Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: HNIXWk6/jXJdG1TfKnzbj0cjuj/HW4aAOZ1aq5gIr3Y=
Subject key identifier: D6:AF:62:DE:43:21:2F:BD:8B:5A:79:DE:A8:F0:09:64:F6:E3:97:10
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019EC0DB0C005F46EA82C2F74C238B18BB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 16AD
Signing time: Sat 13 Jun 2026 12:00:41 +0000
Manifest this update: Sat 13 Jun 2026 12:00:41 +0000
Manifest next update: Sun 14 Jun 2026 12:00:41 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: EbbseeWpyyXaRVfRNmSZp0WqP5fY/8Lp3pCcwUKne18=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:0c:00:5f:46:ea:82:c2:f7:4c:23:8b:18:bb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Jun 13 12:00:41 2026 GMT
Not After : Jun 14 12:00:41 2026 GMT
Subject: CN=d6af62de43212fbd8b5a79dea8f00964f6e39710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:de:d6:da:af:73:0a:fa:c3:3a:3e:a9:38:
fe:8b:3b:fe:8e:4d:58:5a:d1:00:ae:18:8f:29:4e:
ef:81:57:3f:4c:34:c7:24:bc:1a:02:a0:62:8f:56:
7a:8e:59:b0:5a:bd:8e:0f:6e:ac:9b:65:85:4a:ba:
4c:e1:90:7c:c6:2a:5e:b0:c2:91:c7:e3:79:e1:c3:
4c:d2:54:5b:af:59:d4:c8:2b:55:83:d1:9a:9e:3a:
2d:74:64:60:47:7f:ef:49:65:ba:79:15:8a:15:e3:
cb:ed:26:14:29:97:77:64:9b:92:f7:5f:b2:95:24:
6b:2f:f9:b1:67:d1:f0:85:77:a7:77:fa:ba:bc:b5:
7d:af:c9:37:a5:2d:40:9a:57:09:e3:8e:b3:4b:7c:
6d:fc:75:f4:1a:a9:d0:99:84:e6:f1:3a:6a:d6:b5:
c6:f9:c0:8b:66:c4:96:b7:42:c7:a2:61:58:a6:24:
d4:64:22:87:9a:29:d6:4b:fe:13:4d:01:33:19:e2:
51:0a:0e:fc:7d:fd:72:7d:98:2c:cf:bf:37:e2:16:
84:ca:e3:e4:f8:e4:25:36:cd:89:86:bd:67:9e:0f:
8e:65:31:5d:6f:23:71:2a:77:d1:10:f0:67:ef:5d:
69:15:08:39:99:7e:66:30:f3:69:da:d1:c0:64:d1:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AF:62:DE:43:21:2F:BD:8B:5A:79:DE:A8:F0:09:64:F6:E3:97:10
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3e:1d:29:e0:85:ac:61:15:75:c1:66:c7:e3:05:fa:35:ff:
26:28:5a:99:10:5f:5f:f6:84:4a:56:84:b5:c6:4f:68:bf:bd:
9d:95:9f:36:e9:fd:00:bc:bc:da:d4:b2:38:23:54:2f:68:e0:
18:9b:88:1b:2f:ed:50:63:22:6f:12:ea:a4:95:e0:83:77:ed:
fe:f4:4f:3a:0d:ff:a1:d7:40:49:a7:2d:54:12:c4:ab:9b:cf:
55:91:ab:b5:03:8f:a5:d0:99:d5:76:71:72:bc:c4:9b:a2:09:
2f:7d:0b:b2:d5:c4:ac:3f:fe:97:ba:0a:db:48:c9:43:93:43:
97:49:00:fa:1b:63:e1:06:77:37:4f:08:a0:b7:eb:ee:81:09:
3b:fd:b4:3f:25:da:6b:27:e7:77:0c:93:bb:0d:7b:e4:7a:87:
60:b7:b5:ac:c9:16:54:e7:45:bf:cf:9f:57:a0:e5:06:62:71:
9b:10:65:be:d0:08:ed:1d:cb:72:ca:17:96:ac:79:0c:e3:1e:
84:91:96:72:dc:b5:6c:8a:83:76:e5:14:00:79:f2:40:ce:09:
c0:d9:f5:8b:2c:22:21:9f:00:1a:72:c7:f9:bf:b6:76:c2:da:
db:5c:b2:76:05:e1:9d:03:43:ee:64:88:2b:53:07:89:fa:1c:
89:70:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:50:01 2026 by rpki-client