Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier: nCZ7RD1gjGAnFP+rP9WTistihD8zZk481NxsMzdMY40=
Subject key identifier: 53:62:90:69:3B:C9:E3:4F:23:A6:9E:D4:24:5A:CB:57:FD:9D:3A:E1
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 019EBF5A965EC6A5F0060B137E3A021896B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number: 0FA2
Signing time: Sat 13 Jun 2026 05:00:45 +0000
Manifest this update: Sat 13 Jun 2026 05:00:45 +0000
Manifest next update: Sun 14 Jun 2026 05:00:45 +0000
Files and hashes: 1: 0gBlJTwbURvMna08HGkpbxF3GuY.roa (hash: +AHpd/2s8j+dmg3ibj8zF8ms1DXXH4Z/pjBe0gUwZIo=)
2: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: 9/uy6vKnJsjX46QVGXubNq3TpclqjjSIDct9zeh3aSY=)
3: olTnJZOeBxSGSHdFIbwThqvRrwM.roa (hash: 7ZVXpb1BUMxPZ9Jc/FGOlyUwvnj11IZVQ1xQChFmpVk=)
4: v41zPODCDOKyhQh2VYGpMRTzGHg.roa (hash: 9WUhwKCjU+8D4DCY2CpCRa3hsSY6UWz+kGJAJ8Vl43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:96:5e:c6:a5:f0:06:0b:13:7e:3a:02:18:96:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Jun 13 05:00:45 2026 GMT
Not After : Jun 14 05:00:45 2026 GMT
Subject: CN=536290693bc9e34f23a69ed4245acb57fd9d3ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:91:88:43:0a:2f:b6:a1:29:ef:cd:4e:a6:
12:29:4c:84:8a:2a:6f:99:8a:f0:9b:de:10:2e:d0:
57:95:ea:f5:14:5d:e7:a3:8a:dc:50:b4:8c:5e:1b:
5a:0f:7f:16:49:28:02:b3:18:8e:d1:3a:f1:89:73:
bf:0f:2c:06:1c:43:96:65:cb:3c:26:77:db:76:a4:
3b:23:60:60:e7:7c:7e:a2:3d:9b:b6:a7:65:9f:b2:
0f:28:94:83:57:4f:a4:af:20:c0:57:ce:c5:1d:d6:
ba:73:00:d5:8e:e8:88:a5:ad:62:54:3d:c0:b6:90:
58:c0:72:84:37:ad:8b:98:f1:df:45:bd:cc:c0:f3:
00:f5:6d:c2:8d:d6:25:74:23:bb:04:36:51:82:6d:
5e:06:17:c4:c8:ff:ef:d4:a9:02:4a:65:1d:43:33:
f2:e9:21:f3:82:e9:2f:8f:85:f8:8b:34:58:84:7f:
1a:a8:83:4c:ff:91:b8:71:04:89:d6:48:21:13:b5:
20:10:a6:22:ae:af:6c:46:5e:05:a3:0d:f7:53:29:
73:f4:86:ee:21:de:c3:49:4c:ae:ed:d7:de:48:18:
1c:3d:9b:8e:19:e9:29:ab:e9:36:af:28:02:16:c2:
48:fc:f8:21:45:35:60:62:c7:9d:43:53:35:16:81:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:62:90:69:3B:C9:E3:4F:23:A6:9E:D4:24:5A:CB:57:FD:9D:3A:E1
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5f:a4:15:4a:71:1d:41:85:57:d3:f9:07:c6:fb:a2:4c:f3:
9e:7a:6e:46:d2:dc:9d:8f:33:dd:55:18:b4:44:22:56:67:4d:
b8:d3:cd:42:46:5f:d6:a7:d8:1e:78:2b:65:ed:8f:a7:3f:13:
10:d8:5b:1b:a9:da:91:c3:28:3b:73:4b:49:a9:64:01:20:b3:
5d:0d:44:7f:ac:29:ea:f3:ac:23:1b:95:7a:73:35:31:72:13:
45:c1:c0:eb:9a:dc:f8:99:1b:11:90:ac:c1:68:b7:40:f1:f2:
7f:66:95:6b:6d:6c:8a:79:b8:74:9c:b9:ad:7b:a9:e0:29:a9:
e6:2a:60:ea:a3:cd:7b:09:a1:a1:62:5f:f8:7d:95:09:72:f2:
f9:e0:13:22:cd:8b:69:53:5a:a2:1a:b1:54:8e:d2:8a:5c:a8:
ac:b6:8e:04:46:bc:0e:56:d7:94:f1:1a:96:bd:3b:bd:2e:cc:
83:cd:56:23:df:95:15:8b:b1:1b:9c:83:58:bd:2f:ab:cd:d1:
09:03:b8:d7:14:2f:21:4e:95:11:0e:59:03:36:a4:f9:37:ad:
cd:11:9a:fa:7d:62:70:3b:78:99:3c:3d:64:ef:d4:70:a1:20:
1d:d8:35:24:e4:27:34:c8:06:c5:d9:2b:4a:bf:b3:ef:e3:1b:
e7:c6:77:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/WpZexqXwBgsTfjoCGJa5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzEzNzEwNmMxYTQ2YWVhMDdjMjRiMTE3MjlmZDdkMjE2
YTI0ZjUwHhcNMjYwNjEzMDUwMDQ1WhcNMjYwNjE0MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg1MzYyOTA2OTNiYzllMzRmMjNhNjllZDQyNDVhY2I1N2ZkOWQzYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QeRiEMKL7ahKe/NTqYSKUyEiipv
mYrwm94QLtBXler1FF3no4rcULSMXhtaD38WSSgCsxiO0TrxiXO/DywGHEOWZcs8
JnfbdqQ7I2Bg53x+oj2btqdln7IPKJSDV0+kryDAV87FHda6cwDVjuiIpa1iVD3A
tpBYwHKEN62LmPHfRb3MwPMA9W3CjdYldCO7BDZRgm1eBhfEyP/v1KkCSmUdQzPy
6SHzgukvj4X4izRYhH8aqINM/5G4cQSJ1kghE7UgEKYirq9sRl4Fow33Uylz9Ibu
Id7DSUyu7dfeSBgcPZuOGekpq+k2rygCFsJI/PghRTVgYsedQ1M1FoGvuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNikGk7yeNPI6ae1CRay1f9nTrhMB8GA1UdIwQY
MBaAFOLBNxBsGkauoHwksRcp/X0haiT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODIt
OWNhZjI1YTQ5OWQ3LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODItOWNhZjI1YTQ5OWQ3
LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIV+kFUpx
HUGFV9P5B8b7okzznnpuRtLcnY8z3VUYtEQiVmdNuNPNQkZf1qfYHngrZe2Ppz8T
ENhbG6nakcMoO3NLSalkASCzXQ1Ef6wp6vOsIxuVenM1MXITRcHA65rc+JkbEZCs
wWi3QPHyf2aVa21sinm4dJy5rXup4Cmp5ipg6qPNewmhoWJf+H2VCXLy+eATIs2L
aVNaohqxVI7SilyorLaOBEa8DlbXlPEalr07vS7Mg81WI9+VFYuxG5yDWL0vq83R
CQO41xQvIU6VEQ5ZAzak+TetzRGa+n1icDt4mTw9ZO/UcKEgHdg1JOQnNMgGxdkr
Sr+z7+Mb58Z3Rg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:31:51 2026 by rpki-client