Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: W5Itv7Dm98e6VzCsedx9q6nLCw7B3xswUdndnk5+dOw=
Subject key identifier: 0A:97:2B:88:42:EB:51:7C:C2:1C:A7:CC:59:B7:5B:F6:53:55:0E:33
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019F126533351EFD256CAB97162000467D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 02B0
Signing time: Mon 29 Jun 2026 08:00:49 +0000
Manifest this update: Mon 29 Jun 2026 08:00:49 +0000
Manifest next update: Tue 30 Jun 2026 08:00:49 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: uA7heIMCaEayepaAs+5brvgiePg1e/0tOn65aK2lVKU=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:33:35:1e:fd:25:6c:ab:97:16:20:00:46:7d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Jun 29 08:00:49 2026 GMT
Not After : Jun 30 08:00:49 2026 GMT
Subject: CN=0a972b8842eb517cc21ca7cc59b75bf653550e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:2a:5a:81:b5:80:2d:51:bf:77:64:fc:d8:
25:f8:43:f4:1f:ad:ce:20:88:0a:54:ac:9c:2d:23:
bc:89:c3:1c:c9:da:d9:4b:d1:f0:26:cf:c9:66:db:
ea:5e:dd:82:61:f0:5b:57:43:43:ab:3b:38:81:aa:
b2:9c:80:0e:3f:57:b2:3a:fd:4e:e2:9a:ba:73:0d:
48:a2:b4:5d:8a:75:32:1b:cf:4c:0d:46:be:9c:39:
c7:c7:12:13:c5:4f:ce:6e:c3:c8:3d:94:fe:cf:fb:
a3:03:f8:4d:86:f9:5b:98:be:4e:c7:53:3f:e7:a4:
08:e7:7b:ce:37:24:54:c2:4c:2e:0f:88:d8:e3:ba:
b6:e5:c5:d0:5c:91:9f:00:23:02:2e:83:1d:01:ec:
58:65:9b:ce:87:c3:b6:cd:da:0c:76:46:7d:5a:70:
a2:62:33:20:69:35:12:4e:47:54:9a:ca:ee:60:5b:
98:84:2f:75:36:fa:8c:37:92:93:a1:3c:38:c1:b5:
8b:00:fc:8b:7c:73:0b:a2:3e:1e:d3:53:a8:ff:ba:
db:b3:3c:04:a1:71:7d:23:68:9c:69:fc:81:e1:40:
98:d6:d5:ae:f1:34:55:df:61:26:23:f2:24:33:4e:
6d:a6:f2:09:5d:ab:42:6d:9c:f5:51:12:4a:dc:88:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:97:2B:88:42:EB:51:7C:C2:1C:A7:CC:59:B7:5B:F6:53:55:0E:33
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:14:b5:2a:0d:ad:9a:3a:93:4a:99:80:9a:3f:49:df:69:8d:
78:81:0c:75:c4:d8:9d:41:73:62:9c:49:e6:a3:e6:ac:12:7d:
dd:25:63:1a:cd:7a:9c:e3:ad:6a:15:6a:d3:6b:35:5a:69:2c:
81:a9:82:24:cb:f2:1f:e5:26:92:6a:08:c8:14:96:e1:f3:d1:
78:1e:2e:11:74:b0:c8:70:30:1f:94:66:8c:3e:5e:34:3f:3f:
59:8f:d8:0d:03:38:0e:f4:14:e8:e0:5b:88:a4:24:ed:12:a8:
bd:0a:14:67:2c:93:e5:0e:e8:d1:30:c3:81:7d:2d:61:62:ec:
97:54:88:bb:6e:ef:92:39:10:da:fd:13:22:8d:37:7b:ea:fc:
df:2b:4f:fc:ef:27:3e:20:f0:4d:d2:c0:70:11:a5:57:06:47:
df:8d:ba:3e:f4:3d:f7:10:86:6d:fe:f3:76:a9:34:bc:6a:d9:
dc:6e:a6:f7:6c:47:6b:f2:7b:c4:66:93:8b:54:6f:ab:bd:13:
9f:6b:63:77:ac:49:22:b0:2f:ea:5e:a1:4c:88:c3:33:26:5b:
a6:75:10:6a:c0:8c:ed:9a:28:d1:3e:5f:fc:12:fd:6d:99:ee:
5a:80:28:20:76:c4:d6:04:f0:49:32:23:43:61:6c:78:3e:eb:
6e:ff:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:15:42 2026 by rpki-client