Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: 0ZIh/QeF/85ug31ViVjmJdmENUbNYJ/UrF35Ubhfe/Y=
Subject key identifier: 4F:7F:DF:E2:D0:E0:25:0D:E1:D5:8E:5F:71:03:0F:5A:6C:B3:D2:F6
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 019EBDD9D2E7450BA5AE4D8506793B456DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 11C7
Signing time: Fri 12 Jun 2026 22:00:29 +0000
Manifest this update: Fri 12 Jun 2026 22:00:29 +0000
Manifest next update: Sat 13 Jun 2026 22:00:29 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: dWY5bRla18HGonxcoSR+swtGenk+rdq0RRyq96Af5R8=)
2: 6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa (hash: LkG1rsHegbWJdLC+vukY1wOXCMcnkOUFAcxz3/K326I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:d2:e7:45:0b:a5:ae:4d:85:06:79:3b:45:6d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Jun 12 22:00:29 2026 GMT
Not After : Jun 13 22:00:29 2026 GMT
Subject: CN=4f7fdfe2d0e0250de1d58e5f71030f5a6cb3d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:b4:92:1a:70:b3:56:bd:7f:6c:ee:6d:0c:
f0:66:8a:25:39:a9:07:01:50:55:89:1e:a4:ca:d4:
9d:79:3c:53:d2:d6:09:44:c3:9a:bb:5f:d0:fb:10:
ef:06:59:1e:a8:4b:a4:88:f7:3d:19:b9:9f:78:1a:
88:7b:dc:b8:67:2a:6a:4c:87:ca:4a:c4:bf:4a:42:
d5:2d:25:ac:2d:49:8c:49:5e:55:9e:8a:d0:c2:f8:
22:e5:0f:40:0a:54:4f:f4:6b:f5:ee:cd:f6:b0:4c:
f5:61:45:14:f3:e0:d3:6b:0b:67:48:4c:d2:32:91:
e8:9a:0a:24:7d:5d:7d:40:95:62:f6:d9:7f:70:ae:
80:17:35:a6:7e:cf:bd:88:d5:0f:95:60:6e:cc:e8:
8f:b5:fa:f2:fe:75:48:ec:fa:7f:28:cd:14:d9:06:
56:e3:51:79:f5:96:31:e1:4d:45:c1:39:97:95:e7:
59:20:e0:b7:e3:6a:d7:7a:f3:3e:b2:44:f1:98:db:
04:d6:df:e5:58:e6:a6:f7:d0:cd:13:d4:a8:fb:aa:
58:94:73:e6:e7:55:93:8a:fa:57:17:0a:e4:df:5f:
b5:af:02:a9:7e:a8:f6:a5:f1:d7:8a:ad:d6:f6:7f:
8a:9e:15:73:b3:ee:44:a6:02:bb:a5:c9:03:53:1c:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:DF:E2:D0:E0:25:0D:E1:D5:8E:5F:71:03:0F:5A:6C:B3:D2:F6
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3a:39:31:b4:ee:47:14:4b:2d:31:e4:60:32:78:16:25:83:
96:dd:07:cc:85:23:c9:cc:81:a5:5f:75:cb:ec:c7:65:af:2f:
bd:e9:e3:bc:bc:c2:2f:f4:95:d6:43:9e:50:44:7d:0f:87:17:
1a:04:58:49:77:7a:f1:19:4f:27:22:f2:3b:7f:30:ff:73:59:
2b:3b:87:a9:f5:24:61:ed:9c:d3:5c:92:9b:85:db:c8:aa:64:
c4:51:1d:1b:5e:6c:5d:9e:00:20:bf:76:cb:44:42:c4:76:6c:
47:cd:b8:04:b0:cb:20:c7:6d:63:83:a3:49:0b:5e:03:3a:a5:
6d:c1:0b:fa:a9:d1:52:9b:f1:3a:88:ce:66:17:3d:b7:0a:2a:
92:2b:3f:23:de:12:43:e1:36:a7:b1:dd:c0:b6:33:8a:9e:e7:
39:9f:25:a7:3f:1b:ea:a3:74:3c:6b:fd:cc:8c:67:d7:f3:2b:
41:b9:00:38:3b:42:97:e8:54:23:2d:1b:b1:0d:f3:ed:67:9b:
9f:eb:05:57:97:79:68:95:d8:8b:8c:90:ee:14:15:77:1c:d0:
96:f5:97:8b:fe:28:27:ac:da:64:77:8c:bc:e1:74:82:c4:ed:
30:c4:eb:81:35:89:bd:2d:f2:d3:4e:87:71:4d:4d:7a:ec:1b:
7b:cf:bf:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692dLnRQulrk2FBnk7RW3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjE5Y2M1ZTM4ZDhmOWMxZDY1NDcxNzc2NjVmODkyMTFk
ZWM4OTkwHhcNMjYwNjEyMjIwMDI5WhcNMjYwNjEzMjIwMDI5WjAzMTEwLwYDVQQD
Eyg0ZjdmZGZlMmQwZTAyNTBkZTFkNThlNWY3MTAzMGY1YTZjYjNkMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBa0khpws1a9f2zubQzwZoolOakH
AVBViR6kytSdeTxT0tYJRMOau1/Q+xDvBlkeqEukiPc9GbmfeBqIe9y4ZypqTIfK
SsS/SkLVLSWsLUmMSV5VnorQwvgi5Q9AClRP9Gv17s32sEz1YUUU8+DTawtnSEzS
MpHomgokfV19QJVi9tl/cK6AFzWmfs+9iNUPlWBuzOiPtfry/nVI7Pp/KM0U2QZW
41F59ZYx4U1FwTmXledZIOC342rXevM+skTxmNsE1t/lWOam99DNE9So+6pYlHPm
51WTivpXFwrk31+1rwKpfqj2pfHXiq3W9n+KnhVzs+5EpgK7pckDUxwxIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9/3+LQ4CUN4dWOX3EDD1pss9L2MB8GA1UdIwQY
MBaAFOPxnMXjjY+cHWVHF3Zl+JIR3siZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUt
YTRiZTE3MmM3NmJhLzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUtYTRiZTE3MmM3NmJh
LzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizo5MbTu
RxRLLTHkYDJ4FiWDlt0HzIUjycyBpV91y+zHZa8vvenjvLzCL/SV1kOeUER9D4cX
GgRYSXd68RlPJyLyO38w/3NZKzuHqfUkYe2c01ySm4XbyKpkxFEdG15sXZ4AIL92
y0RCxHZsR824BLDLIMdtY4OjSQteAzqlbcEL+qnRUpvxOojOZhc9twoqkis/I94S
Q+E2p7HdwLYzip7nOZ8lpz8b6qN0PGv9zIxn1/MrQbkAODtCl+hUIy0bsQ3z7Web
n+sFV5d5aJXYi4yQ7hQVdxzQlvWXi/4oJ6zaZHeMvOF0gsTtMMTrgTWJvS3y006H
cU1Neuwbe8+/cg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:29 2026 by rpki-client