Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: 38RtFS/xs5rx3p6X/i7plIwC/Nu5OgxDclCkIb3Mb7Q=
Subject key identifier: FA:0A:94:79:FA:C2:87:0F:74:0B:80:43:4C:A0:5A:52:F1:86:78:EC
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 019EDD66389BE34683000FCD99CF726F4643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 13E3
Signing time: Fri 19 Jun 2026 01:02:04 +0000
Manifest this update: Fri 19 Jun 2026 01:02:04 +0000
Manifest next update: Sat 20 Jun 2026 01:02:04 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: xo7bgxFO2olaPga7mesXlSa4LXS6rWvPh3jO5DNQN6A=)
2: maEv5ArPl0MhVYV7tQz9rkyTAIo.roa (hash: dBiLGOeBpvZw0H7gef9rbExfaEt6iLiJPLCEXhR/0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:66:38:9b:e3:46:83:00:0f:cd:99:cf:72:6f:46:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Jun 19 01:02:04 2026 GMT
Not After : Jun 20 01:02:04 2026 GMT
Subject: CN=fa0a9479fac2870f740b80434ca05a52f18678ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:5c:0f:d3:d2:04:b8:57:07:69:ab:70:37:
29:73:cb:a3:ad:47:f4:9f:8c:08:b1:12:90:d8:3e:
d2:d6:c3:50:ef:e1:07:f5:1d:10:7e:56:67:2a:91:
56:46:9b:d6:03:6b:3b:09:8a:c6:8c:cf:40:f9:77:
df:1f:b5:e4:a9:6f:4c:46:f3:1d:cf:3d:ea:17:5f:
0c:09:8c:c2:cd:99:f5:c5:bb:0c:8e:b0:0c:a2:d8:
e6:cf:4c:6f:f6:94:3b:dd:89:9f:40:ce:b9:06:b5:
d2:df:74:ab:a9:ab:c8:02:fb:9b:73:ab:e8:97:2f:
12:dc:91:89:16:e4:d5:a5:42:72:f5:a6:0a:80:8a:
4d:99:12:d7:2e:73:69:72:92:4c:5c:9f:9d:4a:f0:
7d:3f:45:32:fb:73:33:4a:c0:ac:66:94:cd:0e:ce:
13:c0:46:88:34:c4:fc:56:ca:14:3d:4d:19:1c:65:
74:8d:de:ff:81:a5:5c:a9:1a:59:ce:8b:bf:ab:f1:
54:95:9c:30:fe:02:46:4e:ac:2f:6d:20:59:6e:b0:
74:c2:05:b9:02:2e:d1:23:af:bf:0f:cf:3f:7a:fd:
58:de:4c:54:36:3b:68:33:b4:ea:92:31:05:81:aa:
79:72:dc:c3:51:02:2e:be:8e:c1:f3:12:1d:29:26:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0A:94:79:FA:C2:87:0F:74:0B:80:43:4C:A0:5A:52:F1:86:78:EC
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0d:f6:9e:1c:62:f9:61:3c:b0:c4:a1:6d:cf:f4:f6:9e:85:
86:f8:6e:97:9f:b8:b7:94:18:1a:e3:07:c3:db:9f:cd:46:ab:
d6:cd:d1:b4:0b:1c:db:26:f4:0c:28:28:fc:e6:9b:a9:dd:ce:
ad:0b:d3:23:04:4f:e9:ae:b8:79:9b:a5:fb:48:d4:e6:85:0d:
57:59:84:8d:dc:71:78:8e:25:ae:1c:e3:0c:97:47:3b:55:7b:
16:00:cd:00:28:06:3c:b1:df:bd:f1:2f:bf:4c:73:94:ae:c0:
ac:88:43:06:4c:9e:08:3d:7f:72:11:9a:2b:4a:10:dd:30:dd:
1d:93:50:81:95:6b:a6:65:0f:eb:6b:da:4c:e2:f7:1f:d8:6c:
4b:51:a7:49:54:b1:be:6f:55:27:ab:1a:f0:76:c7:e8:3d:e5:
1b:d0:d6:81:13:f3:9b:57:83:63:9f:5f:d6:25:7b:4b:69:46:
c7:20:ef:e4:bf:cc:93:5f:21:26:15:22:fd:d5:77:b8:70:ce:
39:31:93:49:bb:4e:3e:8d:a2:1c:04:ea:79:f3:65:e1:32:c4:
c7:ca:26:a8:6d:24:b2:63:dc:e7:33:af:9a:91:a1:21:c1:8f:
5b:ed:20:47:9e:ff:0b:4d:fd:a1:bf:17:7c:4f:5d:a9:85:62:
ae:81:5e:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7dZjib40aDAA/Nmc9yb0ZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDNjOWFmNmNmNTJiOGEzOTBiNThmMDBiMTRhODg3MTAz
MzY5NDQwHhcNMjYwNjE5MDEwMjA0WhcNMjYwNjIwMDEwMjA0WjAzMTEwLwYDVQQD
EyhmYTBhOTQ3OWZhYzI4NzBmNzQwYjgwNDM0Y2EwNWE1MmYxODY3OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNJcD9PSBLhXB2mrcDcpc8ujrUf0
n4wIsRKQ2D7S1sNQ7+EH9R0QflZnKpFWRpvWA2s7CYrGjM9A+XffH7XkqW9MRvMd
zz3qF18MCYzCzZn1xbsMjrAMotjmz0xv9pQ73YmfQM65BrXS33SrqavIAvubc6vo
ly8S3JGJFuTVpUJy9aYKgIpNmRLXLnNpcpJMXJ+dSvB9P0Uy+3MzSsCsZpTNDs4T
wEaINMT8VsoUPU0ZHGV0jd7/gaVcqRpZzou/q/FUlZww/gJGTqwvbSBZbrB0wgW5
Ai7RI6+/D88/ev1Y3kxUNjtoM7TqkjEFgap5ctzDUQIuvo7B8xIdKSbpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoKlHn6wocPdAuAQ0ygWlLxhnjsMB8GA1UdIwQY
MBaAFOHTya9s9SuKOQtY8AsUqIcQM2lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQt
Y2M3Njc5ZjE4MDJmLzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQtY2M3Njc5ZjE4MDJm
LzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ32nhxi
+WE8sMShbc/09p6Fhvhul5+4t5QYGuMHw9ufzUar1s3RtAsc2yb0DCgo/Oabqd3O
rQvTIwRP6a64eZul+0jU5oUNV1mEjdxxeI4lrhzjDJdHO1V7FgDNACgGPLHfvfEv
v0xzlK7ArIhDBkyeCD1/chGaK0oQ3TDdHZNQgZVrpmUP62vaTOL3H9hsS1GnSVSx
vm9VJ6sa8HbH6D3lG9DWgRPzm1eDY59f1iV7S2lGxyDv5L/Mk18hJhUi/dV3uHDO
OTGTSbtOPo2iHATqefNl4TLEx8omqG0ksmPc5zOvmpGhIcGPW+0gR57/C039ob8X
fE9dqYViroFedQ==
-----END CERTIFICATE-----
Generated at Fri Jun 19 08:16:11 2026 by rpki-client