Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: ryVf72vYlQ5ssKGgjgU2OtCeiqpz465KyLM80pQkFCg=
Subject key identifier: 51:0A:58:3B:AC:F3:40:D3:DB:10:4D:B7:01:38:20:24:46:38:D0:B8
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019F1503D2FEF0DD7F09999472A848134BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 14B9
Signing time: Mon 29 Jun 2026 20:13:19 +0000
Manifest this update: Mon 29 Jun 2026 20:13:19 +0000
Manifest next update: Tue 30 Jun 2026 20:13:19 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: 6eOsy8tjt4yIigyt/QF0Ob+49atRne/0wqaHcXqDiVw=)
2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
3: ObqCC5ItaIb9zSaMr1gSLuQWW7g.roa (hash: z8qeiKJfszyHlpziW66XElBOILDVztPeTixCMaYCXnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 20:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:03:d2:fe:f0:dd:7f:09:99:94:72:a8:48:13:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Jun 29 20:13:19 2026 GMT
Not After : Jun 30 20:13:19 2026 GMT
Subject: CN=510a583bacf340d3db104db7013820244638d0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:f1:18:b1:fb:cf:da:b2:37:7e:fc:f7:01:
7d:ea:a3:95:9a:40:7e:bc:83:3b:1f:9a:11:91:a0:
28:82:9e:46:65:c8:29:46:1b:da:0a:13:3d:dd:51:
f6:c8:14:8e:02:02:10:7b:23:5f:99:9e:63:17:f9:
ed:0c:29:cd:ca:46:7e:34:a9:3c:7e:f4:1c:b6:1d:
24:0d:da:92:ce:c1:d1:dc:c9:15:d1:83:0c:4d:a1:
c3:72:ad:b7:1f:ca:c7:a2:82:cd:af:ff:72:d5:4b:
41:92:46:32:2b:52:c3:15:d7:65:7a:65:75:2e:e7:
7d:48:13:d2:76:11:8e:78:57:33:66:36:30:e7:21:
05:4d:d2:62:94:f8:92:85:5a:8d:38:ef:70:25:e7:
a1:c4:f4:ee:4f:56:63:b0:a2:56:d2:fa:a1:97:87:
b1:8e:45:a8:7d:58:ee:66:c3:e7:06:b4:b9:55:d7:
a6:f1:fa:5f:84:5a:e4:c5:90:b5:4a:25:25:c5:2f:
2d:c8:88:80:e9:f0:87:5a:5c:09:e2:2e:3c:97:fc:
8f:d4:35:1b:f8:85:93:fb:3b:56:0c:40:ec:08:00:
08:c0:44:ac:ef:f7:e4:95:b6:1c:a7:72:cc:cd:bd:
65:ff:0f:7c:1f:2b:fa:01:58:7c:0d:84:eb:bc:fe:
b3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0A:58:3B:AC:F3:40:D3:DB:10:4D:B7:01:38:20:24:46:38:D0:B8
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cb:a5:73:16:79:ba:ca:98:90:53:58:81:1b:2a:17:d4:92:
7f:98:6d:65:32:db:27:36:d1:7d:f0:a4:be:ad:be:9c:7f:33:
3e:9e:20:97:43:7f:f5:9f:b6:d5:85:2d:8f:73:a0:a4:7c:7c:
5c:ff:82:eb:f0:2f:86:6e:93:76:d9:ac:32:5a:f7:d8:ba:fd:
9b:6e:95:a4:df:9e:10:ef:6f:35:d9:0b:a3:9e:b3:09:97:bd:
02:70:af:a0:af:4e:db:aa:98:71:0b:97:b0:b3:cc:3c:d6:52:
14:68:94:c0:2d:35:e2:47:7c:a6:5a:71:3d:e7:9f:20:5b:82:
f4:03:5e:c0:36:2a:dd:66:73:ae:c4:64:6c:e4:f3:34:a6:b3:
c7:8c:35:e6:20:a1:36:6a:f1:ce:8b:50:21:f9:a6:7f:58:b8:
8c:dd:8c:18:a8:0f:e3:0b:8e:2c:0a:75:c9:d8:d9:37:41:8f:
2c:db:7d:ff:9b:1a:75:49:de:61:6d:b2:8e:46:45:7b:b6:58:
a4:d9:03:bb:c8:1a:26:06:a8:9a:ec:a5:4a:26:89:68:e9:29:
da:fb:dc:17:b5:3c:16:47:ca:42:b7:bf:50:71:c3:77:06:08:
67:53:5b:61:e1:cc:0d:95:4a:ad:cc:3e:27:a1:c0:4a:f1:b0:
3f:91:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:15:17 2026 by rpki-client