Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: 6xknFqQMV/KUAC9PbohwDh+nywtNtjGgZmvQrSOHTL4=
Subject key identifier: 21:5F:4E:D4:84:E4:76:C4:A0:0F:09:61:D0:CE:CF:41:87:78:4E:1D
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 019EC2C979038BC3C4152B3220DE58CE3917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 0BD1
Signing time: Sat 13 Jun 2026 21:00:43 +0000
Manifest this update: Sat 13 Jun 2026 21:00:43 +0000
Manifest next update: Sun 14 Jun 2026 21:00:43 +0000
Files and hashes: 1: 1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa (hash: sbcGPB93z3YNWrVB4YHHakteB4jeVAtpbXTGFYuXZTU=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: oWiBrGKWZJHS2wAQmk39hggGnvtYSc6W/Q7Go7VgDrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:79:03:8b:c3:c4:15:2b:32:20:de:58:ce:39:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Jun 13 21:00:43 2026 GMT
Not After : Jun 14 21:00:43 2026 GMT
Subject: CN=215f4ed484e476c4a00f0961d0cecf4187784e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ff:cc:a7:8a:3c:b0:4b:45:9c:00:ee:91:ce:
03:60:c8:57:ca:1d:0d:26:a9:ba:88:9c:89:2e:4e:
e4:a5:7a:20:4a:61:04:e6:70:c7:41:bb:e6:30:82:
0a:d1:26:4a:16:2b:63:d4:2b:e3:f0:9a:51:d5:97:
7e:fa:5f:50:55:47:57:57:81:ba:61:6f:33:60:a1:
34:60:b1:f7:2f:fb:11:1d:cc:36:03:05:65:24:4e:
2d:6e:e7:0e:44:cf:63:13:95:c4:f0:68:5c:7b:31:
54:61:8e:d8:2b:fe:9d:fa:18:33:fc:6e:06:d1:17:
4a:6d:bb:b5:b7:24:c9:ef:65:79:2c:71:cf:e5:29:
a2:9b:09:e6:3a:48:9a:af:a2:80:46:26:46:f5:71:
ef:8d:a6:02:d3:5c:3f:c9:bb:e7:1f:6b:1d:82:9a:
76:c4:55:6d:66:77:a3:ce:a5:72:be:c2:17:e9:73:
e2:25:82:05:67:78:50:1d:e8:b5:29:a3:52:65:31:
2c:8f:e4:ca:6b:01:45:9f:e7:a8:db:b4:3c:14:cd:
1d:96:ae:4f:bd:6d:fe:1c:99:a8:a7:d5:f0:07:eb:
1a:71:ce:55:ad:73:67:73:f0:b1:d1:a8:35:a5:4a:
c8:e0:5f:e2:21:82:f8:d6:ef:65:bd:70:5d:fd:48:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5F:4E:D4:84:E4:76:C4:A0:0F:09:61:D0:CE:CF:41:87:78:4E:1D
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f0:04:07:23:46:0a:74:58:93:d4:44:03:55:10:f4:f9:07:
b0:03:8d:c5:b0:4d:82:91:d5:47:79:17:f6:a2:45:49:3c:28:
ad:d4:77:7d:60:00:1c:92:bd:6e:c0:10:7e:f4:38:0b:f0:48:
cd:11:98:b4:65:bd:4d:3c:ba:bd:12:bc:72:df:a2:95:14:c1:
fa:38:c6:af:31:57:92:a1:d7:e3:dc:36:00:67:30:8a:d8:80:
be:ad:24:63:e3:7e:c1:a1:69:7e:6e:50:d1:82:c8:b7:57:6d:
20:5c:28:a0:a1:d0:f2:70:73:61:4c:21:13:f1:72:5f:d8:6a:
40:8e:d8:28:37:bc:3a:5b:4b:30:74:0c:1e:84:4c:dd:e0:87:
15:52:6b:40:e6:00:0e:d3:5d:19:42:68:98:b7:24:7b:24:83:
ac:0a:a1:46:fc:59:66:14:1a:e9:36:73:41:2a:70:61:f3:d8:
93:9e:3a:d1:4e:9d:88:1f:7e:ad:7f:d1:71:a4:08:60:70:4d:
4b:ed:bb:6a:6d:d7:a8:4c:f3:73:35:ad:14:dc:f8:e8:e2:59:
88:81:1d:7e:f6:a0:ec:d3:cc:06:3f:39:22:f6:f4:24:b3:62:
bd:63:fa:af:0e:75:79:8d:c8:67:65:1a:c2:8c:71:2f:1b:2b:
8b:af:cb:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyXkDi8PEFSsyIN5YzjkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNzhjNGFhYTAyMWJlZDhiOTI2ZTM1OTFmZGY1MGM4ZGY2
YmMxNzIwHhcNMjYwNjEzMjEwMDQzWhcNMjYwNjE0MjEwMDQzWjAzMTEwLwYDVQQD
EygyMTVmNGVkNDg0ZTQ3NmM0YTAwZjA5NjFkMGNlY2Y0MTg3Nzg0ZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7//Mp4o8sEtFnADukc4DYMhXyh0N
Jqm6iJyJLk7kpXogSmEE5nDHQbvmMIIK0SZKFitj1Cvj8JpR1Zd++l9QVUdXV4G6
YW8zYKE0YLH3L/sRHcw2AwVlJE4tbucORM9jE5XE8GhcezFUYY7YK/6d+hgz/G4G
0RdKbbu1tyTJ72V5LHHP5SmimwnmOkiar6KARiZG9XHvjaYC01w/ybvnH2sdgpp2
xFVtZnejzqVyvsIX6XPiJYIFZ3hQHei1KaNSZTEsj+TKawFFn+eo27Q8FM0dlq5P
vW3+HJmop9XwB+sacc5VrXNnc/Cx0ag1pUrI4F/iIYL41u9lvXBd/UiYeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFfTtSE5HbEoA8JYdDOz0GHeE4dMB8GA1UdIwQY
MBaAFOJ4xKqgIb7YuSbjWR/fUMjfa8FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYt
ZmM0MzM5MTk4OGY3LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jMDY5MzctOTNiMy00NDJlLTg2NzYtZmM0MzM5MTk4OGY3
LzEvNG5qRXFxQWh2dGk1SnVOWkg5OVF5Tjlyd1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPAEByNG
CnRYk9REA1UQ9PkHsAONxbBNgpHVR3kX9qJFSTwordR3fWAAHJK9bsAQfvQ4C/BI
zRGYtGW9TTy6vRK8ct+ilRTB+jjGrzFXkqHX49w2AGcwitiAvq0kY+N+waFpfm5Q
0YLIt1dtIFwooKHQ8nBzYUwhE/FyX9hqQI7YKDe8OltLMHQMHoRM3eCHFVJrQOYA
DtNdGUJomLckeySDrAqhRvxZZhQa6TZzQSpwYfPYk5460U6diB9+rX/RcaQIYHBN
S+27am3XqEzzczWtFNz46OJZiIEdfvag7NPMBj85Ivb0JLNivWP6rw51eY3IZ2Ua
woxxLxsri6/LbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:34:20 2026 by rpki-client