Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: F2cqvTLaDSN54sIYC2pIxZ5FBRAQ76m2U049VtNWYMI=
Subject key identifier: 55:53:0A:D4:C4:28:B3:C4:CB:58:48:92:A4:76:10:EF:33:F9:05:BB
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019EBF912329EEBE45212A4FAE52F14FDFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 14B6
Signing time: Sat 13 Jun 2026 06:00:20 +0000
Manifest this update: Sat 13 Jun 2026 06:00:20 +0000
Manifest next update: Sun 14 Jun 2026 06:00:20 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: ZBWbLbJeSb60DsqetF1QMitWDYmSNvWWtriu8YDXzwY=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:23:29:ee:be:45:21:2a:4f:ae:52:f1:4f:df:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Jun 13 06:00:20 2026 GMT
Not After : Jun 14 06:00:20 2026 GMT
Subject: CN=55530ad4c428b3c4cb584892a47610ef33f905bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:8d:c5:01:a6:f2:18:0a:44:33:43:f7:ef:
5e:7d:45:df:42:45:64:01:e8:cb:23:4b:20:4e:e4:
bd:91:28:55:73:8b:0b:12:52:31:6d:c4:52:4e:ec:
a3:c4:a5:8f:f4:34:0a:db:09:9a:d6:85:bd:61:e3:
37:47:95:a1:d6:98:31:f9:0a:6f:e5:cf:91:17:e4:
80:93:e3:30:f5:06:d2:b2:8f:69:cd:7a:83:50:4d:
e1:da:16:de:2c:e0:e7:05:45:00:f9:0e:cb:ea:a1:
ee:5a:5a:9f:fc:ca:37:b0:a9:4d:69:86:f3:73:64:
5f:bc:c4:5b:57:73:70:90:79:26:bf:59:31:c8:d0:
9f:25:b1:0c:13:96:52:ff:d1:b9:e0:8a:d6:68:dc:
e2:ad:e4:1b:36:b3:1b:7f:d4:be:84:92:23:c6:94:
6f:2f:1d:9a:97:f3:2a:da:52:de:ba:e3:60:1d:a1:
9a:1b:8c:31:f0:4b:1c:9d:23:00:48:2f:ee:5d:28:
53:35:59:7b:04:11:ae:36:85:7c:af:d3:fb:c4:ae:
9f:c4:6b:ea:75:14:47:5b:fc:9d:f4:49:74:4e:02:
a3:34:09:88:83:77:b5:4b:0f:bf:36:2e:98:4c:94:
5f:78:5d:6c:fc:7b:5b:4d:f9:8b:6e:3b:30:91:d4:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:53:0A:D4:C4:28:B3:C4:CB:58:48:92:A4:76:10:EF:33:F9:05:BB
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:78:91:8d:53:3e:57:61:57:5e:f1:2f:77:de:65:37:c5:0d:
b7:1d:2f:7b:75:5c:f3:6d:6c:d8:24:57:d1:06:ec:79:3f:b2:
f5:2e:0d:a4:b9:23:41:75:a4:89:89:c7:6e:ad:a1:a4:eb:15:
70:3b:15:00:e0:21:b3:e3:04:e0:34:2d:61:0f:28:b1:c2:36:
a7:ee:c4:9e:64:5a:58:cb:bf:1b:7c:66:12:4d:a6:a5:7d:90:
8f:87:07:1a:f3:26:a5:23:5c:28:b9:5c:db:4e:72:c8:9f:fe:
3f:57:09:f9:f5:41:40:aa:d3:dd:b7:80:bc:4f:09:ce:27:85:
c3:07:62:4e:e8:86:cb:f6:8a:2c:af:12:44:7d:c8:76:e9:0b:
75:43:a8:45:cd:e0:c1:90:3f:85:2f:23:0f:d0:6b:d3:6a:dc:
71:94:ee:a9:98:21:ee:a1:f6:c4:ab:b9:31:45:a2:a2:e1:95:
4a:e1:e8:51:5e:0e:0f:5b:03:4c:56:2c:a9:db:1c:4f:f2:04:
e9:92:e6:a4:a0:9b:3e:eb:ef:fc:a0:cb:33:09:8d:23:4b:50:
ba:2f:b2:87:ea:6d:78:30:40:38:b1:30:b4:fa:6f:e7:ac:52:
f4:7f:21:15:c5:51:cc:a3:16:09:05:14:62:45:e3:3a:e9:81:
22:8f:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:51 2026 by rpki-client