Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: yYt6ByEVWch6PMZosA2NveoqIpoGievSnS8NFMlWW1A=
Subject key identifier: 61:45:62:1E:43:A7:02:9D:DF:9F:57:DD:F7:64:E7:B4:7C:05:B7:EA
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 019F17C355DC73C6323F9830E81521FD5020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 07B0
Signing time: Tue 30 Jun 2026 09:01:45 +0000
Manifest this update: Tue 30 Jun 2026 09:01:45 +0000
Manifest next update: Wed 01 Jul 2026 09:01:45 +0000
Files and hashes: 1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: tYCsYCwlNVJIT9JTee38FAejFCJdguca7+SYaNF/WC8=)
2: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (hash: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:55:dc:73:c6:32:3f:98:30:e8:15:21:fd:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Jun 30 09:01:45 2026 GMT
Not After : Jul 1 09:01:45 2026 GMT
Subject: CN=6145621e43a7029ddf9f57ddf764e7b47c05b7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:87:39:f3:d0:d3:70:eb:8e:3a:22:3c:5f:
d7:b9:98:9e:4e:24:32:ab:84:b3:c7:c7:03:68:a8:
5a:16:dd:91:7d:a3:a7:57:0a:1d:35:7c:76:07:42:
73:07:a9:6a:f3:a5:7e:b8:c6:78:20:fa:db:f8:ee:
3d:7d:b7:87:37:91:88:f1:bd:c9:e8:c9:da:56:c7:
79:3d:ad:f0:af:a3:d4:a6:67:ea:04:e8:94:bb:db:
8b:63:40:68:e9:e6:57:5b:75:c9:8f:8b:ca:f3:d3:
92:8f:b8:5a:03:70:c9:f4:40:60:ca:de:e2:58:77:
b1:39:ea:1a:64:62:aa:e5:ce:e2:cd:3c:d0:ac:f8:
62:bb:ec:fb:0c:29:7c:df:cb:a0:5a:d3:e8:41:2c:
a6:05:ac:1c:94:d9:5d:63:80:91:92:26:9d:27:37:
82:a3:e7:cf:f4:83:83:39:7a:07:27:22:d0:eb:95:
8e:f0:dc:27:3a:dd:a8:1c:e0:09:0a:67:06:92:d3:
01:51:8e:26:a0:09:08:cb:32:ba:d7:81:49:8f:1f:
d1:b6:e3:cc:8a:95:3c:21:18:41:41:32:c6:03:c9:
7d:bf:e6:8d:ee:dd:6f:e4:4e:1b:33:80:cd:65:a3:
0b:1a:d7:8d:de:78:a1:4e:ec:e0:2f:60:94:95:98:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:45:62:1E:43:A7:02:9D:DF:9F:57:DD:F7:64:E7:B4:7C:05:B7:EA
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6a:c7:d8:d3:0a:ab:0f:a7:f9:aa:ad:44:f5:96:c9:2c:c6:
34:2c:d5:f5:3c:35:c4:c4:d1:da:93:3c:9d:5b:6d:56:98:6e:
7a:37:32:36:d9:69:59:ac:35:69:0a:0e:bd:a9:f7:d2:c8:f7:
88:61:7d:cc:12:6b:e6:90:27:7f:80:76:fd:4a:58:ae:42:d8:
c2:d7:c3:20:0a:2c:8a:d0:36:39:54:1b:bf:b1:fd:be:88:6c:
c0:bb:08:98:31:21:4a:4f:bc:29:ee:83:91:91:33:9f:7e:e6:
af:2d:88:4d:28:36:56:d9:a3:3a:1c:b0:6c:a2:85:96:cb:a1:
bb:6d:19:b0:81:e1:32:f5:5d:3e:2b:88:4a:ec:20:20:a1:3a:
4e:ff:2f:e5:67:67:c1:1a:02:a8:f1:85:5f:5a:8f:46:9d:e0:
47:a3:e1:f5:d7:46:99:7e:9e:db:df:fe:c8:1a:cc:3c:dd:a9:
40:8a:90:47:33:18:af:26:93:10:d1:7b:19:14:0c:40:18:b9:
96:f5:c9:78:41:fa:29:cb:79:f6:c7:a7:fa:7a:c3:cd:8a:75:
e7:48:ae:59:04:2e:87:b4:c0:05:6e:73:64:59:10:45:86:c7:
01:03:43:f9:41:73:22:0c:8c:e6:ae:3a:64:77:cf:85:9f:2b:
5a:6e:d6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:18 2026 by rpki-client