
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: uuH9fIggZJ+AGDFq4CSzQyIybBevhk2bfTEDQsJarLg=
Subject key identifier: 4B:16:C1:7E:41:27:9D:C4:EB:3A:F8:0F:7D:A5:A5:7A:FA:EE:08:08
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019F17C30BE43E174E665EA4D17EDE294B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 14AF
Signing time: Tue 30 Jun 2026 09:01:26 +0000
Manifest this update: Tue 30 Jun 2026 09:01:26 +0000
Manifest next update: Wed 01 Jul 2026 09:01:26 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: YbBoU6NobyGOZUTRrjVYyG0EZ73QLW+FvQSzFOQ0yxs=)
2: eqCaauL__rhdQZW0YvZCBOthP9U.roa (hash: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:0b:e4:3e:17:4e:66:5e:a4:d1:7e:de:29:4b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Jun 30 09:01:26 2026 GMT
Not After : Jul 1 09:01:26 2026 GMT
Subject: CN=4b16c17e41279dc4eb3af80f7da5a57afaee0808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:7b:4a:5b:8f:4c:9d:bb:06:4f:48:f0:3b:
70:0f:90:c5:fe:47:6d:98:43:c1:cd:de:2c:20:e8:
6a:06:84:40:54:b3:7e:23:31:eb:39:87:4b:77:19:
0e:11:4a:d8:c6:43:92:ea:70:b7:10:53:fb:30:fb:
a1:7d:ff:85:6a:4f:82:a4:59:8c:83:d7:a5:3f:50:
25:56:5e:3f:d0:a9:a6:fa:4b:e1:b6:01:36:63:59:
46:bd:c9:a8:70:9c:df:3f:6e:ce:ca:fe:8b:93:3f:
74:3f:70:22:ff:08:4f:21:7d:d2:e4:8f:29:c8:c1:
17:5e:54:b7:b9:2f:bd:2c:12:5e:33:9e:14:1e:ae:
c1:77:df:85:da:00:f6:a7:01:fd:14:e1:f2:f7:a4:
33:67:2a:23:57:cc:25:70:cc:70:86:36:c2:02:43:
ec:35:8a:f6:27:bd:e9:11:7c:e2:12:c7:cc:6c:14:
fd:0a:f7:89:f8:98:1f:c2:8b:0e:8d:fa:76:04:92:
9d:82:7a:06:2d:fd:c3:8b:a0:4d:af:26:04:75:cb:
1f:15:84:9c:98:ea:8d:6b:16:c4:d0:a4:47:f6:af:
2f:64:ae:65:cd:fd:10:77:84:09:8d:1b:81:fd:58:
90:19:9e:20:c2:da:4b:54:91:98:64:a0:f1:e5:37:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:16:C1:7E:41:27:9D:C4:EB:3A:F8:0F:7D:A5:A5:7A:FA:EE:08:08
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ca:11:22:fd:f7:4f:11:43:1a:c7:9c:b1:25:f7:2d:35:44:
17:04:66:01:67:98:a3:12:fe:f8:8b:c9:33:52:5b:ef:b6:dc:
86:d8:10:a5:f0:3b:4e:c6:c1:ac:5c:1e:6d:06:65:46:41:96:
d0:59:c6:32:ae:1c:5a:cf:29:d1:2c:a9:1a:79:5d:fe:3b:c1:
da:ef:fa:1e:b7:11:fb:40:eb:44:1c:69:b2:eb:fc:5f:1c:50:
7b:75:81:9c:31:e8:66:d9:2c:49:e3:fd:dc:7e:b8:6b:0c:92:
4c:43:a6:c4:38:79:1d:80:f5:a5:a1:af:07:3c:a8:be:c6:0e:
c3:d8:7f:77:c6:dd:8b:af:e3:c0:bb:40:51:62:42:70:27:7e:
60:8d:12:36:01:f5:99:fd:9e:79:81:1b:fd:cb:d5:b0:5d:f2:
89:41:64:3a:18:23:61:1b:d4:8e:b0:4e:9e:28:f4:2e:0d:d7:
a6:dc:8a:9b:c6:2e:1a:55:99:54:d4:0f:0c:ac:db:8e:82:bf:
5e:30:fe:a3:e1:0d:76:3b:5f:a8:08:99:47:db:00:1e:e9:b9:
3b:b4:11:9d:1d:f5:f1:3b:20:c0:ea:9f:b9:b9:b6:a5:ce:9f:
b3:39:a7:57:61:2b:ae:d3:df:53:81:83:65:c1:20:5f:9f:93:
b6:98:a2:1f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8XwwvkPhdOZl6k0X7eKUt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzA3ODIxMjMwZTdiYTgxYTRkNDcxYTU5MWU3OGVhNzU5
YzY5MzQwHhcNMjYwNjMwMDkwMTI2WhcNMjYwNzAxMDkwMTI2WjAzMTEwLwYDVQQD
Eyg0YjE2YzE3ZTQxMjc5ZGM0ZWIzYWY4MGY3ZGE1YTU3YWZhZWUwODA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ax7SluPTJ27Bk9I8DtwD5DF/kdt
mEPBzd4sIOhqBoRAVLN+IzHrOYdLdxkOEUrYxkOS6nC3EFP7MPuhff+Fak+CpFmM
g9elP1AlVl4/0Kmm+kvhtgE2Y1lGvcmocJzfP27Oyv6Lkz90P3Ai/whPIX3S5I8p
yMEXXlS3uS+9LBJeM54UHq7Bd9+F2gD2pwH9FOHy96QzZyojV8wlcMxwhjbCAkPs
NYr2J73pEXziEsfMbBT9CveJ+JgfwosOjfp2BJKdgnoGLf3Di6BNryYEdcsfFYSc
mOqNaxbE0KRH9q8vZK5lzf0Qd4QJjRuB/ViQGZ4gwtpLVJGYZKDx5TfBSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEsWwX5BJ53E6zr4D32lpXr67ggIMB8GA1UdIwQY
MBaAFPoweCEjDnuoGk1HGlkeeOp1nGk0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qQjRJU01PZTZnYVRVY2FXUjU0Nm5XY2FUUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTEwZjY3LTFmZmMtNDFjNC1hMmVh
LWYxZTY1Zjk3Yzg5YS8xLzEtakI0SVNNT2U2Z2FUVWNhV1I1NDZuV2NhVFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NlLzkxMGY2Ny0xZmZjLTQxYzQtYTJlYS1mMWU2NWY5N2M4
OWEvMS8xLWpCNElTTU9lNmdhVFVjYVdSNTQ2bldjYVRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMoR
Iv33TxFDGsecsSX3LTVEFwRmAWeYoxL++IvJM1Jb77bchtgQpfA7TsbBrFwebQZl
RkGW0FnGMq4cWs8p0SypGnld/jvB2u/6HrcR+0DrRBxpsuv8XxxQe3WBnDHoZtks
SeP93H64awySTEOmxDh5HYD1paGvBzyovsYOw9h/d8bdi6/jwLtAUWJCcCd+YI0S
NgH1mf2eeYEb/cvVsF3yiUFkOhgjYRvUjrBOnij0Lg3XptyKm8YuGlWZVNQPDKzb
joK/XjD+o+ENdjtfqAiZR9sAHum5O7QRnR318TsgwOqfubm2pc6fszmnV2ErrtPf
U4GDZcEgX5+TtpiiHw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:54 2026 by rpki-client