Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: FrNLF6XSyDEWr3KRS/LyJVe9DKVVvtR6PpJvqMDc0SA=
Subject key identifier: 66:15:05:66:BA:2C:9C:81:97:10:DA:9F:52:D2:6A:19:75:E1:47:68
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019F0A3E8701C3A12C1777F6712D68D578A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 198B
Signing time: Sat 27 Jun 2026 18:01:37 +0000
Manifest this update: Sat 27 Jun 2026 18:01:37 +0000
Manifest next update: Sun 28 Jun 2026 18:01:37 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: gM+pGpL/9Ca7dEXO8VKSrb3xCyxDxqttLphFGeP51k8=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:3e:87:01:c3:a1:2c:17:77:f6:71:2d:68:d5:78:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Jun 27 18:01:37 2026 GMT
Not After : Jun 28 18:01:37 2026 GMT
Subject: CN=66150566ba2c9c819710da9f52d26a1975e14768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:de:35:96:84:96:09:ff:d5:4b:f7:f1:7e:d8:
18:98:e3:5d:e6:5b:33:9b:2b:2e:8b:c3:d5:db:32:
a0:7f:98:dc:78:85:04:e4:b3:a7:03:08:30:c2:a5:
4c:a5:b5:53:3d:7c:01:01:7c:80:1f:c3:46:18:09:
71:3e:56:c4:91:42:f8:7c:a3:f4:48:58:8a:40:d6:
fb:7f:24:f8:96:2d:42:85:d2:a6:77:c5:58:3e:d6:
51:7c:eb:6c:72:1f:6b:2f:7e:e2:ab:64:ab:6c:67:
3e:4b:45:6e:ee:e1:fd:e7:b2:3d:8d:1e:ff:05:a6:
76:4c:ae:fb:b5:d4:22:cb:12:75:33:7b:b2:8d:89:
d9:c8:f2:cd:5d:53:58:2e:20:29:d7:53:aa:60:3b:
29:c0:73:41:b6:80:98:62:ad:9d:0d:98:11:2b:e2:
cc:0a:a9:26:80:99:6a:d3:e9:b2:fb:aa:17:b8:25:
dd:8d:c6:d0:65:dd:ab:aa:89:60:59:da:0f:c3:6e:
96:82:bb:d6:9a:1e:6a:15:0d:97:ab:4f:f7:a8:f1:
0d:33:5c:0f:c0:6c:11:71:64:19:55:ec:0e:48:fd:
06:ed:6d:a4:87:4b:65:b7:99:72:56:8b:9d:2d:aa:
d9:ab:e7:ee:b4:8c:b0:af:fa:8e:f6:f5:03:dc:18:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:15:05:66:BA:2C:9C:81:97:10:DA:9F:52:D2:6A:19:75:E1:47:68
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:36:28:c1:e6:d6:c5:a7:f3:99:06:9d:f4:02:60:1c:3d:db:
80:15:7e:e0:b3:1f:07:de:d0:88:c2:b5:80:1e:87:0f:ab:0b:
a9:37:9c:8f:62:7e:b6:6b:76:7e:3a:4a:5f:a1:27:79:d6:76:
df:77:66:df:a6:f2:41:0e:46:06:f9:f5:f2:7c:3a:d4:29:e2:
89:57:5a:e7:3f:56:b8:2d:77:16:cc:38:0c:52:cb:16:f4:62:
31:09:ba:77:83:2c:56:e9:e4:57:9f:ac:56:a3:c3:d4:ac:6e:
0e:6a:cd:7d:ca:9c:93:c4:d0:3e:c0:88:c0:f8:2d:7d:19:19:
7e:3d:76:5a:61:3c:80:e1:98:09:3e:14:97:a1:bf:17:2e:49:
cc:d3:55:20:db:51:03:a7:33:1b:c0:12:ce:9e:7d:72:19:74:
29:c5:d8:cd:97:36:21:fe:48:d1:52:a8:e9:22:cc:db:d6:8c:
f7:a0:4a:74:e1:a6:5c:7e:96:7b:f3:cb:7a:8e:d1:6d:db:48:
ee:64:52:c8:14:65:e6:e8:25:54:72:53:bb:cd:90:94:09:46:
d3:65:e3:6e:16:e8:d8:6d:79:75:78:4b:85:d7:72:ba:6c:91:
13:03:89:7c:eb:62:31:16:ac:c6:cb:1b:75:c4:d5:c2:24:2e:
a3:7b:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:12:45 2026 by rpki-client