
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: 0zzRxzYPBuAf4rWS7XrTcFHYiMsAG0bj3Gz9PyjrxgM=
Subject key identifier: AE:09:10:F1:05:63:C5:F2:00:4F:BB:3C:2E:C4:52:3B:B5:D4:46:CE
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019EBEEC4FD3A94B34FD770C520D96DA7DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 1068
Signing time: Sat 13 Jun 2026 03:00:18 +0000
Manifest this update: Sat 13 Jun 2026 03:00:18 +0000
Manifest next update: Sun 14 Jun 2026 03:00:18 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: sc1hE4iVJ3ZmQqK9+J9JjLxG0cDDKy4rZeBSxp3fYRI=)
2: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (hash: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk=)
3: Rxb43DOTKVOmi4goggBKGgm61i4.asa (hash: //HomCPkgLqtqfTXCv3j8181AokJrm6q+KQdYo1h/Z8=)
4: fzfszWt-kJZcfbCPsxciTP6C4Dk.roa (hash: Xaxe3Hu1PY1WZ5xZc3wZj9w0NSOK2DQVeSn4qSIA58I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:4f:d3:a9:4b:34:fd:77:0c:52:0d:96:da:7d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Jun 13 03:00:18 2026 GMT
Not After : Jun 14 03:00:18 2026 GMT
Subject: CN=ae0910f10563c5f2004fbb3c2ec4523bb5d446ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:2f:27:ec:1c:e6:45:19:e2:e2:a3:fb:b9:
be:b2:2a:37:4c:a4:76:db:48:8d:02:8f:e0:f5:5e:
6a:30:f0:21:48:be:e4:56:8e:3e:36:5b:c3:7e:34:
c5:1f:e0:fd:4c:c7:fd:a3:a3:6d:45:38:86:b2:31:
7a:17:7f:4f:58:b2:2e:8a:af:15:46:9d:6b:38:b0:
d6:b5:f1:00:d5:b6:3e:04:8f:ac:bd:40:5b:27:c7:
6c:a1:ff:c6:96:e4:fe:63:67:79:e8:27:df:3c:0c:
8b:e3:a0:cb:63:40:cf:04:73:2d:85:e8:70:12:65:
1f:58:a1:24:4f:78:1e:82:9c:8b:88:04:ed:93:09:
3a:a5:d4:b8:18:96:b4:a4:ae:07:3b:a9:48:68:22:
ec:33:ca:8c:04:f4:b8:b0:2e:32:02:d3:9d:b8:9a:
c2:81:fb:81:cb:24:e1:b6:b8:d5:70:41:87:f6:99:
95:17:3b:40:48:5d:fe:79:92:64:28:b0:90:f1:be:
d5:bc:de:32:5c:37:b1:94:c4:00:62:80:f5:10:1e:
b1:85:ce:b3:c4:21:a7:5a:89:c0:6b:47:59:eb:2f:
38:2c:9a:62:16:75:a9:28:3b:59:70:f9:f0:bb:f0:
33:9d:ec:60:49:70:d2:10:53:5d:0f:d3:52:2c:9a:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:09:10:F1:05:63:C5:F2:00:4F:BB:3C:2E:C4:52:3B:B5:D4:46:CE
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:83:df:b7:65:7c:15:37:f7:14:b9:45:0b:5c:8c:3c:28:47:
ff:87:6e:c4:23:6a:37:5d:cf:c5:7c:d3:b9:1a:53:6d:0a:a5:
04:ee:41:8b:c3:eb:8e:3b:d6:77:ee:ce:6f:36:eb:b2:e6:ac:
8a:b5:98:2a:d2:76:75:83:8d:28:90:f7:5c:ff:89:e9:4c:92:
ea:d6:8d:ca:78:a2:d5:1a:9b:9a:b3:11:8d:5d:f5:3b:0b:c3:
6e:76:f3:bd:c9:aa:85:25:de:d2:60:96:9b:96:c2:ca:a7:98:
1b:95:2b:37:37:e2:6b:f6:11:e4:c5:23:75:bb:cb:44:91:87:
47:79:10:2a:a8:75:8f:39:df:30:25:b8:53:84:10:31:1b:80:
69:ae:4b:e1:dd:6b:cc:20:62:f5:cf:dd:d8:4b:15:17:b3:fa:
1b:de:6a:b7:94:19:1c:22:8c:9f:70:43:25:cf:d4:8e:22:b6:
43:68:f1:11:f9:ed:0b:99:f8:de:5b:3d:53:6d:b0:91:0b:e1:
53:4c:b3:58:71:93:7f:e2:7b:3d:55:a8:fc:97:4c:35:6f:59:
15:54:49:c1:ce:92:d7:48:9a:84:5d:fd:68:bf:b5:b5:c8:8b:
e3:d8:c0:ad:3c:12:cf:7c:67:1e:43:6a:15:64:82:a3:07:5d:
5b:fd:08:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:25:32 2026 by rpki-client