Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier: 9nnjWn9iCIy/IraBBJVekHudqrh0S/0LSVwJDdu/eN0=
Subject key identifier: 23:5B:EF:12:B8:9C:BE:28:32:B2:B0:F3:33:E1:31:76:C6:F0:B5:DA
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial: 019EBFC810466D94DD88EF828729C3A60272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number: 07D3
Signing time: Sat 13 Jun 2026 07:00:20 +0000
Manifest this update: Sat 13 Jun 2026 07:00:20 +0000
Manifest next update: Sun 14 Jun 2026 07:00:20 +0000
Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: n0edd+M9l2Zosff/MSPHFISZsjo5S/3zobLdBEto1n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:10:46:6d:94:dd:88:ef:82:87:29:c3:a6:02:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Validity
Not Before: Jun 13 07:00:20 2026 GMT
Not After : Jun 14 07:00:20 2026 GMT
Subject: CN=235bef12b89cbe2832b2b0f333e13176c6f0b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:23:d4:39:e5:80:e1:c4:b0:c1:17:d9:2f:
0d:f9:1b:79:2d:fc:1d:fd:11:e1:64:e6:48:8d:9c:
b5:d6:3d:47:9d:1a:bf:64:2b:42:f7:46:4a:09:ae:
57:4d:df:02:44:45:2d:6a:60:96:87:49:77:45:9d:
aa:29:e1:9d:c1:df:bc:13:8d:36:c6:7b:8e:7b:9e:
d0:8d:61:7d:35:22:2e:4f:88:99:70:b1:5d:fe:65:
48:db:ed:81:63:3c:08:ca:f6:9d:b6:0e:7b:4d:e2:
8c:75:92:43:29:f9:2d:10:13:11:b2:3d:76:31:64:
82:ac:87:81:07:66:1e:ff:c2:05:d5:ff:c2:fb:79:
17:00:43:f3:79:18:ec:92:68:b5:68:5e:12:87:c6:
bd:74:1d:80:4e:7e:d6:fc:15:aa:dc:75:c8:b7:36:
89:73:46:6e:5d:71:d0:b1:f0:ce:72:22:20:07:23:
db:30:42:99:85:ec:e9:8d:bd:0c:58:58:63:19:bf:
c0:bc:d9:08:d1:40:0e:e3:39:79:34:bf:c4:5d:55:
59:e3:5b:c0:a2:ed:b4:a3:fe:30:3c:54:e9:d1:3e:
cf:0b:cd:15:55:68:7b:71:ce:b4:07:e5:d6:ec:38:
19:ca:f9:21:ab:b0:ae:ef:a6:18:b6:b7:48:49:e9:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5B:EF:12:B8:9C:BE:28:32:B2:B0:F3:33:E1:31:76:C6:F0:B5:DA
X509v3 Authority Key Identifier:
keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d1:e9:cf:a5:fd:e0:c2:54:65:4e:fe:eb:76:5d:40:6f:a8:
8d:14:a1:3d:99:c0:23:77:36:96:bf:34:4e:87:be:a0:e0:c8:
26:a1:16:d6:a3:b8:92:0a:89:e1:7e:b3:92:f1:bf:40:d0:a6:
4c:3d:9b:e9:31:90:47:22:af:a2:bd:ed:79:5c:ec:fd:1a:c8:
37:32:54:d2:cd:9b:56:54:8f:5e:35:b1:8b:ba:5f:fb:1c:94:
80:7e:b4:db:7d:03:6e:ab:a6:b2:79:51:68:55:63:d6:95:30:
69:a8:0b:d8:c8:3f:16:2d:06:e8:fb:be:c9:a9:f1:9c:99:b6:
1f:ff:37:f4:9e:fe:b8:60:d2:2b:cb:74:82:b4:c7:39:17:d4:
55:14:58:88:14:c0:71:98:d9:47:97:3f:4a:12:3c:a7:27:9c:
c0:fe:34:60:b8:21:0b:ed:7a:6b:4b:6e:e1:8c:ac:8f:ea:e6:
da:86:6b:f5:1b:2e:e8:f7:da:c3:9b:43:4f:50:c2:15:b9:09:
85:8f:b7:51:a3:5c:4b:39:00:30:80:7c:df:a0:97:b6:ea:ed:
ce:9d:c4:be:04:ff:e7:92:70:16:3e:bf:94:65:bc:6d:0c:ad:
94:8d:55:ac:b2:f9:28:73:87:1d:92:bd:bd:d7:a5:1a:12:f6:
84:b7:c2:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yBBGbZTdiO+ChynDpgJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2RkNGI4MWYxZmM3OWRkNGRhNjQyOGY5YzJhMDI3MzQ1
N2ZmMDYwHhcNMjYwNjEzMDcwMDIwWhcNMjYwNjE0MDcwMDIwWjAzMTEwLwYDVQQD
EygyMzViZWYxMmI4OWNiZTI4MzJiMmIwZjMzM2UxMzE3NmM2ZjBiNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fEj1DnlgOHEsMEX2S8N+Rt5Lfwd
/RHhZOZIjZy11j1HnRq/ZCtC90ZKCa5XTd8CREUtamCWh0l3RZ2qKeGdwd+8E402
xnuOe57QjWF9NSIuT4iZcLFd/mVI2+2BYzwIyvadtg57TeKMdZJDKfktEBMRsj12
MWSCrIeBB2Ye/8IF1f/C+3kXAEPzeRjskmi1aF4Sh8a9dB2ATn7W/BWq3HXItzaJ
c0ZuXXHQsfDOciIgByPbMEKZhezpjb0MWFhjGb/AvNkI0UAO4zl5NL/EXVVZ41vA
ou20o/4wPFTp0T7PC80VVWh7cc60B+XW7DgZyvkhq7Cu76YYtrdISemPIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNb7xK4nL4oMrKw8zPhMXbG8LXaMB8GA1UdIwQY
MBaAFOE91LgfH8ed1NpkKPnCoCc0V/8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYjViZDctNjAzYi00YTVjLThhOTgt
ZDU2Mzk1OWQyNzdkLzEvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wYjViZDctNjAzYi00YTVjLThhOTgtZDU2Mzk1OWQyNzdk
LzEvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNHpz6X9
4MJUZU7+63ZdQG+ojRShPZnAI3c2lr80Toe+oODIJqEW1qO4kgqJ4X6zkvG/QNCm
TD2b6TGQRyKvor3teVzs/RrINzJU0s2bVlSPXjWxi7pf+xyUgH60230DbqumsnlR
aFVj1pUwaagL2Mg/Fi0G6Pu+yanxnJm2H/839J7+uGDSK8t0grTHORfUVRRYiBTA
cZjZR5c/ShI8pyecwP40YLghC+16a0tu4Yysj+rm2oZr9Rsu6Pfaw5tDT1DCFbkJ
hY+3UaNcSzkAMIB836CXturtzp3EvgT/55JwFj6/lGW8bQytlI1VrLL5KHOHHZK9
vdelGhL2hLfCBw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:50 2026 by rpki-client