Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: ajGB39Nm8ZkK5ymPKmZY2Mq3NB2w9UP/VbSW3TvNaYQ=
Subject key identifier: 39:96:16:C8:0D:27:FE:10:12:21:D1:C0:C8:E5:75:F9:19:5D:48:F7
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 019F190C7633B17E4164BD9DD57A7CF7C110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 1487
Signing time: Tue 30 Jun 2026 15:01:14 +0000
Manifest this update: Tue 30 Jun 2026 15:01:14 +0000
Manifest next update: Wed 01 Jul 2026 15:01:14 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: dyTUHb1Dsr04j1UC5vddPl2Zy1nWVcsXvHtD6qPd+Hw=)
2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:76:33:b1:7e:41:64:bd:9d:d5:7a:7c:f7:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Jun 30 15:01:14 2026 GMT
Not After : Jul 1 15:01:14 2026 GMT
Subject: CN=399616c80d27fe101221d1c0c8e575f9195d48f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:91:c9:78:84:23:92:1a:bd:85:70:cc:2e:
0d:b6:ff:a4:5e:b5:15:50:4f:f8:35:2e:1f:34:8a:
d2:be:e3:74:66:15:2e:aa:49:de:04:a2:82:70:b8:
3b:2c:20:8e:ec:28:99:5d:4c:03:3a:a8:9f:58:23:
b2:1e:2c:3e:58:7e:43:b0:82:85:50:25:8c:de:83:
cb:84:fd:24:de:f8:0b:2d:2c:71:80:be:41:51:15:
21:92:0d:4a:b6:31:df:aa:ea:58:c3:aa:84:7d:15:
af:13:9e:8d:8f:18:b9:3c:0c:b9:9c:bd:a0:93:89:
97:5f:18:a6:92:6d:c3:2d:20:0d:00:30:ca:19:57:
04:09:c7:d6:85:43:24:f8:51:a6:b7:ef:4d:02:d1:
cd:cd:17:3b:d5:5d:5a:7a:81:a5:69:ec:7a:26:b7:
d8:56:f4:52:9d:e5:9c:51:98:71:0c:e1:7f:10:ec:
3a:6e:66:3b:50:bc:8f:77:a3:23:19:e7:0a:ff:41:
6a:40:0b:ff:b2:f1:f6:4d:ac:5b:50:08:39:86:2b:
11:06:55:43:60:83:10:4e:08:da:a2:35:8c:ce:53:
b0:b1:2d:48:81:6b:1a:dc:f3:63:a3:18:71:38:02:
f4:d3:8c:99:17:30:11:a7:d7:3e:0b:e3:b2:66:8a:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:16:C8:0D:27:FE:10:12:21:D1:C0:C8:E5:75:F9:19:5D:48:F7
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6c:36:87:c7:03:ea:d6:dd:55:16:0b:98:43:98:eb:6d:91:
8c:f1:5c:4e:08:87:91:3b:af:5b:f2:ee:24:d9:76:a1:e9:f8:
30:7e:8c:4c:d3:8f:da:47:85:4c:7a:48:af:87:e7:9f:c7:22:
25:88:f3:4e:7d:52:f6:d8:69:0f:b3:1c:27:86:1e:91:6b:ed:
de:13:5b:24:1b:b1:0a:c1:6b:7d:c2:44:24:ca:bd:8d:04:9f:
85:c0:c3:b2:36:0b:41:48:48:4d:5e:ca:4d:e0:21:90:e0:b3:
75:03:16:07:f8:1f:24:1a:07:ed:e0:40:ed:42:32:ea:08:9f:
ea:8a:9e:61:e7:90:67:ff:cd:4a:b8:f8:00:aa:80:11:61:01:
e3:ca:58:cb:bf:2c:f1:3e:16:f3:a5:5f:21:d0:8b:e0:ea:cb:
2c:90:74:8a:11:7c:8f:8e:0c:c5:9c:df:60:c0:26:50:2c:1b:
1f:4f:05:7b:3d:b5:60:02:0e:35:87:78:b3:59:c5:0e:66:34:
be:84:43:75:4f:20:90:d3:39:61:e0:42:94:cb:53:c4:ae:57:
84:35:8f:4e:41:e9:03:d9:29:cd:1c:0a:ed:09:92:6a:4c:5a:
96:1c:d4:05:2b:cc:eb:94:76:63:97:48:ee:1a:42:11:3d:53:
97:62:f9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:52 2026 by rpki-client