Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: 4obrokaFfnr7dipQr3C33atBFS0N8KBq7u/31a6JVbE=
Subject key identifier: 85:17:F2:D0:2A:09:2C:DB:75:B1:B9:02:DF:95:21:3B:7D:32:87:FC
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019F18D62A8688F697FB666968DFB843ABC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 14:01:56 +0000
Manifest this update: Tue 30 Jun 2026 14:01:56 +0000
Manifest next update: Wed 01 Jul 2026 14:01:56 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: VqNjyXuQcWCBCQCBEw6ze5VFiDOLvPjBEdCNGIsY03Q=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:2a:86:88:f6:97:fb:66:69:68:df:b8:43:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Jun 30 14:01:56 2026 GMT
Not After : Jul 1 14:01:56 2026 GMT
Subject: CN=8517f2d02a092cdb75b1b902df95213b7d3287fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:e1:a0:8c:02:ff:56:5b:65:ba:8e:e8:f2:
e0:36:f2:ab:72:90:69:2f:25:82:af:e8:5e:ad:e1:
54:45:08:33:ad:7c:f4:35:83:a4:37:1d:f0:b9:2a:
91:fc:63:00:8b:43:36:2e:16:a3:65:ef:ba:90:e9:
25:c5:d2:1c:db:b5:9d:cd:47:e5:e1:9c:bd:a7:36:
0c:22:c9:cf:fa:97:e4:e1:48:33:d2:ce:10:f4:96:
75:b2:ac:88:de:4c:80:15:b5:97:58:14:68:eb:68:
98:79:04:62:c9:8f:87:94:e9:ed:29:43:e5:f6:c8:
58:42:f3:58:46:23:0b:04:35:75:6b:af:86:61:11:
b3:21:ea:b6:bd:be:9d:37:db:11:30:6d:7a:f9:ff:
2b:15:af:df:c0:ab:0a:95:92:b0:54:61:fd:36:d4:
16:6f:c9:32:a4:e5:cf:13:94:74:6f:60:23:19:84:
6d:39:c1:08:d8:9f:f6:89:da:81:79:98:d3:97:ce:
07:56:50:27:80:85:2f:c1:53:9a:91:b5:fd:4e:d7:
8a:c4:a8:66:a8:12:12:9e:4d:b8:f7:a6:bb:fa:ba:
6e:81:9f:56:d2:35:6f:f4:9f:05:b6:05:cd:c2:e9:
32:89:3f:08:95:03:8c:ad:30:9e:52:9f:a1:d9:b3:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:F2:D0:2A:09:2C:DB:75:B1:B9:02:DF:95:21:3B:7D:32:87:FC
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9f:d5:16:07:0f:f2:b6:cb:db:7d:1e:6e:10:cb:b3:84:84:
35:ed:4f:14:b4:8b:55:a5:f4:aa:c5:32:88:38:f6:8c:49:d4:
fb:b9:25:fc:f8:a4:21:30:70:03:66:96:95:78:31:44:5c:62:
bd:6c:69:23:0d:7a:42:80:78:94:aa:bf:06:df:9b:21:8d:3b:
fe:c8:f5:c6:e9:33:cf:a3:c6:9e:63:e8:7c:c3:c6:8a:e3:e2:
1a:f0:27:9f:bf:27:6b:c4:af:14:90:c9:e5:1f:1c:19:70:7c:
69:80:16:26:be:ec:f7:93:6c:c5:14:26:06:b8:a5:7f:b5:97:
6d:e9:40:74:e4:8d:60:ee:88:5a:68:f8:45:3d:1c:ff:81:e3:
29:1f:ee:00:50:92:eb:39:b2:d6:0b:38:49:83:2e:d4:f3:ef:
02:b9:9e:be:f4:1c:a0:4b:bd:52:e2:e2:ba:e6:09:3b:dc:1d:
08:05:ed:63:46:18:bf:37:cb:83:a9:30:1c:e0:4c:c6:be:f9:
ba:e0:c9:5a:ff:ba:da:9a:74:d3:df:22:dc:c8:9d:70:c7:90:
1e:b9:e2:a7:49:b8:77:dd:d8:86:d0:88:62:d0:c2:60:0a:b8:
69:30:53:bc:5b:7a:71:0a:2a:3e:35:92:0b:cc:f1:c6:3d:46:
a0:6a:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:26 2026 by rpki-client