Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: FNqiWluSNo+4iPNUhzgA4CZlESkyoHHmjytdK7ROqbQ=
Subject key identifier: 4F:A0:CD:97:20:EA:85:54:70:17:84:73:2D:F2:59:13:3B:6B:3D:50
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019EBEB5DF02E985D3C05148385860EE98C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 166B
Signing time: Sat 13 Jun 2026 02:00:50 +0000
Manifest this update: Sat 13 Jun 2026 02:00:50 +0000
Manifest next update: Sun 14 Jun 2026 02:00:50 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: BF81HVgfCVeW+gpoksLVMxmEFbMriYbPVoGOk/X6I6Y=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:df:02:e9:85:d3:c0:51:48:38:58:60:ee:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Jun 13 02:00:50 2026 GMT
Not After : Jun 14 02:00:50 2026 GMT
Subject: CN=4fa0cd9720ea8554701784732df259133b6b3d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:b1:1f:26:8c:28:ea:11:e3:9f:55:8e:b9:
cb:0a:0f:1b:df:c3:81:ed:b1:29:b6:89:2d:7f:25:
95:b9:a7:c7:a8:61:d7:85:99:01:3a:a9:22:a2:23:
85:dd:3f:26:2d:61:4f:c3:a4:53:d2:08:8d:b1:de:
05:af:93:5b:c2:66:78:e9:12:f1:f6:96:16:8c:03:
69:35:9d:20:6f:97:97:c0:e9:a2:80:96:8d:a9:a4:
34:5f:54:e3:b1:a5:a0:e0:f8:a4:52:89:fd:3f:e2:
fe:0e:87:08:24:af:96:68:76:7f:37:75:e3:51:3b:
91:80:4c:37:a4:e5:d4:49:c9:fb:bb:2e:f8:7e:40:
c7:94:7e:ba:47:4b:25:46:44:45:a3:9b:bc:d4:c1:
80:47:7a:95:c1:b8:05:e7:19:81:9f:e5:83:ca:c2:
01:cb:a0:23:d4:05:ac:58:a2:5b:ac:b3:6e:a8:5a:
d8:67:00:39:93:84:ab:2e:8e:5d:8d:1d:19:8b:74:
b9:50:b5:28:7c:87:19:9d:5d:2a:35:ba:20:9d:dc:
94:f0:8c:f6:29:64:98:96:f3:6a:e6:e6:83:ce:33:
27:c0:78:bb:5b:8b:8b:ee:b6:97:98:53:fc:3d:6e:
b5:00:42:de:8f:c2:8a:e1:0f:14:d5:71:35:44:51:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:CD:97:20:EA:85:54:70:17:84:73:2D:F2:59:13:3B:6B:3D:50
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3d:1c:ff:8a:fe:73:05:00:58:d3:07:d8:3d:80:2b:86:d7:
08:e0:aa:1d:fe:65:8d:0a:33:5e:f6:46:da:8c:58:3d:51:92:
95:c6:82:26:09:97:97:cd:b3:bf:be:99:65:e4:de:6c:01:40:
b4:39:02:21:49:88:d3:23:9c:c1:37:b8:03:28:9c:77:d7:e9:
bd:d7:94:e1:d0:ce:f8:0e:b3:7e:ed:34:7c:13:6e:13:4c:50:
e8:f5:43:b1:3d:7f:87:64:97:7b:7f:42:1f:86:58:71:98:9a:
00:1c:0f:8f:35:5b:82:2d:36:8d:d8:02:75:97:2a:bb:a4:90:
7d:af:d9:15:11:f2:8f:b1:68:f7:c7:b3:7a:c2:e2:7b:c4:31:
61:84:0a:41:0e:3b:51:1d:91:68:2b:5a:f4:7d:7d:41:0c:77:
69:c3:4f:32:b8:4b:5b:48:4a:ca:f7:be:9c:60:2b:16:ea:ff:
c8:77:2f:51:5c:18:a0:29:46:52:2a:c8:26:36:43:90:f1:cf:
6b:7d:09:41:57:35:5d:7e:db:7d:b7:fa:97:f9:45:c6:64:fe:
a7:ce:33:24:24:cb:2c:99:af:13:80:5a:93:a2:01:69:0a:c4:
8d:d0:ac:a3:de:e7:8e:4f:f5:cd:c7:ae:30:ef:e5:2f:77:4f:
c4:43:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:37:47 2026 by rpki-client