Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: aNnQFkfTLmzbkbNc/AsZ++8j2DTszfxX/1wOq0h3SIw=
Subject key identifier: 0D:7D:14:98:E2:3D:17:29:E5:4E:FA:9C:DA:11:CA:5B:B0:51:8F:9B
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 019EBE10A7A2BE019BCFA49DBBB93561A240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 23:00:22 +0000
Manifest this update: Fri 12 Jun 2026 23:00:22 +0000
Manifest next update: Sat 13 Jun 2026 23:00:22 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: ZhzGgjGWyCtSmeNQk/F8ezrdgXhphWvdO1QwG90p85k=)
2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:a7:a2:be:01:9b:cf:a4:9d:bb:b9:35:61:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Jun 12 23:00:22 2026 GMT
Not After : Jun 13 23:00:22 2026 GMT
Subject: CN=0d7d1498e23d1729e54efa9cda11ca5bb0518f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:bf:ec:69:f8:6f:b2:74:3e:82:dd:46:03:
70:2c:a2:13:3d:f8:f0:2a:8e:d2:9e:9b:45:78:65:
eb:05:ee:f6:5e:89:64:27:5a:96:a4:b8:5d:57:a4:
8d:33:8d:ff:ac:a5:e2:91:b5:51:93:31:5b:94:26:
04:95:c5:07:eb:08:a5:42:d2:11:56:39:cf:12:5c:
b3:5b:42:68:0e:7a:3d:0b:6d:8d:72:1c:57:91:01:
3d:4c:ed:d3:ce:28:e8:bb:26:26:11:20:50:77:5c:
e9:ce:76:a4:d1:d3:64:61:c5:7e:7b:de:17:7e:e1:
9c:55:07:f3:56:15:6f:df:18:a5:f3:27:9f:74:54:
b7:70:7c:17:b2:45:d5:4b:8a:20:b9:ef:5d:be:74:
94:46:4d:cc:a5:b3:4c:b0:46:84:93:13:ca:43:9c:
76:08:ff:81:b1:a0:d1:b1:35:35:7d:11:5d:c2:fe:
6c:6b:5f:36:2f:f0:f7:d8:31:44:86:26:dc:c7:b9:
b9:d6:70:e0:64:50:d6:cc:1d:55:54:de:76:2e:d6:
25:7f:12:e0:0d:89:29:b1:1b:fb:a8:9b:f3:93:40:
03:98:0d:51:4d:74:06:a3:fd:75:11:59:be:82:4f:
ed:47:06:79:86:ad:90:cc:8a:71:94:a9:0c:f6:73:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:14:98:E2:3D:17:29:E5:4E:FA:9C:DA:11:CA:5B:B0:51:8F:9B
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:38:eb:6d:9f:3a:cd:a1:8a:3f:5f:a4:31:44:ed:21:a2:2f:
06:e9:18:c5:9f:a2:ce:f0:b8:f9:93:c1:4b:0a:43:9d:4c:e9:
3a:ac:38:4f:f0:81:10:52:a2:b7:93:9c:c7:d1:bc:19:dd:66:
f2:9b:69:c4:38:57:aa:e8:19:ea:cc:c6:17:12:29:47:fd:ea:
27:ce:f2:c9:64:1b:b8:a1:bf:6f:86:4a:10:7e:43:2f:16:a3:
22:1d:ee:40:41:c3:d9:87:1d:a6:67:19:8a:51:a4:ee:07:fe:
e1:85:de:24:fa:f8:51:cd:10:96:f3:cb:41:b7:4c:93:39:3c:
07:1e:a8:81:51:58:3b:a8:a1:ba:06:cb:3c:ab:21:38:38:0f:
8b:c6:d3:55:13:3a:6d:9f:de:24:d0:e4:ca:e3:09:ac:d2:af:
3f:6a:4b:32:55:62:bd:19:e6:d0:69:d6:6a:12:e4:19:3d:6f:
3e:ff:51:61:19:d8:7d:cf:e2:ef:75:90:81:3d:a2:a3:4b:ce:
fa:d1:ff:b1:a9:67:60:7f:e7:9a:1d:bc:2c:59:8a:7d:98:b3:
8c:51:3c:98:a2:2d:61:cb:f5:12:73:89:49:1e:cf:11:a7:b1:
19:5d:c0:4b:fb:04:35:80:e7:73:36:f7:f8:5d:2d:ac:da:b0:
57:67:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:54:54 2026 by rpki-client