Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: WOFRNNF3MP3LEtuioZL4FFTUbR927zpj+v4X3eIwJz4=
Subject key identifier: 8C:E0:61:E3:1E:90:05:64:F8:69:D8:1E:C0:E0:7B:3D:FB:FB:E6:B5
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019F17F92B7B2C3539A3E9A391CA946BCB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 10:00:33 +0000
Manifest this update: Tue 30 Jun 2026 10:00:33 +0000
Manifest next update: Wed 01 Jul 2026 10:00:33 +0000
Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: 3iVGatsCq8pReV2BsFztnrF2pUTeStyKo5HudyHu0jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:2b:7b:2c:35:39:a3:e9:a3:91:ca:94:6b:cb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jun 30 10:00:33 2026 GMT
Not After : Jul 1 10:00:33 2026 GMT
Subject: CN=8ce061e31e900564f869d81ec0e07b3dfbfbe6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:b9:b5:13:33:0b:07:8e:f9:73:dd:3f:55:
60:9e:53:48:07:22:f7:07:01:ff:6c:f9:4d:e3:78:
ce:c2:31:b9:51:67:a7:5e:3d:15:5e:e1:de:3a:db:
1b:2b:ae:0d:1c:8f:07:db:e5:25:8a:57:4e:59:91:
5c:7a:9d:2b:63:1a:14:6d:38:ed:01:17:d1:d2:ec:
c7:60:3a:6c:5d:db:c8:3b:0c:ab:5e:8e:ef:74:7e:
54:ec:0a:85:61:5e:eb:00:b6:86:15:ea:b1:93:81:
a0:a1:ff:43:c3:10:e7:d4:14:46:dc:1e:1d:16:ef:
4e:8e:08:a8:f1:70:30:ea:0e:49:03:d2:fa:8b:be:
f6:08:ac:34:7b:d8:c4:09:72:4c:47:6f:7c:02:53:
3a:54:32:53:39:17:da:46:c3:03:8f:13:5a:7b:e8:
ce:fe:45:89:e2:a1:c3:12:9e:ec:10:9e:a7:a0:42:
d9:e1:89:3c:c6:48:64:17:7d:2a:74:81:74:cd:c6:
19:5a:4d:23:1e:f4:2c:a1:f9:33:12:ca:9f:ff:bd:
aa:0a:01:07:62:1d:d1:45:5b:ab:0a:f9:ea:11:da:
98:42:3f:74:2d:9b:0c:5a:2d:48:62:9a:f2:25:fb:
7b:18:ed:6f:ba:ef:57:85:36:02:17:08:f1:42:f1:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:61:E3:1E:90:05:64:F8:69:D8:1E:C0:E0:7B:3D:FB:FB:E6:B5
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9e:52:c8:d3:52:37:4c:64:f7:48:f5:6a:ca:0d:a9:2c:cc:
fe:b2:1b:60:78:95:7f:47:ef:0b:6e:97:bd:4c:47:72:4a:86:
3c:10:a7:04:8d:e2:cb:fc:b9:ec:88:2d:0f:9c:d5:b5:24:d8:
4c:8d:c3:7c:0e:0c:cc:2c:51:f3:b4:4e:6d:94:da:d9:23:48:
99:22:cc:35:ff:75:c4:fb:9b:bb:89:66:1f:17:b2:97:da:40:
9f:9e:b4:a4:a3:f5:f4:f5:58:d9:58:0e:27:ad:ce:d2:47:8e:
00:49:0b:c6:24:90:47:94:76:15:89:e8:6b:60:51:fc:db:f6:
36:fc:0b:99:bd:06:b0:47:f9:05:4c:14:10:0d:fa:25:55:d7:
91:0f:33:5d:7f:c5:8a:bb:cf:b5:c3:d3:69:b6:a1:ba:a7:10:
c8:b1:b1:37:fa:f4:73:6c:a9:07:d0:73:df:5c:33:b4:66:8d:
0e:65:79:ea:60:4a:22:f8:a8:c8:25:ed:08:03:0e:9d:63:a7:
4e:f6:8b:96:30:f6:63:0e:f8:42:2e:10:8b:bf:54:6f:c3:9f:
14:3b:79:6e:35:4b:71:82:92:70:f3:40:e6:cf:6a:23:6c:8e:
51:08:cd:a5:58:db:65:25:28:ae:8e:95:7a:97:a6:51:71:3a:
e5:a0:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:46 2026 by rpki-client