Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: SMf+mrc7qweEo91VYKIQ99s0azt7HFmdQ5tsqNGmIhM=
Subject key identifier: E2:EE:E9:25:43:5B:57:1E:07:86:8D:68:71:1F:97:E1:86:1D:F9:82
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019F1830F4BAE97D9C0778019A6C0DB0255F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 11:01:29 +0000
Manifest this update: Tue 30 Jun 2026 11:01:29 +0000
Manifest next update: Wed 01 Jul 2026 11:01:29 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: KLmr4FmdaDPJcNNUxcNV6OF+F+ziBfs61aZmkngmvZE=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:f4:ba:e9:7d:9c:07:78:01:9a:6c:0d:b0:25:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Jun 30 11:01:29 2026 GMT
Not After : Jul 1 11:01:29 2026 GMT
Subject: CN=e2eee925435b571e07868d68711f97e1861df982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:12:a6:7d:d4:1e:bc:c7:b4:8d:39:d6:56:
f9:b5:6c:59:82:b4:2d:46:f6:54:88:b7:52:a8:51:
ff:5c:36:ff:18:e0:9f:75:97:55:c9:46:e4:13:a7:
4f:9a:40:98:4b:69:4c:ac:4e:ce:5f:df:87:1a:d2:
95:f9:dd:3f:d1:eb:05:dd:63:45:aa:44:bb:e5:3d:
45:21:05:8c:60:05:71:25:2b:d7:b1:83:ad:ec:c3:
73:27:02:7b:9f:55:d5:3e:f4:94:53:3b:99:38:a9:
69:01:a8:c7:0a:7e:48:67:5a:2d:d4:bc:20:36:82:
75:43:a5:32:65:fd:32:f8:75:91:2d:0c:0f:8a:63:
3e:bc:50:49:91:90:d9:39:7b:1d:16:ad:95:1b:2f:
57:0a:49:02:cc:7d:ae:74:3a:8b:ec:c4:fe:74:f3:
e6:9a:3b:57:13:c6:4c:fc:ec:f0:45:9f:b5:32:e5:
53:aa:ed:34:82:94:ec:fc:60:9b:33:6f:cf:47:0c:
3a:0a:78:95:4d:f3:b2:ae:b3:c2:43:d2:a4:bf:ee:
f5:3a:d3:08:c7:b5:9c:16:2c:12:b6:35:d9:b9:3e:
4b:da:70:9b:a8:df:88:35:51:a3:6e:4c:df:3f:3f:
d3:ac:de:40:6c:e3:73:24:7e:51:2d:41:f5:37:29:
31:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EE:E9:25:43:5B:57:1E:07:86:8D:68:71:1F:97:E1:86:1D:F9:82
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f6:dc:1b:bd:91:68:63:b2:b8:b0:d8:ba:89:93:fb:71:f7:
8d:2d:3d:ce:fa:cf:13:47:f5:c3:cd:f2:70:9d:68:8d:c7:80:
24:1e:f2:ce:a2:e1:0f:e3:7b:ef:50:fb:21:1b:52:65:5b:23:
19:14:05:fb:a8:c8:1b:71:cc:ff:0d:b6:df:54:c5:47:4b:a6:
7a:3c:d7:d5:cb:63:0d:82:c5:1e:a8:4d:a0:d7:69:0e:4b:5a:
c3:fc:7b:50:e2:0b:42:89:52:4f:4e:4e:ef:91:29:93:e1:8d:
32:1c:b0:e2:ff:be:74:d1:59:1b:71:b4:2d:5a:b9:f5:9e:24:
5f:70:76:ff:5f:9a:00:91:02:47:61:90:7f:0c:f4:45:4c:2d:
77:5f:5a:01:d1:41:ca:4f:67:98:36:3d:e6:d6:f2:4f:76:a1:
20:73:d4:28:a8:fd:8a:16:a4:6f:1b:cf:a9:7f:81:4a:18:8c:
55:61:8e:01:fb:a4:0b:ec:26:98:23:3b:3e:0a:a1:53:d2:50:
8a:9d:2d:9d:d1:6f:53:45:3e:5a:7a:69:35:78:61:f5:aa:9f:
44:64:b1:da:29:3d:66:d9:d3:ca:b5:2c:d7:28:e4:04:68:60:
7d:38:a3:24:97:eb:83:a0:3c:50:45:22:e6:8c:cf:21:f6:3b:
c3:66:55:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:51 2026 by rpki-client