Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: 0QPWSxpmVFroPS/de5PY92ALLLa/qbQYcDvCbtk/Jt0=
Subject key identifier: 08:8D:71:46:7D:24:87:7E:F5:BE:AF:69:BE:84:88:2B:43:42:CF:9D
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019EC1EDBBFB8BFA37EA083EFF45039B186E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 14F2
Signing time: Sat 13 Jun 2026 17:00:43 +0000
Manifest this update: Sat 13 Jun 2026 17:00:43 +0000
Manifest next update: Sun 14 Jun 2026 17:00:43 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: l1H8af8OqR0QKgen+QavVOh8ElauQHObGeh5pOafmTk=)
2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:bb:fb:8b:fa:37:ea:08:3e:ff:45:03:9b:18:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Jun 13 17:00:43 2026 GMT
Not After : Jun 14 17:00:43 2026 GMT
Subject: CN=088d71467d24877ef5beaf69be84882b4342cf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:30:0d:15:7e:a8:9e:1f:f6:73:eb:bc:6a:
20:11:e1:88:3e:22:09:07:35:e3:c2:3d:b0:79:42:
c3:21:46:1e:68:4b:95:6b:59:e5:72:74:e8:85:ff:
98:b7:11:01:09:d5:d9:0e:1f:2b:9d:1d:05:03:8a:
12:94:68:ff:e1:fc:1d:fc:0e:4d:63:1d:e7:6d:49:
27:09:c3:29:5d:fb:90:ea:8f:a6:b8:97:11:5b:dd:
bd:41:fc:3e:cf:f3:5c:da:bb:89:ee:d3:9f:7e:3d:
be:3a:f7:22:b5:62:2e:41:0c:9d:3c:ec:6d:54:a5:
d1:26:99:c9:73:83:30:1e:13:a7:ce:99:66:e2:94:
1c:0c:17:a9:e2:80:bc:f0:a6:56:6a:b0:f4:b5:07:
53:50:61:f0:b9:b5:c3:3e:c3:65:06:c3:c8:1e:02:
23:94:e3:ff:d7:40:30:21:90:d7:43:63:8b:9c:58:
78:af:1a:b6:48:87:d9:3a:6d:8d:2d:8f:1a:14:6a:
70:8e:7e:f0:21:b7:74:db:38:1b:19:6d:f1:12:be:
17:9d:f1:b7:a8:05:f6:3e:98:72:23:2b:f4:ed:41:
92:79:2b:ab:ac:6a:45:a8:38:a8:2a:12:56:d3:07:
ab:5e:06:5f:6c:e0:78:55:d5:ea:22:14:83:ca:0b:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8D:71:46:7D:24:87:7E:F5:BE:AF:69:BE:84:88:2B:43:42:CF:9D
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:95:c7:bb:97:ec:d9:96:69:e6:22:f6:68:30:f6:b1:31:32:
1c:d4:c4:f7:8e:fd:ca:04:be:60:11:4d:e5:99:62:5c:a1:ee:
73:b2:b4:4c:0d:cb:a7:57:21:f0:98:70:92:1a:30:ae:69:8a:
37:3d:ca:90:87:95:ae:b0:bc:ae:81:31:12:1c:32:10:6f:e6:
b5:f4:3a:68:e0:21:50:30:e2:d6:5d:94:11:42:a0:9e:ea:6c:
b5:e1:70:01:d4:e8:34:b1:71:d7:7a:16:47:97:d8:05:22:4c:
da:7f:73:8b:5b:db:b4:07:7b:27:ea:4f:ef:45:e4:9c:19:38:
c4:f7:c2:ce:f8:61:0d:9b:9f:14:37:c0:33:ed:75:20:a7:77:
08:11:08:39:76:95:ff:2d:60:67:ae:ef:a0:5f:bb:08:16:2a:
02:22:8f:ff:c4:8c:a8:53:d1:e5:5b:33:c5:12:6d:00:5b:eb:
33:91:9e:24:00:99:46:90:b0:36:1f:3d:5e:ca:04:54:8b:1a:
f6:a3:80:7c:52:2a:ee:9d:34:e8:a4:9e:8e:8c:77:e1:df:9f:
df:b2:7d:71:ce:2c:08:68:28:51:80:ab:29:38:77:6b:73:a4:
34:17:fa:a7:62:ee:1c:7a:aa:65:20:76:3a:a4:e7:8c:22:b3:
10:2a:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:47:16 2026 by rpki-client