:4e:81:20:8b:a1:9d:7c:50:e2:d9:
78:ac:77:c1:e2:55:71:ee:00:25:ef:59:ce:27:cd:aa:5c:6e:
73:4a:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:39:59 2026 by rpki-client