Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: jpFT3xLw8smxnqwSAyech02g6qTfOm27tyJixsjQBJU=
Subject key identifier: 25:D5:B5:4F:E6:A2:84:56:CA:61:CE:36:0C:7B:59:7C:57:17:FA:A7
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 019EBEB5EEB8F836EAA6E522890960ECEEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 02:00:54 +0000
Manifest this update: Sat 13 Jun 2026 02:00:54 +0000
Manifest next update: Sun 14 Jun 2026 02:00:54 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: MG53Opip+xBSMiq03tCFanBhFQljSdO//AyA6kxbNqE=)
2: 8WgF1FeeAMIWLEqNHsEmrCFfWUU.roa (hash: l9CCrON/4HDYrH0Vj7tQlkfUKI21p0hKJL3nNR+WrZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:ee:b8:f8:36:ea:a6:e5:22:89:09:60:ec:ee:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Jun 13 02:00:54 2026 GMT
Not After : Jun 14 02:00:54 2026 GMT
Subject: CN=25d5b54fe6a28456ca61ce360c7b597c5717faa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:2c:11:28:0a:7d:41:71:62:27:6b:ae:9a:
54:a6:db:54:ba:9d:c0:5e:47:94:f1:e3:18:a6:ce:
10:63:4c:b9:09:00:bc:06:6a:df:25:d5:9d:9c:34:
9e:eb:c5:f1:88:38:07:12:5c:a6:f3:a8:98:34:4d:
72:17:29:83:5e:6d:f9:80:15:19:43:bc:01:4e:f5:
2e:af:71:ff:c7:69:b0:d0:b0:9a:9f:cb:53:5f:56:
dd:0d:62:b5:29:fe:78:8e:57:8f:47:7c:85:9a:fe:
b9:b0:d1:2e:d4:71:5a:da:49:94:98:d0:72:d2:00:
71:50:99:4b:e5:e0:27:64:de:60:9a:9e:3e:5d:04:
a9:0d:68:1f:1a:bc:aa:8c:15:55:0b:54:f2:a0:da:
3a:01:9a:c0:eb:e8:5a:93:58:69:3e:18:f6:b3:29:
a9:5e:e5:8f:dc:b1:75:ef:52:3f:42:0d:81:a3:1b:
63:46:f9:49:03:13:37:e8:d1:1b:2a:c6:7e:77:67:
08:4a:21:89:c5:99:be:a9:f8:a0:65:6b:8f:f7:62:
d9:23:a6:ad:8e:c1:aa:8f:5b:d4:f8:7a:2b:88:18:
5b:ef:7b:f2:22:a9:c3:89:5b:28:8c:40:a9:87:b4:
8f:11:e1:81:c8:4a:32:c2:a0:48:bc:10:8b:f5:76:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D5:B5:4F:E6:A2:84:56:CA:61:CE:36:0C:7B:59:7C:57:17:FA:A7
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:54:6f:fd:44:bc:e4:58:1d:0c:38:42:7e:78:d9:de:25:4f:
71:0a:c1:14:5b:7a:f9:4e:47:d7:5c:42:c1:bb:28:da:d7:1f:
4c:74:ba:4e:1a:6a:a2:77:de:07:1f:64:c6:85:12:da:f9:f9:
28:f8:48:d8:3a:ff:9b:ea:53:c8:e2:a6:a5:df:8b:48:4e:18:
99:c6:b6:57:2a:ab:d0:8e:a8:95:dc:b1:bb:d0:40:4b:6c:b9:
14:ec:c6:88:3a:53:0b:b4:7c:26:cf:0d:75:2c:26:72:a5:47:
f6:f9:3b:d6:8f:49:65:37:b9:b3:89:a7:99:7c:ef:a4:50:22:
5a:44:fa:3e:b9:40:2a:08:52:a8:26:74:78:f5:3d:7e:88:a5:
22:08:28:d8:78:68:77:07:38:69:12:a9:1d:de:dd:0d:bf:7b:
d9:3a:6d:76:72:e4:29:4f:31:e6:b6:f9:b1:27:de:74:1f:8d:
10:c1:99:5c:d0:af:eb:86:36:d8:cc:d3:10:4f:e7:ec:87:2f:
8c:27:c8:a3:67:93:4b:45:69:d6:3a:08:e6:ad:36:1a:f2:cc:
5b:9d:61:cb:dc:e4:a2:4d:cc:cf:21:93:5c:79:17:34:41:be:
c2:a4:66:61:a8:d3:dc:18:c1:2b:71:8e:37:b9:cc:82:83:8b:
a1:50:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:35 2026 by rpki-client