Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: YUmQT6Q04N+hoV4Cps5fXZ/EU7Yi+uWg+pFjz4UGvro=
Subject key identifier: 32:5B:A3:BC:47:85:B9:48:5C:E3:8E:8A:9C:3A:BA:B5:66:05:4B:48
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 019F190C93AB9844EF415138BDF0D46F29C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 15:01:22 +0000
Manifest this update: Tue 30 Jun 2026 15:01:22 +0000
Manifest next update: Wed 01 Jul 2026 15:01:22 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: KMXXQSh92RXLTkHADyP0IOku4FwFPATiwJSROHWRo7c=)
2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:93:ab:98:44:ef:41:51:38:bd:f0:d4:6f:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Jun 30 15:01:22 2026 GMT
Not After : Jul 1 15:01:22 2026 GMT
Subject: CN=325ba3bc4785b9485ce38e8a9c3abab566054b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b0:78:ad:45:01:da:3e:a2:88:6e:89:10:32:
c6:92:bc:62:2b:11:06:49:df:84:6e:08:99:68:38:
95:f1:68:b4:19:c5:54:66:ae:20:37:76:d1:ab:f5:
95:5d:96:5f:39:9c:29:18:15:3c:b9:2a:bd:1b:ae:
f6:0e:fd:d4:3f:0f:15:4c:c4:a2:e9:e0:7f:a7:f8:
a5:22:f4:d5:ec:e5:b8:7f:3c:06:6e:81:6e:9d:b3:
49:7d:2d:44:22:e8:24:6d:2b:00:76:b9:ab:d4:1c:
0d:f6:c1:cb:37:76:7a:9e:1c:b2:6d:02:43:7f:6a:
1d:37:c4:b1:b6:f0:21:31:90:9b:f6:2f:00:de:7c:
07:b8:11:00:92:bc:81:14:b9:c4:c6:3f:c2:37:89:
00:f1:61:52:da:03:3b:c6:9b:54:c2:31:33:56:25:
84:fd:17:62:4d:cc:14:70:cf:a4:02:b5:80:47:9d:
2c:cb:49:7c:09:b6:2d:65:6d:22:36:aa:10:4d:3a:
f3:84:f2:eb:82:11:4d:61:c6:6a:b7:11:76:99:2c:
f5:ca:ec:64:05:4f:8c:95:09:02:c4:be:ef:39:91:
56:75:07:07:65:f1:c9:e5:61:d5:28:15:e3:30:42:
56:c8:d0:24:6e:87:3b:ab:61:54:df:68:d9:c1:0a:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:A3:BC:47:85:B9:48:5C:E3:8E:8A:9C:3A:BA:B5:66:05:4B:48
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c1:78:d5:d0:48:b2:6c:e9:6e:ec:6c:1e:de:2b:2f:9a:0c:
73:6b:e0:f9:71:e1:ef:7d:70:09:f7:2c:d2:58:72:82:b3:bd:
60:da:3e:ec:3d:7f:6d:c4:eb:12:53:44:7b:f2:de:a7:aa:38:
3c:b9:92:29:0b:20:d2:2e:fa:8d:33:2c:db:80:34:5f:b5:1a:
18:58:7e:ea:eb:c5:3c:40:fc:d0:46:b3:68:93:6f:46:5d:c8:
ba:68:43:2c:ba:35:29:4f:fb:e6:17:45:3e:f4:83:e8:19:7b:
a2:6a:a7:99:36:49:2c:18:e3:f9:1f:5e:8a:99:24:a8:f8:4d:
0e:a5:d1:6c:da:e7:c4:cc:4f:c3:7f:a4:09:99:d7:bd:3f:b3:
b9:c1:87:a2:7a:35:2f:54:85:ad:8c:31:a9:a6:3a:4f:86:1a:
f3:72:ef:07:33:2f:33:b7:58:eb:5f:eb:00:b1:8d:0e:25:a6:
66:4c:88:4e:52:8e:2e:50:b5:0a:6e:44:4a:d0:7c:6c:3e:7a:
71:32:fe:05:7e:35:8c:65:a9:a5:a0:84:af:43:87:1b:4c:d1:
81:b4:2a:ba:9f:3f:53:64:d4:04:88:11:45:b0:ee:3f:58:09:
e6:e7:57:15:8d:8d:4a:3d:74:3b:41:94:e8:bd:f8:38:4d:79:
28:eb:be:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:55 2026 by rpki-client