Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.mft (raw, json)
Hash identifier: wR0sQ9ktNE6pb9fdhW3KEVyb+XHk4HWFxvB6eOR04S4=
Subject key identifier: AB:69:80:BE:71:47:C8:46:EB:48:9C:2E:F0:17:81:DF:F5:6D:53:DB
Authority key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Certificate issuer: /CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Certificate serial: 019EBE7EB75342C300DA875E74B45C5B71E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
Manifest number: 0EA3
Signing time: Sat 13 Jun 2026 01:00:35 +0000
Manifest this update: Sat 13 Jun 2026 01:00:35 +0000
Manifest next update: Sun 14 Jun 2026 01:00:35 +0000
Files and hashes: 1: 4HDNq3OhLa82gGsOFgLI2vuQk7s.crl (hash: HtuALyI6NZ0EXtKMnL7BiYJewRFxOoKaX5+EXvuHQYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:b7:53:42:c3:00:da:87:5e:74:b4:5c:5b:71:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Validity
Not Before: Jun 13 01:00:35 2026 GMT
Not After : Jun 14 01:00:35 2026 GMT
Subject: CN=ab6980be7147c846eb489c2ef01781dff56d53db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:2e:e8:37:60:ff:a0:f9:d2:55:7e:41:23:
77:24:84:ae:23:95:d4:36:be:1d:0a:d1:ff:89:e8:
7a:95:97:03:e5:41:74:3e:18:b6:fa:b2:ef:7e:ed:
4e:78:0a:6b:ba:f0:54:73:97:2d:d6:56:0a:cf:0b:
de:77:89:45:3e:d4:31:64:1f:c0:f5:21:80:18:80:
40:ff:89:17:3f:d7:23:d6:d1:cf:26:fb:5d:a5:de:
a3:e4:30:71:6c:de:18:98:47:50:54:9c:86:94:5b:
83:98:42:12:36:40:3d:de:2a:6f:45:5d:f2:00:17:
55:11:73:b5:df:36:12:d3:e6:fc:6d:c0:7b:32:32:
1f:15:46:13:e9:c8:8c:a6:43:50:3e:04:87:f4:6f:
0f:18:71:5d:6c:33:9c:1a:27:bc:55:08:b9:95:f2:
18:9e:86:66:87:ac:e4:06:7a:89:b9:d0:2e:a2:d2:
d0:2c:cf:e2:15:d0:a4:0e:68:2c:a8:51:ab:c6:32:
3b:57:dc:a1:b5:4c:d4:27:e4:7b:f5:4d:31:8a:7f:
88:e6:fa:40:10:79:89:ab:94:d6:e0:a2:0e:c5:f2:
1a:c1:03:86:db:a5:5d:6a:31:ed:0e:1e:64:54:ff:
61:c3:07:6f:34:dc:51:71:07:b2:3c:89:53:ae:44:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:80:BE:71:47:C8:46:EB:48:9C:2E:F0:17:81:DF:F5:6D:53:DB
X509v3 Authority Key Identifier:
keyid:E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d2:c7:06:2a:9b:9c:0f:08:a0:7f:1d:21:0a:66:28:a9:3a:
67:50:3d:56:a2:d8:be:6c:2f:91:d3:d9:0c:4a:4b:1c:18:77:
33:06:d5:d4:fc:a7:28:53:32:96:e8:3f:58:66:9a:1c:2c:36:
c5:9f:73:d5:4f:18:89:36:08:74:95:76:ca:32:c1:92:a3:2c:
24:68:af:35:06:e8:2d:1d:f2:e4:b3:d9:0b:e4:33:07:a3:21:
1a:fc:5d:3b:e3:6a:20:07:7d:97:e3:b3:dc:c6:e2:c4:09:a4:
87:f2:0d:a1:41:af:c3:a0:c7:7f:63:79:5b:2e:a4:f1:ce:34:
51:74:38:d2:c2:b0:cd:50:61:4e:e1:28:2d:85:c4:9d:4a:a5:
6d:4b:56:c1:1e:a1:61:68:83:f6:c1:9a:36:57:2b:fc:9e:a0:
78:34:b2:aa:34:a1:de:aa:36:c5:0c:88:ec:df:e0:35:2e:ea:
38:07:13:fc:18:f1:76:3d:a7:67:67:fb:97:9e:b9:60:29:10:
f9:80:8a:3f:7b:4c:51:04:9e:f0:58:1f:a0:67:0d:42:35:30:
78:20:34:75:fc:a7:5d:3e:bc:82:b7:da:57:36:eb:12:f9:d2:
e4:df:7d:c7:69:e9:4e:1b:58:02:9f:05:46:8d:75:e2:a3:00:
87:7f:9e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+frdTQsMA2odedLRcW3HhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzBjZGFiNzNhMTJkYWYzNjgwNmIwZTE2MDJjOGRhZmI5
MDkzYmIwHhcNMjYwNjEzMDEwMDM1WhcNMjYwNjE0MDEwMDM1WjAzMTEwLwYDVQQD
EyhhYjY5ODBiZTcxNDdjODQ2ZWI0ODljMmVmMDE3ODFkZmY1NmQ1M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqycu6Ddg/6D50lV+QSN3JISuI5XU
Nr4dCtH/ieh6lZcD5UF0Phi2+rLvfu1OeApruvBUc5ct1lYKzwved4lFPtQxZB/A
9SGAGIBA/4kXP9cj1tHPJvtdpd6j5DBxbN4YmEdQVJyGlFuDmEISNkA93ipvRV3y
ABdVEXO13zYS0+b8bcB7MjIfFUYT6ciMpkNQPgSH9G8PGHFdbDOcGie8VQi5lfIY
noZmh6zkBnqJudAuotLQLM/iFdCkDmgsqFGrxjI7V9yhtUzUJ+R79U0xin+I5vpA
EHmJq5TW4KIOxfIawQOG26VdajHtDh5kVP9hwwdvNNxRcQeyPIlTrkRaMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtpgL5xR8hG60icLvAXgd/1bVPbMB8GA1UdIwQY
MBaAFOBwzatzoS2vNoBrDhYCyNr7kJO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhETnEzT2hMYTgyZ0dzT0ZnTEkydnVRazdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZTAxY2EtMmNjZi00OTEyLTkxNGIt
OTE2ODgyNmNkMzU1LzEvNEhETnEzT2hMYTgyZ0dzT0ZnTEkydnVRazdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84ZTAxY2EtMmNjZi00OTEyLTkxNGItOTE2ODgyNmNkMzU1
LzEvNEhETnEzT2hMYTgyZ0dzT0ZnTEkydnVRazdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9LHBiqb
nA8IoH8dIQpmKKk6Z1A9VqLYvmwvkdPZDEpLHBh3MwbV1PynKFMylug/WGaaHCw2
xZ9z1U8YiTYIdJV2yjLBkqMsJGivNQboLR3y5LPZC+QzB6MhGvxdO+NqIAd9l+Oz
3MbixAmkh/INoUGvw6DHf2N5Wy6k8c40UXQ40sKwzVBhTuEoLYXEnUqlbUtWwR6h
YWiD9sGaNlcr/J6geDSyqjSh3qo2xQyI7N/gNS7qOAcT/Bjxdj2nZ2f7l565YCkQ
+YCKP3tMUQSe8FgfoGcNQjUweCA0dfynXT68grfaVzbrEvnS5N99x2npThtYAp8F
Ro114qMAh3+ePQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:17 2026 by rpki-client