Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: oTa7bnBs3uQ1lVXfsq6+YaQd8AetGpWjtkCZ8voEYMQ=
Subject key identifier: 13:8E:91:9D:90:1D:CF:70:F6:DA:83:EA:C4:14:FA:21:FB:89:E6:93
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019EBDDA0ACA073C1EAAFE06BB5096956432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 1011
Signing time: Fri 12 Jun 2026 22:00:43 +0000
Manifest this update: Fri 12 Jun 2026 22:00:43 +0000
Manifest next update: Sat 13 Jun 2026 22:00:43 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: 5ltEOxaq4YMWiDHl3J6gMQzyHXewrLfLe/nlaHEj3Q4=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:0a:ca:07:3c:1e:aa:fe:06:bb:50:96:95:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Jun 12 22:00:43 2026 GMT
Not After : Jun 13 22:00:43 2026 GMT
Subject: CN=138e919d901dcf70f6da83eac414fa21fb89e693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:1c:e6:89:b3:3a:ef:5e:73:7d:82:18:71:
c6:d8:ef:c0:56:60:ed:13:24:2a:79:e4:6f:93:4e:
81:54:41:c4:f6:8a:2b:28:a6:7b:61:c2:c5:7e:87:
13:4c:46:80:04:98:98:c5:2f:d3:86:f0:15:27:08:
32:54:ff:cb:f9:97:64:22:64:3c:f2:9c:b1:1f:8c:
fe:48:e3:0c:11:0a:01:0f:eb:91:fc:5e:81:cc:bf:
55:e7:52:ac:d4:f5:a6:39:e1:27:da:79:07:d0:db:
18:a2:72:0d:70:da:d9:1a:c0:d1:7b:42:54:53:e5:
b8:0f:b0:d6:f7:03:97:17:29:2d:90:30:81:58:33:
36:91:6a:21:68:0d:6f:04:f4:9a:09:f8:a2:2b:ab:
26:7b:fc:7f:04:96:b4:e2:5f:0b:01:c6:d0:8e:82:
bf:c5:37:82:be:e3:c4:72:0d:6c:8b:c1:b6:4c:d2:
4f:dd:4f:d3:d2:e4:dc:61:b4:9e:22:fc:b4:4e:b9:
eb:4c:fc:06:a1:24:3e:50:61:63:86:01:a2:8a:8a:
b7:da:99:8c:e7:c5:ff:ee:82:22:ea:9d:49:91:4b:
91:30:bb:ff:8b:e6:8e:c0:22:d4:a5:e9:ab:7e:de:
82:d0:19:25:de:ec:b9:4a:17:4c:14:c6:fc:7d:03:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8E:91:9D:90:1D:CF:70:F6:DA:83:EA:C4:14:FA:21:FB:89:E6:93
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:75:be:50:d9:17:b4:3d:be:50:4a:c4:2c:b7:0f:ea:7a:e0:
f1:50:1f:f4:53:63:a6:7d:44:45:32:4a:25:e9:f4:f0:eb:6a:
da:a4:fb:c0:2f:3b:10:12:a2:d7:8e:00:54:71:0d:10:94:36:
aa:1e:68:76:b4:0a:6a:7a:8c:0d:41:58:7f:cd:97:dc:a6:ee:
18:d9:53:8d:93:e4:44:23:c5:42:06:6d:d7:0d:3c:e1:fe:c6:
f3:27:fc:28:3a:6c:84:da:21:88:81:52:a0:9f:33:88:bc:c0:
38:03:8d:2b:e2:8b:03:53:30:9d:54:96:d1:aa:54:0b:3f:bb:
4e:7e:4b:3b:6c:56:fa:d7:37:c2:ce:ed:be:14:a2:21:e8:f0:
7e:39:c7:f5:13:bb:bb:d2:08:3b:6c:ac:0a:00:be:27:14:6e:
44:f4:8e:92:b1:d3:21:53:9c:67:ad:6c:73:64:8d:9d:af:e3:
48:cd:4d:a0:4e:c7:5b:90:fe:63:1e:c7:1b:40:43:8c:8f:f1:
7f:f5:0a:85:88:72:d3:57:68:29:1b:74:df:96:c6:5c:cd:79:
c4:92:60:1b:53:a4:40:19:87:74:3e:cb:1c:94:09:ee:28:eb:
f7:7a:f2:de:53:39:01:a7:47:a8:fb:50:e9:b5:a2:08:60:86:
4a:13:3a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:43 2026 by rpki-client