Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: onxSU4/CQYnMAaI3VAIpu3waslrxEqJ0274xDjli+QY=
Subject key identifier: 58:87:30:08:E8:E6:1E:7D:F0:E5:14:DC:D2:EF:E2:02:D0:52:38:8A
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 019EC1EDF9337EA423A8570A5239DEC22497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 058A
Signing time: Sat 13 Jun 2026 17:00:58 +0000
Manifest this update: Sat 13 Jun 2026 17:00:58 +0000
Manifest next update: Sun 14 Jun 2026 17:00:58 +0000
Files and hashes: 1: L5BfioWz08XOKOc7LGuDTFScCDM.roa (hash: oJjcndnAKImb4AebXhMuHLKYhu0NzBboRQfoXDCNW0c=)
2: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
3: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: uKLfjlRwSXcwiDZf+zTfUvBywjMKJnVZkRiGx+pAWr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:f9:33:7e:a4:23:a8:57:0a:52:39:de:c2:24:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Jun 13 17:00:58 2026 GMT
Not After : Jun 14 17:00:58 2026 GMT
Subject: CN=58873008e8e61e7df0e514dcd2efe202d052388a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:55:f9:c6:d7:2f:3c:d0:3d:05:c9:4a:38:
3c:00:12:e2:a5:16:0a:e4:2c:ab:52:de:50:e9:14:
ba:bb:fa:19:94:82:ca:ac:00:7e:aa:8b:72:ed:1a:
fb:c1:5f:44:b4:45:83:70:22:c0:c9:8b:fe:11:7f:
41:d3:b0:e1:e4:ed:ed:df:2e:9e:13:95:de:c5:06:
e8:8a:f7:7f:2c:d3:85:24:d9:8c:5e:4b:e9:f8:d6:
96:b3:6c:32:bc:63:c1:3d:dc:4f:40:34:e5:d9:8b:
9c:d8:db:e8:2f:57:38:04:03:51:34:13:aa:15:7d:
2e:54:5c:14:b4:00:2d:3e:58:3e:9c:97:8a:52:fc:
e6:6c:ee:05:97:92:bf:21:a3:af:69:83:dc:7b:c7:
35:cc:af:f6:80:35:98:4f:a2:7b:48:b2:da:fb:b2:
13:df:5e:e5:ff:d8:03:0e:8c:fe:ee:34:a4:83:53:
fe:9c:f4:4f:70:28:2b:e0:83:4f:ef:92:d4:d6:52:
d8:91:d7:1a:52:d5:ba:1b:40:f6:0a:bd:eb:1b:45:
14:2a:a8:79:67:44:5c:d3:8c:c0:40:5f:5e:1e:48:
b3:fd:88:c1:60:1b:13:7e:44:e4:36:93:a8:a4:2b:
ef:15:5e:24:31:a9:3c:7b:2e:36:4c:97:6c:02:93:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:30:08:E8:E6:1E:7D:F0:E5:14:DC:D2:EF:E2:02:D0:52:38:8A
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:01:44:6d:4b:22:03:1a:c1:bb:8d:8d:42:1c:23:48:07:24:
08:86:c3:f5:05:33:47:e3:b4:3b:0d:56:2a:e2:01:8f:73:91:
8d:2a:fb:32:2b:21:5e:17:5c:d9:2d:b0:73:91:a0:50:9b:c6:
47:dd:e8:91:0b:a3:b4:cb:4b:36:ba:6a:ec:19:ec:87:0a:7e:
b9:cf:43:86:56:a1:44:0f:fa:33:01:d4:ed:37:6d:00:f6:6d:
bd:38:fe:57:88:54:4f:5e:39:33:9e:a8:67:19:c8:b2:3e:7f:
8f:87:70:89:c6:64:f1:3b:22:5a:25:59:e3:9a:02:df:d8:6b:
dd:35:9d:1e:60:b9:12:2f:ad:96:62:b6:02:36:6f:33:f1:dc:
c4:d1:c0:c3:fd:50:e4:7e:b0:fc:93:91:28:9f:8f:59:f1:61:
56:c6:d5:ad:69:6f:03:7b:70:07:8f:e1:86:4d:d3:41:b8:b7:
0b:88:ff:ad:ef:19:b9:a8:d5:19:96:f7:fd:4a:9f:be:ae:d0:
a4:e3:49:75:12:33:70:2c:1e:54:19:fa:08:f3:fa:90:ab:58:
12:bd:53:aa:24:3f:05:86:5e:06:e4:5d:3b:d2:9e:48:8f:74:
0a:62:17:6e:b8:e3:91:73:d3:ac:fd:8f:67:6e:d3:5c:62:bc:
86:c2:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:19 2026 by rpki-client