Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: vy76cAZEW9Uv0dQauPWv7Nj+HDiY5DcUHSVNcbrYWKc=
Subject key identifier: D5:8F:9D:C1:E7:83:1D:9E:0C:40:4C:69:57:9D:F7:59:B2:5A:94:09
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 019EBE7F5B0FC65B1A2BF7C818EC0B0198CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 0A32
Signing time: Sat 13 Jun 2026 01:01:17 +0000
Manifest this update: Sat 13 Jun 2026 01:01:17 +0000
Manifest next update: Sun 14 Jun 2026 01:01:17 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: yo0zd+h8J2W4EiTg6Xm3y+uIcEXHcvCZUg3MMt2dRog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:5b:0f:c6:5b:1a:2b:f7:c8:18:ec:0b:01:98:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: Jun 13 01:01:17 2026 GMT
Not After : Jun 14 01:01:17 2026 GMT
Subject: CN=d58f9dc1e7831d9e0c404c69579df759b25a9409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:2a:60:3b:4c:55:0b:9f:c6:76:6f:88:77:
87:c6:db:df:4b:2b:e9:fb:c6:f6:54:ff:b5:8d:c0:
31:15:c8:9a:40:e0:48:c9:2a:1b:a8:c3:b6:52:33:
f4:da:5b:28:d2:13:e7:2f:a2:57:3c:18:3c:17:f1:
7f:7b:54:38:33:4c:ef:8a:fc:41:46:73:c1:26:06:
a6:d1:ff:9a:3d:9a:10:f3:a7:db:0b:3c:97:83:3f:
36:7e:5f:ab:9d:b4:6d:be:89:fa:80:56:46:83:02:
c8:5a:3b:5e:f4:88:04:1a:1c:f0:75:69:25:8b:19:
5b:34:bb:fd:2f:ff:60:0f:56:dd:3e:21:6a:82:9f:
58:5a:68:78:3a:24:14:73:7b:bc:fa:8a:85:31:c0:
1f:c0:9f:26:5d:47:62:ae:c7:7f:4e:d2:37:ac:89:
39:e8:98:5a:55:9c:6d:19:4c:a7:33:03:db:e0:5e:
06:47:84:ec:ea:7f:64:e4:b4:b0:6b:74:13:46:02:
a6:e1:76:08:6b:5c:c3:8f:51:d7:99:a9:7f:29:29:
26:d4:07:b2:52:de:78:26:35:cc:e9:45:0c:8a:2e:
dd:33:5d:1f:a6:6e:08:ef:75:5a:7c:4e:3f:e6:53:
6d:63:8b:ae:5b:bd:6b:f6:61:eb:b5:a0:6b:47:d1:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:9D:C1:E7:83:1D:9E:0C:40:4C:69:57:9D:F7:59:B2:5A:94:09
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9e:95:65:99:a2:3b:65:9f:c9:a8:8f:cc:47:10:a8:09:ab:
91:7a:57:11:40:94:47:59:c7:2c:7b:1d:12:2e:74:02:1b:61:
34:fc:97:49:63:80:7f:c4:56:81:a7:e7:30:b0:db:de:af:93:
1c:ee:fc:d3:d2:b9:51:da:7f:67:ad:3c:54:00:00:bd:10:57:
b5:a9:e0:a4:9c:61:6a:8e:56:e9:9b:71:bd:16:e4:9f:46:c5:
c0:0a:7e:c2:48:d9:28:de:30:52:e6:86:ba:88:4b:62:ae:1d:
d5:d8:cd:c6:09:21:84:9d:fc:21:4d:ad:e4:9b:5e:d5:b1:29:
39:d8:75:cc:80:7b:d8:fd:a4:8b:52:35:90:89:1a:21:e9:23:
3e:a1:4e:28:fe:d2:10:72:c1:d9:53:ef:39:39:ad:42:a8:37:
e0:99:fa:45:99:64:47:e0:83:73:6b:a4:45:ec:ff:96:e4:0d:
08:1c:f0:5c:88:ad:20:e0:dd:c0:7d:85:b6:ee:2d:ee:89:0a:
21:dc:8a:ca:0f:c8:e8:6c:96:c1:82:c1:f4:58:3b:52:32:0e:
84:ad:7d:07:23:d4:b9:fe:6c:9a:b4:73:50:75:3f:75:82:5e:
b4:20:87:40:08:90:44:61:84:93:98:6d:10:d8:e6:29:c3:b1:
1d:93:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:52 2026 by rpki-client