Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: oER+P58b87JGMaxLrg0vsDpk9gaGqAw9/3yqqYjvYnA=
Subject key identifier: 94:3E:2A:94:72:34:4C:DB:0B:03:38:24:A9:4F:36:98:15:FD:87:21
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 019EB6FC1CFA334DEC507BA78B94F6478FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: FA
Signing time: Thu 11 Jun 2026 14:00:36 +0000
Manifest this update: Thu 11 Jun 2026 14:00:36 +0000
Manifest next update: Fri 12 Jun 2026 14:00:36 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: Un77OJC9MbJ6Vf9kab3iX5DYKEfRXtZ6uUNDylKTQyA=)
2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:1c:fa:33:4d:ec:50:7b:a7:8b:94:f6:47:8f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Jun 11 14:00:36 2026 GMT
Not After : Jun 12 14:00:36 2026 GMT
Subject: CN=943e2a9472344cdb0b033824a94f369815fd8721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:b7:87:3c:89:82:30:0d:d9:39:91:a1:dd:
11:b6:c4:71:7d:e1:ea:67:4f:42:a9:cb:f5:de:9e:
99:c4:5a:d4:94:d5:e1:13:c9:79:8a:bd:83:04:91:
95:31:ae:94:39:5a:41:da:f1:db:4b:d3:bb:09:21:
62:6b:fb:01:0b:5b:00:52:d8:96:22:2b:bc:ee:1f:
5d:d6:61:ad:44:9c:f9:b5:90:3e:69:01:f3:4d:0a:
ea:43:1e:da:93:73:21:fc:5b:a9:ad:8a:ee:c8:bd:
c4:b7:a8:03:a7:44:20:92:1f:7e:78:41:9f:1a:34:
b1:43:63:d2:69:6a:0b:b7:36:a2:b4:e2:13:d9:b3:
5b:f8:85:59:7b:a0:b8:98:5e:47:cb:c1:c8:4c:64:
23:f7:8d:5a:4a:ac:85:19:ae:88:20:c1:9e:e2:fe:
ae:78:d5:e9:6d:dd:fb:c6:e9:46:09:d8:60:82:f3:
89:7e:e5:3f:35:95:39:c6:da:73:78:69:94:7e:2d:
e7:72:97:83:27:d0:63:85:76:ef:b0:e3:f1:83:a6:
89:e3:87:40:d2:67:66:a7:7b:37:2f:25:9e:79:23:
79:c6:60:b6:bb:f0:98:ea:d3:91:70:06:3a:0f:13:
7f:00:fe:05:8f:4a:f6:2c:04:23:fe:39:7d:d7:9b:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:2A:94:72:34:4C:DB:0B:03:38:24:A9:4F:36:98:15:FD:87:21
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3b:d2:c0:d8:10:39:96:e3:81:89:81:63:fb:8e:9d:11:bb:
86:7c:9f:36:2f:90:a5:8f:0c:31:60:7d:6b:37:a5:cb:f4:92:
9d:15:bb:f9:59:d1:44:e4:91:ad:2a:c9:d8:01:9b:f9:84:07:
3e:7d:fc:8e:b3:67:74:db:9d:25:13:f9:e8:a6:54:c8:21:91:
2f:89:3d:59:a5:f6:04:bb:53:a0:db:ef:95:25:5d:90:f9:cd:
27:9e:46:7e:40:a9:e1:fc:39:da:21:3e:bf:dc:09:0a:8c:a9:
73:19:95:e4:38:25:d7:ce:b5:eb:82:de:90:85:29:0b:67:82:
39:99:b7:64:63:6c:50:b2:11:bc:a5:d9:ed:fd:3d:5f:73:cd:
fe:33:5d:73:81:44:f4:b0:76:eb:44:bb:6c:81:b7:b5:73:7a:
6a:55:67:8b:23:a4:66:87:2f:ba:cb:df:4a:50:06:ab:ba:d7:
5f:08:1c:ce:df:76:03:c1:b5:96:b4:7f:05:79:95:ce:71:b9:
08:df:18:27:6b:4c:30:20:5d:91:dd:51:7a:ec:8f:5d:c7:b6:
4a:24:3b:bc:ca:ae:f1:b0:ad:2f:79:9e:94:77:9e:61:a1:84:
e8:d8:48:d6:0e:66:60:1b:38:79:29:26:3b:a4:ad:c2:42:09:
fd:c8:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:42 2026 by rpki-client