Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: kjbrCruZ+jB9BnD9gJExfOYuZgqnrO8NAPUy/Udwxyw=
Subject key identifier: 09:D4:30:D9:D2:DA:47:92:8B:EC:04:A6:8F:EF:32:5D:D6:8F:07:34
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019EB95909FF77C0EE0E40A5DD3A997F9B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 147F
Signing time: Fri 12 Jun 2026 01:01:20 +0000
Manifest this update: Fri 12 Jun 2026 01:01:20 +0000
Manifest next update: Sat 13 Jun 2026 01:01:20 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: mo+2TqX2DuYQqQaGM+uFT216UlFVvwlXTrIfN6wLeLU=)
2: 4xl3tok9SorpWFsyI4hTWRVgL8I.roa (hash: D/WQvDz0YD7aThz9pG4ZIXECMXp1ea6y/G/Bk0u0Mqg=)
3: vzJwebJ7E7PLEVf89eADV1dlWKk.roa (hash: Yr+W4PaEcUNg/gK3cVZEvL18EsHfc2QVQ1cTqMJ7HMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:59:09:ff:77:c0:ee:0e:40:a5:dd:3a:99:7f:9b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Jun 12 01:01:20 2026 GMT
Not After : Jun 13 01:01:20 2026 GMT
Subject: CN=09d430d9d2da47928bec04a68fef325dd68f0734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:fe:4c:35:b4:12:84:4b:d2:b7:0b:ef:67:
74:f0:d4:a8:6c:96:1f:6f:ec:d2:85:18:e6:8b:d8:
e0:4c:9b:17:9b:dc:8e:59:c7:a4:0f:4c:48:0b:f1:
56:a2:b6:78:44:a6:b1:5a:b2:b6:1c:9e:a8:c4:fb:
4d:85:b5:1e:b4:e9:82:4a:62:62:56:65:3a:0f:ea:
1b:d5:22:e5:37:50:61:3d:8e:56:89:5a:8d:d1:59:
8d:34:f3:63:4f:b8:38:5c:f0:7b:af:08:a8:90:95:
3d:42:1c:ea:eb:12:53:61:cb:c7:7b:3e:29:2f:1d:
c8:ac:bc:e3:48:cf:fa:ea:1b:5c:72:da:c6:4b:64:
c4:7a:4c:f4:91:f4:52:d9:1e:a7:d0:97:aa:d1:7a:
4f:46:ad:67:25:05:b0:8f:96:8a:73:d7:6a:9b:a9:
66:bf:98:9d:71:58:72:43:e0:12:13:af:db:ac:e0:
b5:b3:b4:7b:90:b0:b5:d6:63:5b:c4:00:dc:be:04:
d7:dc:80:bc:ef:ae:9b:ff:2e:72:fa:99:e5:9f:6e:
bd:74:e4:ff:57:81:8e:38:64:47:ec:0a:e9:87:f8:
c3:1b:dc:6b:08:71:36:5b:ff:9b:f4:2f:60:b7:50:
28:c8:55:cb:35:ee:e2:f2:5c:f5:dd:1b:a7:c0:06:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D4:30:D9:D2:DA:47:92:8B:EC:04:A6:8F:EF:32:5D:D6:8F:07:34
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ec:a7:cb:bf:09:4b:93:85:44:b5:03:12:8d:ff:eb:89:f9:
02:c7:a6:c0:fd:0c:2a:c0:c8:80:cf:f2:dc:0b:c9:4b:ad:a9:
4b:0e:f7:fe:b4:11:cf:9c:f0:d3:d6:f4:d4:e2:97:d1:8c:b0:
fe:47:46:dd:83:49:53:36:08:33:91:ea:22:f5:b4:4f:56:7a:
da:24:8d:90:20:59:a5:70:53:5f:d2:06:a5:7b:4d:18:e8:04:
40:ce:2f:9f:d6:47:71:2d:83:90:91:e7:2d:66:42:45:64:d6:
aa:19:e8:4d:fb:25:47:b3:76:5c:00:79:29:44:14:dd:98:f8:
52:bd:0a:fc:54:e7:00:c7:d6:3b:69:88:7d:f8:69:b4:4c:97:
1a:18:9b:0d:5a:13:ce:95:2d:9b:f7:85:4c:79:02:a1:04:6e:
29:be:46:12:bd:39:8f:75:c3:e8:e5:d4:43:59:64:c8:9e:cb:
af:a0:5d:20:f0:16:f6:52:38:6b:b5:43:da:34:87:71:4b:23:
b8:1f:bc:55:55:f3:95:73:3e:32:63:11:18:e8:5b:ed:1c:d2:
e5:54:93:f5:8e:67:4d:13:fd:6d:45:48:41:9b:40:17:67:b8:
07:42:2d:d8:c9:19:cb:c3:47:0c:4c:eb:fc:22:7b:8f:6f:49:
ad:d4:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:36:15 2026 by rpki-client