Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: +0vw4TxPMZIu9+WKDEOBgPIUc21d4OBjATByfABD+dk=
Subject key identifier: E3:55:4F:EB:A0:86:36:CB:98:46:D5:68:9C:AE:15:70:9B:2A:23:CA
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019EDBE52F4AA16EEC04597C5F4E1D133980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 018C
Signing time: Thu 18 Jun 2026 18:01:30 +0000
Manifest this update: Thu 18 Jun 2026 18:01:30 +0000
Manifest next update: Fri 19 Jun 2026 18:01:30 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: 8llh95+VGPOPMB/INS/8tGJGW+uy75C/C/ERr/L4/r8=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:e5:2f:4a:a1:6e:ec:04:59:7c:5f:4e:1d:13:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Jun 18 18:01:30 2026 GMT
Not After : Jun 19 18:01:30 2026 GMT
Subject: CN=e3554feba08636cb9846d5689cae15709b2a23ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:e1:f8:2b:76:97:86:53:14:8f:05:cb:62:
61:74:61:a8:ba:fb:86:0c:56:ee:a4:26:36:46:7a:
2e:6e:a9:c4:ef:e0:8a:7c:29:0a:b2:94:41:e4:a2:
34:bc:d6:6b:4b:a5:34:85:9e:f6:3d:ee:48:fd:3b:
3c:e9:f6:c4:43:00:78:ac:4a:60:6f:4c:e8:d5:8b:
69:c5:ca:fe:bf:41:26:0f:7b:cd:67:5c:6d:be:54:
72:76:20:36:7d:07:dd:fc:96:b3:7d:f0:de:8e:4e:
66:e9:e2:54:ac:98:79:1e:2c:69:fe:bd:97:ef:79:
ac:39:0a:b9:74:e9:de:2f:a7:28:3c:73:c3:7e:61:
41:7d:4c:7e:c1:6d:1f:10:48:36:c5:38:6b:b7:01:
df:76:71:39:88:26:9b:9b:16:ae:0e:01:5c:d6:04:
a7:93:f2:77:52:97:bb:8a:f7:33:4a:1c:79:26:99:
58:18:95:18:09:d7:92:b5:22:bd:ad:05:5b:c1:52:
83:a9:60:70:62:4c:4d:c5:67:0b:65:ed:d3:e7:df:
24:17:f6:32:6f:2e:bf:f0:c5:cc:59:97:fa:db:bd:
f8:b9:67:43:f6:16:37:cb:79:3d:7f:b4:b9:fe:9d:
10:e7:91:56:c7:6f:43:46:f3:a7:dd:43:c7:58:8d:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:55:4F:EB:A0:86:36:CB:98:46:D5:68:9C:AE:15:70:9B:2A:23:CA
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8d:80:52:69:86:59:77:94:ab:de:bf:30:8e:01:fd:14:35:
86:19:ff:33:f2:ef:3f:6e:aa:3e:b0:e5:ff:24:ea:3d:eb:7d:
b4:21:4b:6e:ec:df:65:a3:7b:40:55:ae:3b:d8:96:39:86:06:
3d:cf:45:3b:a3:69:4e:e8:ce:98:89:f4:14:d3:82:5e:8f:8b:
7b:16:b1:27:b9:5b:bc:16:27:aa:65:8c:2a:86:f8:0b:33:2e:
0e:e5:11:80:7c:8e:d3:03:54:53:af:86:a7:0d:0f:a9:75:91:
5b:f7:b1:a5:e4:29:85:28:6a:a5:40:83:4f:23:50:1a:c4:a8:
19:db:42:eb:72:c7:aa:6c:f6:ba:87:68:6b:10:ba:5f:8e:c8:
76:b1:d5:79:0d:1b:12:64:3e:f1:5c:0f:33:7d:7d:1c:5c:71:
ca:50:e7:a4:d4:0c:5f:10:f2:3f:a0:53:d0:9d:ff:0f:db:26:
3f:bf:38:9f:2a:13:78:04:14:8f:d3:99:a8:1d:cb:7c:24:48:
89:34:63:17:53:2e:c0:8f:c7:ad:f5:20:c2:55:a5:fc:0f:e5:
aa:54:83:d3:8f:1d:3e:7c:9a:03:b6:9b:e0:18:2a:b4:ee:bf:
81:57:9e:aa:5a:c2:8b:9f:ee:fe:9b:26:45:cb:3a:16:00:db:
cc:d5:b2:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7b5S9KoW7sBFl8X04dEzmAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTcxNzQ5ZjgwMjkyNTM5MDFmNzFkNDY0MTAzOWU5MGYx
YTk3ZmEwHhcNMjYwNjE4MTgwMTMwWhcNMjYwNjE5MTgwMTMwWjAzMTEwLwYDVQQD
EyhlMzU1NGZlYmEwODYzNmNiOTg0NmQ1Njg5Y2FlMTU3MDliMmEyM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHPh+Ct2l4ZTFI8Fy2JhdGGouvuG
DFbupCY2RnoubqnE7+CKfCkKspRB5KI0vNZrS6U0hZ72Pe5I/Ts86fbEQwB4rEpg
b0zo1Ytpxcr+v0EmD3vNZ1xtvlRydiA2fQfd/JazffDejk5m6eJUrJh5Hixp/r2X
73msOQq5dOneL6coPHPDfmFBfUx+wW0fEEg2xThrtwHfdnE5iCabmxauDgFc1gSn
k/J3Upe7ivczShx5JplYGJUYCdeStSK9rQVbwVKDqWBwYkxNxWcLZe3T598kF/Yy
by6/8MXMWZf62734uWdD9hY3y3k9f7S5/p0Q55FWx29DRvOn3UPHWI36wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONVT+ughjbLmEbVaJyuFXCbKiPKMB8GA1UdIwQY
MBaAFOLnF0n4ApJTkB9x1GQQOekPGpf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAt
OGFkMjMwMThhNWFkLzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAtOGFkMjMwMThhNWFk
LzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI2AUmmG
WXeUq96/MI4B/RQ1hhn/M/LvP26qPrDl/yTqPet9tCFLbuzfZaN7QFWuO9iWOYYG
Pc9FO6NpTujOmIn0FNOCXo+LexaxJ7lbvBYnqmWMKob4CzMuDuURgHyO0wNUU6+G
pw0PqXWRW/expeQphShqpUCDTyNQGsSoGdtC63LHqmz2uodoaxC6X47IdrHVeQ0b
EmQ+8VwPM319HFxxylDnpNQMXxDyP6BT0J3/D9smP784nyoTeAQUj9OZqB3LfCRI
iTRjF1MuwI/HrfUgwlWl/A/lqlSD048dPnyaA7ab4BgqtO6/gVeeqlrCi5/u/psm
Rcs6FgDbzNWySQ==
-----END CERTIFICATE-----
Generated at Fri Jun 19 03:39:23 2026 by rpki-client