Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: MQgdLI7hw45IZBLknfDRWPjhjHmJw+shviKBcMI6/vM=
Subject key identifier: E9:A1:A2:01:D8:80:A9:3A:1D:BD:1B:0B:3B:47:35:EC:11:5F:02:92
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 019EC06DDC6A5769DD1BEF656803BE711D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0B69
Signing time: Sat 13 Jun 2026 10:01:25 +0000
Manifest this update: Sat 13 Jun 2026 10:01:25 +0000
Manifest next update: Sun 14 Jun 2026 10:01:25 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: TQvLZit4WqOejemy9w8yWrYTOwMQTGf57IcnFHrp2Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:dc:6a:57:69:dd:1b:ef:65:68:03:be:71:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Jun 13 10:01:25 2026 GMT
Not After : Jun 14 10:01:25 2026 GMT
Subject: CN=e9a1a201d880a93a1dbd1b0b3b4735ec115f0292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:55:60:28:92:d0:c5:6b:99:cf:30:8a:a1:
54:12:f3:c9:d5:ca:6c:36:b5:c4:ca:cc:83:1f:77:
ea:2a:54:0d:28:13:00:05:0f:a6:83:15:b0:b7:40:
12:08:5b:56:d5:b7:a9:a1:05:98:59:60:4f:67:09:
ba:2c:2f:c9:1e:78:4c:a6:2b:29:76:56:0e:b3:19:
25:dc:c8:6b:4f:9f:f8:97:1c:e5:3f:cc:e6:6a:7a:
40:e2:da:40:cc:6d:67:0b:e7:eb:58:35:15:f3:ec:
1f:c1:f0:44:4c:38:38:96:d1:a3:06:7d:71:72:4f:
cb:f2:83:93:b3:d8:cf:14:c0:0b:89:06:7f:e0:3e:
b9:3b:a8:b7:3a:44:c9:09:66:b3:08:70:c2:8d:6c:
46:6b:29:d7:d0:d0:a2:28:8e:56:e6:b4:08:d1:59:
f9:18:9a:4b:41:a1:c4:27:ce:09:48:c4:ec:9d:af:
c6:fc:cc:08:fb:3f:bb:d2:f8:87:3a:45:73:c5:c6:
6d:ce:97:6e:83:67:24:4e:3d:2b:20:8e:35:11:73:
63:4c:fe:e8:16:74:00:67:21:a3:b1:da:31:2c:b3:
19:2b:ca:cf:e7:6a:56:24:1c:ac:7b:20:3d:f1:4b:
5a:3a:31:68:c3:fa:3e:f8:ff:67:4b:21:a5:62:a4:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A1:A2:01:D8:80:A9:3A:1D:BD:1B:0B:3B:47:35:EC:11:5F:02:92
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:13:eb:71:a4:af:79:c8:79:68:57:46:68:a5:e3:83:eb:97:
7c:21:5f:02:98:72:95:a1:07:fb:07:b5:ca:4f:b4:f9:80:36:
1e:bc:f9:03:1d:b1:fd:c1:81:13:e6:5e:23:0e:65:db:b0:fd:
22:07:9b:e5:74:1d:85:b7:b2:16:c4:29:fb:72:60:45:2c:db:
cb:17:21:19:4c:5e:bf:6b:8e:80:01:20:ba:fa:8e:d8:4e:70:
1e:3c:0c:d8:9d:fd:f4:cf:d8:ef:a3:d9:73:87:31:6d:3f:9c:
4b:f0:1e:57:80:26:3d:41:da:f3:61:f3:4c:00:58:79:85:ef:
2b:9e:ef:82:29:50:c6:1e:7f:31:5a:28:40:b3:61:59:0e:4b:
6b:d5:bd:5b:dd:4e:b2:fe:e8:27:10:3d:ba:3a:37:c0:e8:47:
26:c4:b1:a3:a6:77:f0:ce:a2:0b:74:39:b9:b8:5f:e5:48:21:
87:4d:26:8a:2c:77:da:fc:7a:34:96:c7:9d:57:0a:80:5a:08:
62:2b:52:68:cb:2e:5c:a3:be:fc:ff:c4:ec:a8:1a:58:e8:64:
c3:c5:37:2f:eb:4e:40:36:6d:fa:b2:a2:bb:ef:5c:90:96:8c:
3d:13:b5:f6:b0:f8:0c:4d:7b:bf:29:61:7a:7c:86:e8:4b:3f:
ee:43:22:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:30:51 2026 by rpki-client