Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: 9mxTmTkGTK7nGPGnitHy6eN0XCL/LEZtYUZMZeoJ9G8=
Subject key identifier: D1:68:B9:FA:7D:13:8E:40:AF:1D:65:F0:67:88:56:61:84:AA:2C:CA
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019ED34FA6BBEEF8950C0742943D5D4F9B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1965
Signing time: Wed 17 Jun 2026 02:01:13 +0000
Manifest this update: Wed 17 Jun 2026 02:01:13 +0000
Manifest next update: Thu 18 Jun 2026 02:01:13 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: suuGZfqIKR2hrLrgsYS7QJJvFNJFa0jNrZJTp7L0EBM=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:a6:bb:ee:f8:95:0c:07:42:94:3d:5d:4f:9b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Jun 17 02:01:13 2026 GMT
Not After : Jun 18 02:01:13 2026 GMT
Subject: CN=d168b9fa7d138e40af1d65f06788566184aa2cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:ca:5c:6b:57:d4:63:5f:ba:8d:dd:22:17:
02:fb:ef:18:30:4d:ed:dd:62:4b:f7:60:9b:27:bd:
ea:28:c2:24:38:2f:6a:e2:73:e8:f3:4d:88:17:4a:
81:94:9b:56:61:e1:73:0f:6e:f5:76:08:9e:af:95:
2b:eb:5c:ba:b8:d3:ab:a0:2f:ff:d3:71:d8:cf:b5:
6f:03:2b:3e:77:37:52:d0:e7:f3:36:6e:c6:13:40:
22:f0:9f:a3:f3:fc:a8:ba:bb:62:e2:0a:4a:5a:18:
6d:3a:ea:50:0a:85:9e:23:9d:27:d5:f3:31:6e:f4:
08:46:12:ec:29:e0:16:7f:85:a6:de:da:3d:9e:81:
aa:54:67:e1:15:fb:90:a5:c8:f3:97:1e:a2:73:fa:
d3:6a:25:c3:a0:cc:53:a0:f3:9b:a2:85:57:54:06:
b9:56:90:4d:28:b8:90:15:d7:43:67:cc:fb:c6:87:
b9:63:c5:60:38:22:ba:d3:09:0a:29:c6:f9:49:3a:
93:0d:c1:c2:21:39:13:f0:78:7d:51:99:9a:85:2b:
38:67:eb:f4:8e:39:02:07:3b:18:eb:a9:0a:ce:c7:
4c:5d:c3:44:37:81:a6:fa:32:93:0d:b9:35:5c:32:
14:b4:0e:6a:40:ef:46:9a:b9:15:f9:59:a9:20:d7:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:68:B9:FA:7D:13:8E:40:AF:1D:65:F0:67:88:56:61:84:AA:2C:CA
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2a:28:da:8a:1a:60:c5:cd:0d:93:cb:28:46:ee:50:e1:4b:
8a:40:f2:03:ae:e7:83:76:f3:16:50:dc:6c:de:aa:78:d5:3c:
22:b1:4e:b0:21:b4:f1:94:cd:6c:e0:49:be:ad:37:73:7c:44:
17:b3:d2:f9:6c:d6:63:62:bb:1c:e0:1f:2d:e2:34:c3:72:ac:
9a:0e:34:7f:77:d1:56:43:54:70:56:1b:2e:e7:9b:0d:61:99:
f4:2d:91:7b:6f:7f:b7:37:5d:3d:0d:f2:a2:7f:66:16:f6:2f:
2f:e7:14:7e:69:39:49:24:51:28:ef:55:f1:a8:f2:6b:dd:de:
ae:76:ce:bc:da:a8:88:e7:6d:29:11:4c:8c:cb:1a:3b:f5:a7:
d6:f1:f5:f7:10:b1:7c:65:2a:01:73:30:9b:56:7b:41:c8:36:
ac:f7:a2:dd:05:f0:ca:8a:77:f7:ac:78:a1:dd:73:94:32:b7:
72:6f:49:e9:ed:60:03:41:b2:96:5f:85:43:18:33:d6:4c:7e:
b7:a3:81:14:fa:fd:b4:61:c8:17:b7:3b:3c:f3:77:b2:62:72:
50:9d:f9:9a:c1:f1:9d:54:61:a1:29:7e:5e:3c:39:4d:88:8f:
35:5d:21:c3:66:19:56:1e:63:7d:b4:7e:dd:27:5e:43:46:c4:
96:ca:9d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:25:12 2026 by rpki-client