Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: n7KXUWdAJp+hVAr9QSu5BsEWn0Q/h1DhEnjUnw1EFak=
Subject key identifier: 66:8E:A5:AE:60:5C:19:0E:C3:EA:00:F7:BC:73:B6:8B:66:0A:11:56
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 019EBE111AE03614D0C9E1C6C8C8EB58DCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 1214
Signing time: Fri 12 Jun 2026 23:00:52 +0000
Manifest this update: Fri 12 Jun 2026 23:00:52 +0000
Manifest next update: Sat 13 Jun 2026 23:00:52 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: t2yRSu5k1rPn26B0vL6CAcSm2rWuNIMlMktilDdOBPQ=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:1a:e0:36:14:d0:c9:e1:c6:c8:c8:eb:58:dc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Jun 12 23:00:52 2026 GMT
Not After : Jun 13 23:00:52 2026 GMT
Subject: CN=668ea5ae605c190ec3ea00f7bc73b68b660a1156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:ac:c8:fa:18:1f:1b:70:d0:6d:6d:27:05:
b2:be:97:6a:24:ce:16:68:79:8e:8d:c2:ea:3e:3a:
e2:71:60:0b:cc:4e:6a:d7:13:34:a8:70:89:0f:71:
31:89:6b:28:9a:5b:54:21:c0:7f:0d:da:19:7c:f3:
ea:76:cb:5b:8d:b5:01:38:8b:e6:38:ed:1a:b2:c8:
cd:71:90:b6:5c:fc:62:93:ce:0d:64:a6:6a:46:82:
24:5a:ef:b5:16:5e:48:6d:9c:c0:1c:0f:5d:35:77:
01:41:c4:11:a6:d4:74:bd:af:7b:60:ee:ca:16:49:
9f:b2:63:f9:89:7b:ef:12:69:0d:90:3c:b7:cf:fa:
aa:3d:0d:23:a3:2a:25:81:1a:6b:c2:d3:14:8f:d6:
e5:83:d5:e1:af:0c:21:e2:e6:b8:ca:0b:5d:05:89:
3f:03:23:32:c0:8a:52:dc:61:51:40:87:17:13:58:
17:bc:b6:30:94:66:72:bc:96:f7:b4:b4:6d:af:67:
cc:dd:f2:35:d5:9e:3c:d1:8d:ce:fc:3a:e4:6a:95:
3c:b5:60:74:50:53:5c:6c:24:c4:39:0e:b6:39:78:
7e:37:20:d9:73:ed:e3:8a:45:09:34:49:e6:48:50:
40:a6:83:7a:20:a3:30:3e:52:d0:a3:36:de:3b:45:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:A5:AE:60:5C:19:0E:C3:EA:00:F7:BC:73:B6:8B:66:0A:11:56
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0c:4f:fb:13:ea:9a:08:16:bc:13:bb:7e:8a:a4:86:8b:63:
5b:2c:2a:82:32:cb:88:1f:d9:a6:54:9f:2a:73:1e:63:88:32:
2c:e2:ff:95:37:2d:15:fd:bf:66:47:3f:60:8b:a4:04:35:d8:
f2:a3:f1:3b:87:1b:30:5c:af:14:fa:c7:57:08:c5:17:82:6c:
e8:e0:1f:1e:7d:8a:1c:33:c1:81:d9:79:c3:de:68:6c:32:b2:
50:9f:18:1a:0e:5a:48:34:97:22:f4:42:bb:3a:2b:e5:5d:70:
23:f2:6e:e9:31:ee:8b:70:0b:6b:81:2f:72:c7:ab:7f:fc:61:
c4:87:c6:0f:71:4e:4d:60:4a:77:7c:0f:d3:51:d7:cf:1b:4b:
35:81:37:97:d1:d3:39:19:50:4f:c3:9e:0f:33:f2:99:b6:ad:
a3:0f:c3:8e:9e:55:0a:fd:a6:30:2c:d1:72:45:46:0f:be:11:
e9:27:0d:ca:37:65:67:b8:8d:65:df:7e:c6:c9:1f:98:01:97:
9a:1b:d7:7d:6e:1b:38:d5:63:c6:1f:d9:d4:91:f8:3a:ff:7b:
ac:14:ab:82:f3:c0:91:89:cf:bd:70:03:94:fb:7b:f4:f0:92:
5f:18:56:b9:2f:0c:67:94:59:8c:93:e1:26:e5:e3:de:cf:0b:
f3:76:78:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+ERrgNhTQyeHGyMjrWNysMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODM0NDI5Nzc1ZTY1NTVlNTc0MjQ5MjI4NjI1NGIxZGE5
ZjE5MDMwHhcNMjYwNjEyMjMwMDUyWhcNMjYwNjEzMjMwMDUyWjAzMTEwLwYDVQQD
Eyg2NjhlYTVhZTYwNWMxOTBlYzNlYTAwZjdiYzczYjY4YjY2MGExMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr6syPoYHxtw0G1tJwWyvpdqJM4W
aHmOjcLqPjricWALzE5q1xM0qHCJD3ExiWsomltUIcB/DdoZfPPqdstbjbUBOIvm
OO0assjNcZC2XPxik84NZKZqRoIkWu+1Fl5IbZzAHA9dNXcBQcQRptR0va97YO7K
FkmfsmP5iXvvEmkNkDy3z/qqPQ0joyolgRprwtMUj9blg9Xhrwwh4ua4ygtdBYk/
AyMywIpS3GFRQIcXE1gXvLYwlGZyvJb3tLRtr2fM3fI11Z480Y3O/DrkapU8tWB0
UFNcbCTEOQ62OXh+NyDZc+3jikUJNEnmSFBApoN6IKMwPlLQozbeO0WE6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaOpa5gXBkOw+oA97xztotmChFWMB8GA1UdIwQY
MBaAFOKDRCl3XmVV5XQkkihiVLHanxkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2Mt
ZWE5NzY2NWMxM2RmLzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2MtZWE5NzY2NWMxM2Rm
LzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAxP+xPq
mggWvBO7foqkhotjWywqgjLLiB/ZplSfKnMeY4gyLOL/lTctFf2/Zkc/YIukBDXY
8qPxO4cbMFyvFPrHVwjFF4Js6OAfHn2KHDPBgdl5w95obDKyUJ8YGg5aSDSXIvRC
uzor5V1wI/Ju6THui3ALa4Evcserf/xhxIfGD3FOTWBKd3wP01HXzxtLNYE3l9HT
ORlQT8OeDzPymbatow/Djp5VCv2mMCzRckVGD74R6ScNyjdlZ7iNZd9+xskfmAGX
mhvXfW4bONVjxh/Z1JH4Ov97rBSrgvPAkYnPvXADlPt79PCSXxhWuS8MZ5RZjJPh
JuXj3s8L83Z4LA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:48:41 2026 by rpki-client