Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: nYCI50zylxNczbpEllhZj2C/iX31HYMBG+AvIIE5fgs=
Subject key identifier: 50:C2:5A:92:25:C6:15:B9:3F:6B:EA:38:A7:1A:C0:E6:94:98:F3:8F
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019F17C269D289FE176948062E143BDF4CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0D4A
Signing time: Tue 30 Jun 2026 09:00:44 +0000
Manifest this update: Tue 30 Jun 2026 09:00:44 +0000
Manifest next update: Wed 01 Jul 2026 09:00:44 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: XrCHnS1/IkswiRxyRFZ5suUMafdSZPkSXo2hr6O6sfg=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:69:d2:89:fe:17:69:48:06:2e:14:3b:df:4c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Jun 30 09:00:44 2026 GMT
Not After : Jul 1 09:00:44 2026 GMT
Subject: CN=50c25a9225c615b93f6bea38a71ac0e69498f38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:59:e4:4f:3c:d6:cf:53:8c:ce:08:1c:c3:
38:59:37:74:7c:d0:ed:83:c0:44:85:64:3e:e7:30:
c4:22:77:93:fc:3d:a9:54:b3:aa:5c:2a:57:23:7c:
e1:b9:6f:98:59:4a:d9:19:12:34:ae:2e:39:a9:68:
85:61:e7:80:f3:71:c9:8b:71:81:b7:e8:fc:8a:62:
37:ee:35:20:96:88:8e:f7:f5:ba:2b:38:bc:e4:d5:
4e:5f:81:e4:65:2b:07:38:af:4c:c8:ea:58:b3:8b:
30:d5:1c:9d:2f:2f:ff:63:b7:d3:37:d6:8a:47:f1:
3d:7d:49:3c:da:e4:67:36:d9:30:97:14:13:da:19:
62:fb:2b:d9:8f:62:e2:b7:e6:97:25:54:40:0a:b5:
c2:c2:a9:d4:ea:6c:7c:d1:1f:7f:69:cd:9e:94:f2:
b4:06:a0:2d:9f:10:61:d8:ff:e8:bf:5b:07:c4:d7:
28:64:a1:c8:7a:33:5e:20:b5:71:5d:65:05:a2:17:
06:84:bc:9d:09:b3:c9:34:33:6b:a0:ad:6c:88:10:
e8:bd:f2:89:3d:70:04:5a:fe:44:27:e4:d7:f7:c3:
41:aa:0c:fe:d5:bf:d5:f7:e4:09:b5:45:77:c7:09:
b7:24:b1:48:ed:06:1d:02:4b:02:fe:90:f9:ab:e2:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C2:5A:92:25:C6:15:B9:3F:6B:EA:38:A7:1A:C0:E6:94:98:F3:8F
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:82:8d:40:e0:62:31:0d:45:8b:df:f2:f9:fd:01:9b:06:af:
f5:0d:28:9e:4d:a6:ab:15:c4:9d:a7:3a:e4:e6:28:75:91:e1:
56:67:9a:a8:44:9b:96:9d:dd:0c:b8:16:4b:06:ca:f8:5c:77:
5a:cd:a1:60:a8:a5:3c:ba:16:39:05:78:1d:ab:30:32:a8:1e:
b4:0e:e3:ae:69:0a:08:1b:cc:e4:72:7b:e8:88:e1:b0:af:e7:
0e:01:e2:07:ed:25:dd:75:a3:6b:b2:9e:3e:53:c1:e7:95:a6:
98:c3:2a:fc:eb:85:a8:c6:43:a1:5f:ff:69:a0:de:cd:41:70:
c7:93:22:75:aa:55:b3:b8:25:18:b0:c7:c3:73:5d:3f:da:24:
c4:1e:2c:36:3d:a7:6f:73:6b:e5:22:50:70:e6:ed:4a:eb:de:
ef:df:17:e1:35:68:57:53:36:6a:33:36:fa:b9:75:54:76:de:
5a:f4:a7:e1:07:2f:aa:0e:eb:d2:76:71:96:77:ab:f4:03:7c:
6d:e1:91:7a:25:e2:1d:f5:e1:38:b3:83:9c:db:49:af:c4:22:
bf:cf:b9:66:8f:83:05:36:e1:3d:21:f9:ae:e9:40:51:4f:9e:
73:18:7d:f1:64:3c:11:30:01:0f:be:66:54:7a:dc:04:40:29:
13:9c:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:13:04 2026 by rpki-client