Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: 3ByPsCbayI5PIqKSh4E3MRzcLSASdOtkPjWI1rLidfw=
Subject key identifier: 65:0D:95:A8:9A:B3:48:B6:7A:0D:F4:CC:67:51:0E:F1:7D:03:8A:10
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019EBDA362FA19F66584BB32498B8B53BC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 09BF
Signing time: Fri 12 Jun 2026 21:01:01 +0000
Manifest this update: Fri 12 Jun 2026 21:01:01 +0000
Manifest next update: Sat 13 Jun 2026 21:01:01 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: SHL87FE41E7rgz+f5Zek+NuCC27EFf0oxFCx+zA/X+M=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:62:fa:19:f6:65:84:bb:32:49:8b:8b:53:bc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Jun 12 21:01:01 2026 GMT
Not After : Jun 13 21:01:01 2026 GMT
Subject: CN=650d95a89ab348b67a0df4cc67510ef17d038a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9d:d0:49:66:fd:0d:b0:81:b8:4f:af:b0:e4:
26:d2:76:e2:c5:4c:59:9f:6d:e4:cb:65:84:4e:56:
57:39:0f:78:cb:1f:de:eb:59:06:22:ca:38:9c:73:
5e:17:04:18:48:25:39:49:25:1e:d3:e1:3e:95:04:
00:ac:f5:10:d9:bd:b0:23:c5:b0:cf:e8:fa:1f:ae:
96:fb:a8:5e:31:a4:f2:bb:8e:b2:ad:5f:8b:fd:a2:
49:02:43:79:82:8d:da:aa:19:c0:f8:45:2d:39:e8:
ba:92:66:65:67:21:9c:05:4b:b8:3d:a6:52:9b:fa:
cc:29:09:38:2c:05:6a:23:c9:7b:10:64:fd:68:42:
7d:1a:25:c7:35:bf:21:af:ad:1d:35:48:9d:b5:f4:
84:6d:5c:5c:c3:fb:70:86:ed:06:b6:61:0e:95:4e:
8f:ca:81:1d:69:2b:95:7e:81:63:87:63:5f:fe:ad:
6d:c2:ab:81:57:62:48:43:54:b0:9c:84:b7:70:83:
3b:a0:ac:21:fd:0a:c0:0c:12:21:eb:09:6a:7a:48:
c1:00:3d:b8:ec:d1:e4:80:70:62:0c:34:e9:1f:7a:
b2:5d:53:32:11:f7:80:45:25:8e:08:31:53:df:0d:
07:e4:3d:1a:3a:07:87:f0:ed:e1:7a:02:2c:12:e3:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0D:95:A8:9A:B3:48:B6:7A:0D:F4:CC:67:51:0E:F1:7D:03:8A:10
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4d:87:c3:7c:c6:e0:b1:21:87:37:6a:b6:f7:01:77:14:3b:
cf:4e:e1:14:1b:c9:c5:e7:cc:31:50:ca:4f:3e:91:f3:2a:73:
bc:ac:84:16:df:e3:f6:54:4d:52:bb:0c:e5:fb:08:e1:c9:ff:
94:22:83:3a:a5:dc:97:4b:e5:1f:23:bd:26:e0:58:af:dc:1c:
a8:74:66:18:86:97:0f:ef:2f:6b:a4:b4:a2:24:64:a0:4c:66:
96:ab:a7:2f:c0:e8:42:e0:4a:e5:ab:65:01:6a:25:2e:3e:b4:
fa:17:6c:f2:c9:b2:6d:3c:1c:cb:fa:bc:61:06:96:b5:ec:3b:
cb:b2:36:41:d5:a3:25:15:51:2f:27:70:e9:b5:c7:43:03:e4:
59:56:ca:34:27:93:ca:80:17:98:9a:fc:2a:db:bc:80:59:3c:
c8:04:9b:8e:6d:a3:75:44:6b:37:20:0a:fb:e4:2d:b5:90:e4:
12:f2:00:8d:55:f6:7a:0c:0d:65:f6:1e:96:dd:1f:2f:9d:cc:
d9:85:25:c0:96:f7:78:17:16:3f:d5:d0:67:96:1f:58:27:8f:
f5:81:db:62:11:67:8a:8b:37:46:e2:91:fc:f3:f2:38:d9:cc:
61:b9:79:c0:87:37:54:80:80:8d:3f:85:5a:0b:2a:10:0f:6a:
b6:93:ed:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:33 2026 by rpki-client