Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: 18nfD9eSlXpmeCzVcv01xxmdhqDbG3a/b6xjGg5mN1I=
Subject key identifier: DC:88:E7:32:F5:7D:8D:F2:E7:E1:9C:79:7D:EA:E5:2D:7E:40:4F:04
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 019EC30087D1023BCC75D04E67663BB67A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 1968
Signing time: Sat 13 Jun 2026 22:00:52 +0000
Manifest this update: Sat 13 Jun 2026 22:00:52 +0000
Manifest next update: Sun 14 Jun 2026 22:00:52 +0000
Files and hashes: 1: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: q3EJlWzhl3jvzLfxbNcyIW7+x0upHctWU5jYkTmMSMU=)
2: 5aSu5rDgohcAcFRBlVeL4KQf-Bc.roa (hash: TBrAPV4bOwpXI3ikK/+R0NLpPd2CyHMsQiSsoHb0Hng=)
3: B4UdmI4nMjXvDI9mqvP3jq5Yyds.roa (hash: TvdoyPhTynvytwC8PwcUZrOiE5PXu6aF1+Z/HvWiCkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:87:d1:02:3b:cc:75:d0:4e:67:66:3b:b6:7a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Jun 13 22:00:52 2026 GMT
Not After : Jun 14 22:00:52 2026 GMT
Subject: CN=dc88e732f57d8df2e7e19c797deae52d7e404f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:fe:3a:d3:f2:85:16:f1:02:35:38:46:e5:
4e:fe:b9:b6:55:0d:9e:53:c7:81:d5:5a:4e:72:eb:
ae:eb:d7:90:65:cf:5b:db:ef:f4:45:df:50:30:43:
b6:9b:78:b8:56:fe:0f:66:88:10:1f:b6:a6:e5:2d:
06:f4:d2:da:1a:00:93:0d:af:73:ec:56:9c:98:f3:
b4:a1:f4:d2:d8:1c:4a:37:ca:08:eb:60:96:bf:65:
cc:9c:e0:67:98:8a:97:5a:bd:0c:65:cc:a2:9c:39:
7c:38:37:02:9c:12:f3:52:6a:37:7e:f4:5a:69:c3:
4f:9c:a3:de:ba:86:e2:10:a8:ca:b8:16:32:93:f5:
1c:77:fb:7a:a3:8e:6d:4c:d5:6b:2b:32:81:a0:fc:
0a:e2:71:64:08:9e:af:a6:3a:69:f1:57:d3:f3:31:
94:db:df:2a:6b:70:d2:32:ee:bc:2a:93:c0:6e:39:
8c:e9:97:3b:30:0b:c1:f6:97:b1:aa:25:ea:e1:00:
b2:0d:69:d7:be:5c:e9:26:11:ec:d7:51:29:f2:b4:
4b:a4:9d:5e:2e:be:ce:d6:e6:93:fd:26:39:6d:70:
70:6f:5a:41:8a:27:bb:cb:82:13:cc:3b:93:01:13:
d1:a6:95:56:ca:47:60:9f:66:fc:e2:ff:33:bb:31:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:88:E7:32:F5:7D:8D:F2:E7:E1:9C:79:7D:EA:E5:2D:7E:40:4F:04
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2e:ff:45:99:bd:4a:0a:ee:9d:a1:68:5a:ce:e8:5e:cf:dc:
9b:39:d7:4b:72:ef:2d:82:63:db:cd:fe:9c:ce:b2:b4:85:f5:
63:45:99:77:34:04:12:b3:d7:96:21:3b:b3:1d:3f:3f:c6:cf:
36:4e:8d:66:be:9e:ef:5b:cd:cd:71:0d:4e:d1:cb:7d:4e:ba:
59:e4:63:b5:2f:dd:05:79:20:7c:83:f0:b1:22:70:2f:01:b9:
d8:51:8c:72:d4:f6:94:61:e4:c0:7b:c6:8d:32:e4:d3:1b:97:
32:02:59:0a:d4:4d:b4:c5:8e:41:2e:99:5e:63:00:46:f0:e7:
92:49:fc:d5:19:4f:4f:e9:37:5f:23:8b:87:08:64:3b:2b:50:
6e:cb:0b:cf:0d:85:ed:6e:52:f1:0d:fd:eb:ee:24:0c:17:0a:
5d:07:c8:ba:46:9c:4c:2d:2a:c7:3c:8b:12:5b:48:82:9d:d2:
6c:92:a2:b3:f6:e9:ae:41:fd:c6:76:92:7b:ef:d9:9a:59:3c:
f6:69:3b:62:8a:59:4a:f5:87:84:dd:70:b2:07:25:f8:5a:4f:
23:27:48:a3:ba:0e:27:8a:c7:cc:5f:0a:ba:bf:d2:f5:f8:3b:
61:18:c9:0c:ae:3e:53:90:63:1f:88:ca:bc:8d:fa:5d:14:23:
83:8a:60:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:43:15 2026 by rpki-client