Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: f3cbTY63F8zhPKUJq402b3WVbA8GIPoMQm//0B2UbGU=
Subject key identifier: BB:0B:81:F3:BD:37:FC:72:F7:24:53:75:D8:3A:F7:BE:EF:E2:0C:4F
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 019F190C8E2C053FCBDC3775768A68B846BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 05C6
Signing time: Tue 30 Jun 2026 15:01:20 +0000
Manifest this update: Tue 30 Jun 2026 15:01:20 +0000
Manifest next update: Wed 01 Jul 2026 15:01:20 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: ySLV0+0rh+ntVrdzDGxoR2TH6ON7ORwAaCMD7oIF+68=)
2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:8e:2c:05:3f:cb:dc:37:75:76:8a:68:b8:46:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Jun 30 15:01:20 2026 GMT
Not After : Jul 1 15:01:20 2026 GMT
Subject: CN=bb0b81f3bd37fc72f7245375d83af7beefe20c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:9e:98:dc:b5:48:a6:8a:16:d2:b1:58:6c:
60:c4:27:cb:7c:e0:6f:d5:ca:c6:7c:1b:f6:0c:74:
1f:83:94:28:c1:8b:b0:31:82:09:6b:38:4a:0f:6c:
93:7a:00:f4:b9:f9:3a:51:ff:c0:b7:ba:7c:9b:0c:
03:7d:47:84:9f:ab:a3:ba:97:c4:a8:73:a4:cd:65:
05:97:84:05:a9:b6:cb:41:7b:48:0f:ea:b1:e6:06:
29:13:cc:7b:f8:94:99:96:f9:53:8c:c0:15:f3:39:
7a:64:5d:34:6d:68:9b:ef:18:02:a7:ee:a3:a3:87:
3d:8b:11:2c:9c:3e:88:d8:44:d8:6c:c5:59:7e:32:
a0:cd:34:69:c8:b4:46:03:f7:c7:ee:53:bc:f2:53:
89:a6:ce:d4:82:cb:b7:57:af:e8:1e:19:70:5c:ff:
2f:6d:4d:25:05:96:2b:bf:0a:15:e1:b5:f5:1e:43:
10:3b:f2:c9:00:05:d9:d8:02:41:bc:bf:c2:f6:02:
d4:92:b2:c2:72:8f:d2:0b:86:fe:18:53:1f:dd:2f:
98:9b:ee:89:d5:55:e1:85:3f:dc:ce:0d:09:b5:65:
bc:83:13:b2:ec:2f:5e:02:50:15:1a:7e:f4:62:c1:
97:91:d6:66:4f:71:a2:27:b1:35:9a:9f:80:45:52:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0B:81:F3:BD:37:FC:72:F7:24:53:75:D8:3A:F7:BE:EF:E2:0C:4F
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:db:ec:a6:15:fb:c0:1f:74:cc:5e:47:15:bb:54:d9:39:24:
4a:8e:18:02:27:08:9b:2e:ca:78:e3:22:77:94:32:05:cf:f9:
44:4f:ee:8b:59:d1:23:a7:27:05:da:92:07:8f:81:41:6e:cf:
a6:27:e0:f9:ac:6e:9c:e9:33:c9:93:8d:dd:40:c8:b5:81:24:
39:d2:21:07:e8:42:2b:b5:3d:d5:9e:1f:22:1d:d3:30:28:bf:
89:43:98:a3:2f:f6:1b:1b:cf:97:5d:67:8f:7c:de:00:0f:5b:
ff:70:ce:2e:0a:2e:d1:d9:ff:a3:2d:bc:a1:8e:10:fb:bb:a1:
1a:f9:d5:2c:5b:26:6d:35:36:d6:59:09:15:e0:c7:a9:e8:79:
51:50:09:f4:9b:3e:26:e3:d6:0a:7c:77:9c:9a:c4:4b:98:c4:
df:d8:72:34:c7:29:ce:d0:ba:eb:8a:65:2c:b0:96:4b:6b:1d:
43:c1:c8:d1:a8:d4:23:a9:f5:8e:43:c1:a8:3f:62:41:29:2e:
a8:43:5e:a2:e5:12:15:d8:81:34:71:15:6b:3e:e3:cd:d4:56:
b3:0d:7b:9c:fb:33:f1:8f:b2:6e:f7:6f:53:ec:b6:70:32:0e:
3f:fb:c6:ea:dd:02:4a:d1:ff:2f:a9:74:ee:a0:3d:de:26:36:
07:1a:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:16 2026 by rpki-client