Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: NgpBby+n0nZttsxU2Kfd+gdso+iO+InnePlYt8GELo4=
Subject key identifier: 16:BE:61:2B:FC:99:75:31:3D:3F:BB:A7:2F:E6:F7:34:EF:3F:B8:E8
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019EBEECE8176688703B86BAFB6E2E6D10EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0C25
Signing time: Sat 13 Jun 2026 03:00:57 +0000
Manifest this update: Sat 13 Jun 2026 03:00:57 +0000
Manifest next update: Sun 14 Jun 2026 03:00:57 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: nF3Kkh+ymnYP2OqBWAMdQiskIo1Ycg5DLygkSTLUBE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:e8:17:66:88:70:3b:86:ba:fb:6e:2e:6d:10:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Jun 13 03:00:57 2026 GMT
Not After : Jun 14 03:00:57 2026 GMT
Subject: CN=16be612bfc9975313d3fbba72fe6f734ef3fb8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d2:ad:a8:8e:e2:b1:ab:dc:c8:e9:e0:df:5d:
7a:b3:62:1d:d0:47:43:4c:b6:8e:4a:e3:9c:df:df:
a2:64:36:7d:02:83:a6:99:83:f8:f8:f7:78:40:5a:
7b:cd:cf:dd:13:ee:f4:a9:57:92:e8:36:dc:65:9e:
55:26:8b:e6:8b:ff:95:ec:62:53:e5:b7:ef:38:fb:
a9:b9:2c:6b:6c:f6:ab:26:75:3e:26:24:54:f0:b3:
64:ab:fe:f3:72:7b:ec:67:09:fa:f1:af:aa:36:03:
7f:4c:88:5b:dc:f3:1e:c8:d6:a9:44:95:5d:91:1a:
c7:57:c5:1c:37:b5:0d:f5:18:10:ee:11:90:ef:15:
57:4c:d3:95:c2:77:62:32:70:1a:d9:36:00:fd:d5:
e8:f7:65:6d:2e:69:98:d7:17:bc:e3:5c:e5:7c:18:
d8:64:5d:bf:f5:e5:da:62:d2:13:f2:07:95:7e:67:
38:3a:47:3b:f1:de:ab:4d:fa:3e:2b:18:ff:44:29:
3f:0e:77:35:0e:34:64:32:eb:d8:17:1e:bd:81:cf:
7f:cd:02:b3:a5:58:fb:fc:65:de:f0:29:1b:01:ab:
d4:e9:da:d6:92:13:1e:3c:b6:9b:5c:7e:38:08:93:
20:d2:68:84:8c:36:37:16:d0:b9:1d:1a:85:9d:0c:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BE:61:2B:FC:99:75:31:3D:3F:BB:A7:2F:E6:F7:34:EF:3F:B8:E8
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:46:e1:a2:b9:89:94:36:eb:f4:33:c3:fe:44:46:00:56:37:
b5:c4:a4:e3:e6:9a:e3:17:f6:6b:b4:06:aa:f5:56:14:4b:f7:
49:b7:8a:a9:e6:79:40:36:68:7e:47:ad:ef:02:f4:74:90:38:
7b:55:3b:63:93:e0:d3:1e:69:2c:c2:e2:ef:cc:f0:e6:94:8e:
98:60:3e:47:a9:65:f7:f6:54:1f:55:f2:0b:49:20:cb:b7:bb:
f2:56:ce:b5:5d:48:70:1b:f1:4c:20:6f:3b:98:3e:c3:e0:1f:
17:08:b1:74:e9:a3:48:a9:4b:3f:b4:c5:b7:44:1e:36:99:9e:
15:cb:58:19:99:0d:8b:38:92:54:74:e3:d7:ec:9b:ab:66:f6:
a3:0e:7c:27:d9:55:84:35:19:5c:4b:cb:ea:cd:c5:d5:40:37:
2d:4e:b8:31:0e:37:12:ee:83:2c:c7:69:b5:cb:79:a1:50:33:
fa:c3:6d:1d:a1:14:c9:99:c3:5b:91:f1:48:ce:83:e2:c1:94:
e4:0b:4b:98:d3:62:be:d9:38:d8:2d:93:39:cb:9f:6d:1b:d1:
49:37:ea:4b:c8:4f:34:29:da:ea:42:fa:04:d5:33:8d:f1:03:
fb:ed:8a:d9:4f:34:c9:55:40:03:5d:8f:eb:cf:0d:80:ce:5c:
40:d5:c3:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7OgXZohwO4a6+24ubRDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDk3NGMzYmQ0ZmVhNGU5ZmViNTEyOWRiZWQyMDNjMDc1
YzhkNjgwHhcNMjYwNjEzMDMwMDU3WhcNMjYwNjE0MDMwMDU3WjAzMTEwLwYDVQQD
EygxNmJlNjEyYmZjOTk3NTMxM2QzZmJiYTcyZmU2ZjczNGVmM2ZiOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NKtqI7isavcyOng3116s2Id0EdD
TLaOSuOc39+iZDZ9AoOmmYP4+Pd4QFp7zc/dE+70qVeS6DbcZZ5VJovmi/+V7GJT
5bfvOPupuSxrbParJnU+JiRU8LNkq/7zcnvsZwn68a+qNgN/TIhb3PMeyNapRJVd
kRrHV8UcN7UN9RgQ7hGQ7xVXTNOVwndiMnAa2TYA/dXo92VtLmmY1xe841zlfBjY
ZF2/9eXaYtIT8geVfmc4Okc78d6rTfo+Kxj/RCk/Dnc1DjRkMuvYFx69gc9/zQKz
pVj7/GXe8CkbAavU6drWkhMePLabXH44CJMg0miEjDY3FtC5HRqFnQxf5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa+YSv8mXUxPT+7py/m9zTvP7joMB8GA1UdIwQY
MBaAFOHZdMO9T+pOn+tRKdvtIDwHXI1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAt
YzAzNDEwOTRiMDlhLzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAtYzAzNDEwOTRiMDlh
LzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkbhormJ
lDbr9DPD/kRGAFY3tcSk4+aa4xf2a7QGqvVWFEv3SbeKqeZ5QDZofket7wL0dJA4
e1U7Y5Pg0x5pLMLi78zw5pSOmGA+R6ll9/ZUH1XyC0kgy7e78lbOtV1IcBvxTCBv
O5g+w+AfFwixdOmjSKlLP7TFt0QeNpmeFctYGZkNiziSVHTj1+ybq2b2ow58J9lV
hDUZXEvL6s3F1UA3LU64MQ43Eu6DLMdptct5oVAz+sNtHaEUyZnDW5HxSM6D4sGU
5AtLmNNivtk42C2TOcufbRvRSTfqS8hPNCna6kL6BNUzjfED++2K2U80yVVAA12P
688NgM5cQNXDIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:47 2026 by rpki-client