Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: Vh95fxVv3URxyD1/LymxCaQR0+Xld2ZDKnBLoearM6w=
Subject key identifier: 7D:46:83:55:50:5F:2F:2B:42:F2:D1:BD:1E:D4:D3:90:8E:5C:6E:62
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019E909443E8F3C46B4594FC989A79D9F0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1942
Signing time: Thu 04 Jun 2026 03:01:36 +0000
Manifest this update: Thu 04 Jun 2026 03:01:36 +0000
Manifest next update: Fri 05 Jun 2026 03:01:36 +0000
Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: Oq74yr6Ux1Jfl5r5CwVRKLpPEu17sQKjwwpHgJzoL8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:94:43:e8:f3:c4:6b:45:94:fc:98:9a:79:d9:f0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jun 4 03:01:36 2026 GMT
Not After : Jun 5 03:01:36 2026 GMT
Subject: CN=7d468355505f2f2b42f2d1bd1ed4d3908e5c6e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:cd:9f:90:2e:6f:79:9c:e7:6d:86:33:bb:
67:e0:2a:6c:ba:fe:84:5c:16:c8:d4:e3:35:1c:6b:
45:4d:9b:7b:07:e8:27:25:0b:1a:b0:e8:42:62:7d:
af:ed:72:c6:0b:6d:b3:19:e3:40:d5:87:e3:3f:73:
b3:28:01:67:99:6e:f8:d6:c1:59:32:8b:5b:e9:cd:
80:82:06:28:62:41:83:62:2e:25:07:f2:3f:7c:9d:
f0:17:bd:d0:0b:3d:93:ed:a0:44:9c:20:2d:e3:16:
cb:96:0f:7f:04:09:10:6a:c7:8d:be:90:9f:cd:3e:
cb:98:85:56:d0:3f:5a:33:f8:30:49:a3:04:d1:b9:
03:78:7e:63:d9:54:e8:dd:0e:cf:46:ca:c2:98:68:
e2:47:76:a1:5b:46:07:42:46:33:8c:c2:c3:20:fb:
bb:f6:82:64:3f:35:a5:b5:52:f5:45:42:25:d9:df:
f7:89:37:e5:ea:c6:56:92:93:25:43:69:23:f8:bc:
e9:86:f1:19:08:19:73:c2:fb:19:ad:4c:b8:f8:7e:
14:23:04:78:08:58:85:0b:4b:b4:85:f3:03:f2:ab:
06:fa:d3:b0:63:16:40:da:4a:a1:d1:a8:5f:40:86:
32:93:72:12:16:9f:03:6e:80:b3:47:fa:f0:a7:0c:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:83:55:50:5F:2F:2B:42:F2:D1:BD:1E:D4:D3:90:8E:5C:6E:62
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:ca:e6:6a:e5:8e:b1:ca:30:20:42:04:b7:1a:47:1c:ac:
60:c7:84:8e:5d:f7:29:ab:68:b7:48:14:9e:6f:5f:4a:b2:be:
82:88:6e:01:df:0d:67:8e:ff:28:2b:56:88:fc:8a:cf:b9:ec:
70:c2:40:ea:a6:58:92:7b:40:dc:46:0a:21:ae:46:69:d5:ca:
9f:6f:c7:2a:b5:4f:f7:05:b5:0c:d9:05:ac:1a:26:5b:4b:ec:
24:de:b3:c7:62:d7:8d:7b:a5:38:7e:d6:c0:ea:fa:9e:26:92:
2f:3f:ac:34:34:5c:97:e9:7c:74:df:00:2c:d5:2a:f2:15:b8:
2a:55:2e:1e:4e:42:04:c3:ca:38:6a:2f:f5:5e:29:59:21:5d:
24:71:fb:87:05:c4:ba:58:ed:e8:4b:4d:20:2c:c8:50:54:04:
95:5b:0b:d6:56:a7:c0:48:c7:e6:5b:26:a6:4b:a9:89:25:6b:
07:54:32:ae:7d:da:ae:d4:97:a5:cf:18:ca:0d:de:66:a1:a1:
0e:30:5d:89:cf:1b:ef:33:d8:02:ac:b9:a3:f9:2f:ad:cf:95:
dd:30:34:a0:3a:e4:9d:56:dd:8f:a3:5e:b1:04:22:0e:24:07:
19:87:1c:4c:e7:31:45:33:53:45:2d:8f:1b:f6:75:f0:47:24:
40:82:17:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:20:47 2026 by rpki-client