Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: Jz/l/I+9Jra0UVzDRzsgwsEdiOctGR+nTXGitojtb4w=
Subject key identifier: D6:72:26:47:4B:D3:B4:C3:A2:9D:70:6A:83:E6:B3:FA:AD:24:CF:34
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 019F1A566264587200DCFEF26D6506C4956D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 21:01:36 +0000
Manifest this update: Tue 30 Jun 2026 21:01:36 +0000
Manifest next update: Wed 01 Jul 2026 21:01:36 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: 9VB0l9YRshHCinApJxvmNRnQVoiSHjVAC2KXD2Y/mhE=)
2: Ci7zv_DnAxQFZ_khRfP74GA8IGU.roa (hash: cMMuhG7xrtOzbQLc/BDIeV4S+eWZ3lL1QRAwLOKEPgQ=)
3: hvjTcKPQGXrhHxR8FLC4HcSQhWk.roa (hash: nOSvBwGcqr48/L9ifoZ/bQG7uxX3sVi/N4rTjGne47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:62:64:58:72:00:dc:fe:f2:6d:65:06:c4:95:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Jun 30 21:01:36 2026 GMT
Not After : Jul 1 21:01:36 2026 GMT
Subject: CN=d67226474bd3b4c3a29d706a83e6b3faad24cf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:fa:bc:bf:1d:98:b3:a3:11:f2:a2:8d:23:
59:6a:f8:b4:fa:36:57:54:08:2b:09:bc:bd:4b:66:
a2:5d:0b:21:f0:cd:01:16:26:7b:08:f8:e2:2c:39:
7a:88:b6:89:92:7b:23:6e:93:c8:96:5e:88:7e:0e:
75:5f:bd:30:bd:5b:77:36:eb:fd:cd:f9:2f:49:55:
bb:d7:2a:8e:18:72:d2:c4:99:e7:4b:3c:25:d2:63:
7b:4f:67:1f:41:b0:6f:d1:28:ae:01:05:e6:9e:18:
f9:4a:43:84:66:33:ac:ca:76:d9:30:56:ff:46:6e:
0f:e9:00:af:e4:29:d1:28:7c:09:79:e0:44:e4:68:
a8:e3:c1:15:43:65:d8:77:e5:3f:ca:44:ff:54:2b:
ff:92:ba:1b:01:9f:de:5f:24:bb:27:f9:12:b8:00:
51:19:e0:61:94:3d:d4:e5:05:d6:23:5c:42:0d:0d:
99:99:6e:90:92:cf:69:c1:75:c0:74:f8:ac:62:4d:
4a:93:cc:ac:04:f2:68:95:3e:3e:8e:4b:a9:2d:c2:
18:c6:1a:52:76:29:fe:ba:49:ff:25:af:72:73:18:
74:e1:df:23:78:4a:93:27:40:2a:ef:6a:09:00:e7:
77:2d:3b:83:78:60:4c:d1:74:73:5d:61:12:c1:2c:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:26:47:4B:D3:B4:C3:A2:9D:70:6A:83:E6:B3:FA:AD:24:CF:34
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ea:77:6f:cf:e8:58:1d:69:ec:ea:ac:ab:3c:bc:5e:d1:00:
aa:87:a8:eb:9f:c7:08:d6:c8:f4:d2:f9:e3:5b:53:16:7c:fd:
df:b3:99:f7:e3:fa:2b:59:a3:ba:6d:bb:dd:2d:ea:77:82:33:
85:b5:ef:38:a0:e4:60:24:6b:f9:53:cc:2d:6f:be:16:8c:fe:
67:ce:53:da:3b:fb:33:99:97:5e:6b:03:b0:d1:77:5e:f0:02:
09:f7:3e:2a:11:e0:e4:d5:73:33:44:58:f1:c7:23:e9:91:e8:
c2:5d:35:f6:48:f1:b5:d7:64:d5:d1:7f:ad:f2:3d:af:00:10:
89:1e:93:44:ef:1e:68:88:f1:75:c2:e7:7a:41:dd:5e:e8:d6:
ba:ba:c9:da:9c:84:ff:e3:9d:63:66:13:cc:fe:8c:1f:b0:3e:
4e:d9:a5:0f:18:9f:ec:9c:89:cf:94:84:3a:9d:30:51:de:ee:
52:28:21:ff:9c:ae:9b:13:85:ca:7d:d6:ae:bb:90:1f:87:ea:
21:af:c6:92:5c:38:79:a1:16:c8:25:0c:2b:5b:6a:b6:48:52:
4b:9d:19:ea:12:81:bc:e8:2e:bd:74:a2:40:a8:db:a9:4a:8e:
3b:6a:e1:19:de:5f:83:49:5e:c0:2b:32:71:b7:fb:a2:9b:99:
c6:7e:0d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:58 2026 by rpki-client