Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: WR5I8axt+NXttvWdFHSVcbqkma/wqPefyi+WQasRmr0=
Subject key identifier: E2:52:C0:FD:96:47:B1:81:EA:ED:8E:0F:30:36:50:27:FE:87:DD:37
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 019EBDD9C0A0B7EBB81B7C896BDCCC77F8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0E6B
Signing time: Fri 12 Jun 2026 22:00:24 +0000
Manifest this update: Fri 12 Jun 2026 22:00:24 +0000
Manifest next update: Sat 13 Jun 2026 22:00:24 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: aUeDf25Hx4mqbe/nQVQWC7f3RolvQWNjgprWWZrGSj8=)
2: 9WoXYCC1VJqnbGFNUpMF4rAgukA.asa (hash: 4Zq19YZTaukYMmJEdYX0CF4BWbwlExA/FZSk3vxkg/k=)
3: C9aXP0xnVks0GG--bUI7lSn9Og4.roa (hash: 7iquRG4sj7MdDkAUl6cu4d537zzGxzoS3U6EkDKWErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:c0:a0:b7:eb:b8:1b:7c:89:6b:dc:cc:77:f8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Jun 12 22:00:24 2026 GMT
Not After : Jun 13 22:00:24 2026 GMT
Subject: CN=e252c0fd9647b181eaed8e0f30365027fe87dd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:06:45:d2:29:ba:73:af:70:35:d0:cb:51:
98:1e:d6:cf:5c:06:b2:62:80:aa:21:42:c6:eb:61:
7c:2e:bd:b2:cc:ea:af:6f:cc:85:a9:6e:60:8d:f8:
90:a7:4a:fb:65:19:05:16:ed:77:44:e9:8a:70:ef:
93:18:42:b3:22:bc:ef:2e:a0:d0:31:a7:44:64:2f:
52:f6:7b:bc:34:e0:c5:df:88:e9:b4:32:32:ad:30:
92:83:74:50:e7:a3:2d:e1:50:31:f2:47:0f:32:99:
87:76:8e:20:40:11:95:b4:a3:8c:7d:1d:ee:91:02:
72:d0:50:64:e2:1e:32:a6:b0:8b:49:5c:72:af:2f:
47:d6:41:cb:77:32:96:d2:c5:9c:7e:22:24:b3:cf:
a0:2a:43:bb:a4:b4:b5:5b:b1:99:44:f2:71:f0:60:
7c:13:89:48:25:8e:6d:67:89:b6:a9:80:79:2a:e5:
1f:ae:2b:21:10:36:5b:79:e4:ab:fe:6d:1b:9d:8c:
a6:29:78:52:bd:ad:74:28:8f:2f:33:f2:74:39:29:
a0:42:7b:f0:7d:21:10:37:85:7d:7b:18:39:e1:fd:
58:ee:0a:39:7f:22:6c:55:f9:b8:30:9d:22:a8:53:
c9:8e:15:e9:63:d1:77:ee:f6:bd:65:b8:f1:47:6e:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:C0:FD:96:47:B1:81:EA:ED:8E:0F:30:36:50:27:FE:87:DD:37
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:43:10:0e:d0:1c:42:64:67:e2:e6:58:dc:23:44:13:db:32:
3d:bf:64:5b:1d:31:34:e8:9b:30:f8:3b:38:d8:82:14:b1:9c:
10:5f:34:a4:03:4d:64:68:b3:a0:24:f4:55:94:44:71:c3:2e:
30:4e:cf:0b:cf:5b:82:ba:46:ee:ce:00:d4:48:62:9a:b8:2b:
07:c6:3e:73:9c:16:af:24:64:18:8a:e4:2b:57:ff:ec:b0:fd:
82:ad:69:2f:af:f5:d2:7a:5c:1f:e8:25:c1:33:08:4a:ca:70:
aa:54:a4:a5:6b:9a:86:5c:12:fe:0d:d6:cc:a1:2e:f8:9e:07:
1b:73:ff:64:ed:3c:80:7e:2b:b4:7a:36:03:6b:73:be:44:77:
79:25:ad:ec:4c:ea:d9:36:27:11:ac:9a:a4:31:f4:7f:41:52:
70:67:86:f6:ae:e3:9f:fa:8a:d2:ac:61:39:71:9e:81:81:b6:
a1:2e:06:7e:c0:0d:69:62:f1:69:90:29:e2:38:fd:2f:39:7c:
6a:be:8f:aa:91:d3:4d:e2:fa:ba:99:1c:1f:cc:f4:f1:64:ac:
b0:60:04:9f:bf:fa:2b:27:7b:d3:53:59:98:0b:14:ae:36:68:
c1:6d:ee:d4:bb:79:bc:ba:0b:d1:68:56:5f:41:43:09:2d:80:
77:71:86:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ692cCgt+u4G3yJa9zMd/jmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjliMzdlYjYzMDY4NmIxMzI4MzM4NDcxYjUyZGE5NWQy
MDQ5MTEwHhcNMjYwNjEyMjIwMDI0WhcNMjYwNjEzMjIwMDI0WjAzMTEwLwYDVQQD
EyhlMjUyYzBmZDk2NDdiMTgxZWFlZDhlMGYzMDM2NTAyN2ZlODdkZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvMGRdIpunOvcDXQy1GYHtbPXAay
YoCqIULG62F8Lr2yzOqvb8yFqW5gjfiQp0r7ZRkFFu13ROmKcO+TGEKzIrzvLqDQ
MadEZC9S9nu8NODF34jptDIyrTCSg3RQ56Mt4VAx8kcPMpmHdo4gQBGVtKOMfR3u
kQJy0FBk4h4yprCLSVxyry9H1kHLdzKW0sWcfiIks8+gKkO7pLS1W7GZRPJx8GB8
E4lIJY5tZ4m2qYB5KuUfrishEDZbeeSr/m0bnYymKXhSva10KI8vM/J0OSmgQnvw
fSEQN4V9exg54f1Y7go5fyJsVfm4MJ0iqFPJjhXpY9F37va9ZbjxR24yWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJSwP2WR7GB6u2ODzA2UCf+h903MB8GA1UdIwQY
MBaAFOIps362MGhrEygzhHG1LaldIEkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMt
N2RlOGQ4YzJlOTMwLzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMtN2RlOGQ4YzJlOTMw
LzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkMQDtAc
QmRn4uZY3CNEE9syPb9kWx0xNOibMPg7ONiCFLGcEF80pANNZGizoCT0VZREccMu
ME7PC89bgrpG7s4A1EhimrgrB8Y+c5wWryRkGIrkK1f/7LD9gq1pL6/10npcH+gl
wTMISspwqlSkpWuahlwS/g3WzKEu+J4HG3P/ZO08gH4rtHo2A2tzvkR3eSWt7Ezq
2TYnEayapDH0f0FScGeG9q7jn/qK0qxhOXGegYG2oS4GfsANaWLxaZAp4jj9Lzl8
ar6PqpHTTeL6upkcH8z08WSssGAEn7/6Kyd701NZmAsUrjZowW3u1Lt5vLoL0WhW
X0FDCS2Ad3GGzA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:33 2026 by rpki-client