Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: 8Dr07nXxVKRbmzNeHeRPV+XZ5ge/NTP6bH10UBToJB8=
Subject key identifier: 8D:7F:96:41:2A:23:0F:35:75:78:83:E6:E2:1D:6A:4C:6F:B7:97:5C
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 019F190D550C82509469C14AA5267300D39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 15:02:11 +0000
Manifest this update: Tue 30 Jun 2026 15:02:11 +0000
Manifest next update: Wed 01 Jul 2026 15:02:11 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: Nzgho+/+LTUiTy0G4BLwKOs9rbFNruG6xWmulRbhsy8=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:55:0c:82:50:94:69:c1:4a:a5:26:73:00:d3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Jun 30 15:02:11 2026 GMT
Not After : Jul 1 15:02:11 2026 GMT
Subject: CN=8d7f96412a230f35757883e6e21d6a4c6fb7975c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:da:0c:fb:a2:39:78:b2:ec:84:0f:e9:10:
35:e9:58:bd:99:04:6c:60:e4:f0:bb:9b:ef:b8:da:
58:69:d8:2d:1a:4a:c6:33:0c:18:7d:da:70:c5:c4:
3f:73:ff:30:6f:fb:cf:97:7f:33:30:c3:c8:9e:75:
25:c8:16:6b:56:ac:54:76:b0:4d:93:d9:38:4f:04:
94:66:48:2d:9b:a2:0f:3a:10:b9:6f:97:c1:b4:34:
a2:97:68:24:43:4d:87:5a:db:98:29:22:04:90:57:
96:d7:6c:47:5b:6e:31:83:db:f6:ad:92:b9:11:a5:
30:09:ba:4c:d3:dd:fc:12:22:09:cf:91:0d:4a:e6:
26:39:bc:b7:8a:b5:2f:05:c2:06:db:bc:f6:35:f0:
25:a9:ff:86:98:aa:53:3c:88:e8:c2:04:8e:3f:97:
31:30:b7:5c:24:8a:9d:47:9f:d3:c2:09:52:11:51:
29:98:04:09:47:01:19:fd:c3:c9:7a:6d:70:ab:20:
ee:04:72:fb:83:e2:fe:f8:ee:ad:18:db:d6:11:41:
f8:8d:4d:09:58:6c:a1:d2:b1:c3:cd:c1:5a:24:e4:
e2:80:e6:06:a4:ca:3a:08:e7:d6:e1:e5:1a:73:10:
f5:01:35:72:8d:d1:2f:a7:02:4b:db:e5:1a:32:ef:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:96:41:2A:23:0F:35:75:78:83:E6:E2:1D:6A:4C:6F:B7:97:5C
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e7:8b:57:7c:40:2a:38:7e:21:6a:e5:55:87:ac:88:b7:63:
1e:b5:b5:c9:1e:f7:a1:f3:29:15:61:ae:0e:b7:f6:1d:56:78:
78:c3:b3:1e:8b:e4:e8:00:80:56:57:cf:bd:d8:21:06:17:3d:
ce:1e:9c:09:e9:0d:42:c0:d1:ab:c4:3c:34:a4:df:4b:04:72:
a4:5e:56:f1:a4:ff:14:02:64:7b:a6:14:9f:5b:12:2f:f5:65:
f1:25:33:2c:a4:fb:4b:84:b4:77:3d:7f:09:1f:d6:a8:aa:b2:
c0:59:33:66:f6:44:88:3a:ec:7d:dd:35:fa:81:2b:44:51:ef:
36:fd:9a:a5:cd:56:dd:b0:a9:65:7b:b7:ba:e0:ad:d7:f1:44:
d3:22:70:8d:16:fa:89:78:e8:00:e1:12:b8:bd:26:ac:f7:b8:
80:37:93:72:d6:82:fc:26:e3:56:94:cf:dc:40:f9:da:78:68:
65:2a:14:00:1c:aa:37:24:4e:80:a0:d8:60:d0:66:1c:d3:ac:
82:b0:48:81:f7:e3:c5:f1:4b:37:3d:2e:cf:ee:73:ae:af:79:
ed:f9:e6:17:95:c4:6c:70:30:42:d3:3b:6d:aa:22:ca:f4:b3:
b7:4b:6a:a6:67:8f:52:e6:e7:e1:3e:dc:1d:3e:2e:15:98:f8:
e5:11:6a:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDVUMglCUacFKpSZzANOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDc1NjkwZDM5YzgzMDE4MGIzZjU1YzQ5ZDE0MGEyYTA0
ZDM5MTcwHhcNMjYwNjMwMTUwMjExWhcNMjYwNzAxMTUwMjExWjAzMTEwLwYDVQQD
Eyg4ZDdmOTY0MTJhMjMwZjM1NzU3ODgzZTZlMjFkNmE0YzZmYjc5NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxznaDPuiOXiy7IQP6RA16Vi9mQRs
YOTwu5vvuNpYadgtGkrGMwwYfdpwxcQ/c/8wb/vPl38zMMPInnUlyBZrVqxUdrBN
k9k4TwSUZkgtm6IPOhC5b5fBtDSil2gkQ02HWtuYKSIEkFeW12xHW24xg9v2rZK5
EaUwCbpM0938EiIJz5ENSuYmOby3irUvBcIG27z2NfAlqf+GmKpTPIjowgSOP5cx
MLdcJIqdR5/TwglSEVEpmAQJRwEZ/cPJem1wqyDuBHL7g+L++O6tGNvWEUH4jU0J
WGyh0rHDzcFaJOTigOYGpMo6COfW4eUacxD1ATVyjdEvpwJL2+UaMu9LqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1/lkEqIw81dXiD5uIdakxvt5dcMB8GA1UdIwQY
MBaAFOHXVpDTnIMBgLP1XEnRQKKgTTkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUt
YjlhMzZlYjllZTIxLzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUtYjlhMzZlYjllZTIx
LzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOeLV3xA
Kjh+IWrlVYesiLdjHrW1yR73ofMpFWGuDrf2HVZ4eMOzHovk6ACAVlfPvdghBhc9
zh6cCekNQsDRq8Q8NKTfSwRypF5W8aT/FAJke6YUn1sSL/Vl8SUzLKT7S4S0dz1/
CR/WqKqywFkzZvZEiDrsfd01+oErRFHvNv2apc1W3bCpZXu3uuCt1/FE0yJwjRb6
iXjoAOESuL0mrPe4gDeTctaC/CbjVpTP3ED52nhoZSoUAByqNyROgKDYYNBmHNOs
grBIgffjxfFLNz0uz+5zrq957fnmF5XEbHAwQtM7baoiyvSzt0tqpmePUubn4T7c
HT4uFZj45RFqHA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:49 2026 by rpki-client