Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: DHrNcd6aNYSNLWJwpryaqseQWJ06GGYwFt8oKI9Px7c=
Subject key identifier: 60:81:F3:AA:37:70:6B:CD:7B:39:8C:29:78:89:99:C9:19:BC:E5:5C
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019EBF91B17C558B5B40F4E8F27B17C66036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 0A20
Signing time: Sat 13 Jun 2026 06:00:56 +0000
Manifest this update: Sat 13 Jun 2026 06:00:56 +0000
Manifest next update: Sun 14 Jun 2026 06:00:56 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: lbT/hdQO4a9A/dTlGuN2qSfd0Fbwvm+GwbqX2/Y9SWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:b1:7c:55:8b:5b:40:f4:e8:f2:7b:17:c6:60:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Jun 13 06:00:56 2026 GMT
Not After : Jun 14 06:00:56 2026 GMT
Subject: CN=6081f3aa37706bcd7b398c29788999c919bce55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:72:9a:ac:e5:ef:46:53:05:66:a0:03:22:
96:b7:03:e0:24:de:5a:0b:fb:d7:23:16:7f:be:34:
08:2d:7b:d3:4c:64:d2:23:7d:4d:1e:b9:90:ca:05:
72:1d:55:c9:2d:f2:f6:47:05:d6:5c:44:d2:12:9e:
66:19:c3:43:46:4a:86:33:6b:7d:df:45:8a:1d:c7:
a4:63:b5:68:b6:05:9e:e1:e9:db:39:8e:18:c3:26:
02:4e:e3:06:fc:5b:32:c7:e0:27:bf:91:1b:df:35:
ae:9e:9c:52:ee:c3:fa:ea:f8:06:7c:13:08:91:92:
dd:36:01:ae:cb:2a:be:95:2e:8c:af:c0:1d:07:df:
07:95:ef:fa:99:bb:f3:f7:41:23:03:a1:dc:42:f1:
95:25:68:e5:1e:96:ef:91:3b:5c:a1:ff:c7:18:4b:
69:e2:61:47:3a:f8:32:6a:e7:24:30:08:45:db:50:
3e:34:5a:aa:7b:f4:17:fc:07:0f:39:bd:f5:d9:e8:
52:7b:eb:3a:68:cc:90:a2:ee:8f:18:0b:57:f5:22:
6f:f3:82:39:8c:d3:b4:53:de:53:3b:ea:7c:d7:14:
3d:ad:b6:85:dd:39:81:5b:18:e1:3e:c1:77:1f:b4:
ca:48:d0:fa:bf:de:fc:38:f3:1c:1f:74:99:74:80:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:81:F3:AA:37:70:6B:CD:7B:39:8C:29:78:89:99:C9:19:BC:E5:5C
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7c:f7:9a:2e:40:da:16:65:91:28:a9:ec:15:09:b4:18:4b:
dd:7e:78:df:7b:5e:88:28:fb:1a:a4:9b:57:b4:9a:b1:86:60:
cd:16:62:ad:28:1e:92:38:4b:f5:29:4e:0f:f0:ec:ba:8b:31:
88:b4:16:22:cc:fe:f5:5f:25:d2:b0:97:2f:58:82:4c:45:fb:
2f:60:b5:d7:c3:b6:f9:ae:6e:50:c6:50:3f:05:ce:b4:f6:b4:
4e:89:95:8a:65:0e:bd:df:79:5c:5c:74:56:11:6f:3f:66:9c:
3b:fd:7b:34:0e:80:ca:27:f1:74:3d:e5:4b:15:21:ff:be:bb:
84:9f:e6:8d:20:12:6b:ec:0f:c0:b2:ed:8e:e5:40:79:6f:6f:
9f:d3:2c:68:69:a9:ec:66:10:04:3f:d3:e9:62:7e:fd:45:43:
3b:43:a8:2f:4c:65:1b:34:00:27:a5:69:d7:50:0e:f4:6d:56:
83:74:e6:2d:cb:06:5e:9e:46:8a:e8:45:7b:fc:ea:af:0d:0f:
32:da:73:4b:66:27:bf:c1:64:d6:4b:36:9c:75:48:f8:9b:95:
bf:de:ce:56:6d:62:d8:14:b1:da:89:e3:4e:eb:23:9b:32:6a:
df:7b:6a:ed:29:3b:22:59:7c:a4:22:2b:a1:0a:2a:c2:06:1f:
8e:1d:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:40 2026 by rpki-client