Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: LhRGY6JUEOuqG08xOU0JHSLmNFKO3FeuOGdRuqfxpaM=
Subject key identifier: D5:22:94:AA:83:21:86:A7:2A:D7:57:EA:57:D0:BA:42:37:53:05:BF
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019EBE48423254F674A206DE46CFF97DFEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 00:01:06 +0000
Manifest this update: Sat 13 Jun 2026 00:01:06 +0000
Manifest next update: Sun 14 Jun 2026 00:01:06 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: 3UXrnG0LkC7b4JnvXssu0aLPhlrvb0wkITRPBJ8YeYQ=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:42:32:54:f6:74:a2:06:de:46:cf:f9:7d:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Jun 13 00:01:06 2026 GMT
Not After : Jun 14 00:01:06 2026 GMT
Subject: CN=d52294aa832186a72ad757ea57d0ba42375305bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:b6:a7:93:33:19:cc:7d:48:ef:16:9c:15:
5d:6d:24:b0:d2:fc:c3:63:47:c0:af:17:bc:59:d6:
22:18:85:30:37:6d:67:03:f7:0c:83:dc:a3:02:fe:
8f:7c:67:65:a1:48:a9:ec:41:d7:74:ef:29:9a:aa:
bf:6a:c9:9e:67:c6:bb:81:e2:19:9f:25:7d:0b:35:
ec:9d:f8:05:fd:d9:6b:e7:3f:41:cc:31:d3:0d:fa:
d7:b9:3e:1f:e7:a1:7d:0d:29:74:01:18:f5:eb:59:
ff:a1:2d:6a:bf:f2:82:d9:2a:9a:d1:07:d0:da:98:
95:60:45:e6:81:3e:aa:81:8c:c2:c4:be:eb:dd:74:
15:52:fa:44:82:b6:95:a2:02:0e:57:57:26:75:0c:
b7:b0:a2:1a:98:06:3b:de:a4:7e:f7:ee:a0:31:63:
3e:b1:32:4a:f8:9c:aa:9b:8d:eb:56:51:84:77:c2:
02:1a:a4:59:c8:f0:2c:14:20:33:29:ea:a1:66:cc:
84:75:f2:df:d5:d1:da:74:2a:77:2a:ac:b6:3f:93:
c8:2e:ab:97:85:f8:71:d8:9a:fa:2c:ba:58:41:d0:
a9:1c:f7:a6:13:0e:5e:bb:b6:44:59:72:37:cd:7a:
32:2a:c5:5c:7c:ad:60:6c:7c:78:5f:45:1f:da:4b:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:22:94:AA:83:21:86:A7:2A:D7:57:EA:57:D0:BA:42:37:53:05:BF
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:95:cb:ac:41:2a:4b:95:cf:c5:0a:94:34:d9:39:62:bb:51:
7f:b6:06:6c:49:89:83:a6:d5:5b:a0:df:20:27:06:31:50:5f:
a3:e7:d1:db:ae:d1:a8:d9:5f:8a:de:93:3f:a7:04:27:2d:ac:
fb:0f:3d:b4:17:e6:1a:8b:2f:94:cf:8d:f4:52:d7:da:33:78:
c8:d6:ef:2b:73:ed:ea:a7:71:e4:d7:ea:52:da:4d:07:21:66:
e1:28:fd:fa:1b:5f:f1:a2:c3:1a:9a:db:76:3e:f4:b5:1d:7c:
a3:19:bc:e3:a5:d3:15:16:30:32:d7:83:45:95:9f:ea:e5:fe:
85:f3:8c:e2:15:8e:49:29:20:e5:17:a2:e1:3b:1f:77:82:af:
9b:39:59:ec:1a:64:ff:cb:3d:00:22:9c:33:c9:21:ef:51:b8:
0d:65:82:92:4d:54:bc:a6:02:bc:d7:14:17:50:ad:06:60:0c:
89:2f:7b:3d:32:09:ec:70:de:27:0f:2d:e6:47:17:2d:ef:53:
93:f9:f0:c7:e4:70:60:13:3d:24:f9:61:ad:ac:b1:a6:c8:56:
26:ce:e9:74:41:25:46:3f:cd:c4:4d:60:8e:6e:90:e2:f3:ef:
c3:b2:96:d8:e5:80:c6:40:b6:40:82:33:bb:98:58:6b:a8:dc:
74:53:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:14:24 2026 by rpki-client