Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier: D8k4HC7hBmvGcxNJiZO9Z2HSj+WOz5XEnR+AV7s3nuk=
Subject key identifier: E6:A8:D2:AE:C0:37:C1:55:D2:31:D1:D7:91:CD:B0:B4:6C:05:42:D1
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 019EC1488C8A639C391F8C7E0D069743EB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 14:00:17 +0000
Manifest this update: Sat 13 Jun 2026 14:00:17 +0000
Manifest next update: Sun 14 Jun 2026 14:00:17 +0000
Files and hashes: 1: 1OhU1ba4r4lAxG-v3HBo5kpowjY.roa (hash: uhi47WtmC1HtS+uzfaoWnsMLVST1oI2GfXGXB1P0CWo=)
2: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: YcHGCvJxcWOcHsE+440DckfLjVS/ehUy1blejQMSY5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:8c:8a:63:9c:39:1f:8c:7e:0d:06:97:43:eb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Jun 13 14:00:17 2026 GMT
Not After : Jun 14 14:00:17 2026 GMT
Subject: CN=e6a8d2aec037c155d231d1d791cdb0b46c0542d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:47:25:59:fb:f1:b6:0e:66:df:81:09:de:
20:3d:c8:e1:d2:2d:b7:c5:e8:9b:a4:1d:18:59:83:
9c:0b:5e:db:9b:9a:44:5f:ce:d8:84:66:0c:ca:e6:
d8:95:e6:fc:51:f5:62:03:d9:14:a5:28:1e:e2:7f:
55:c6:01:02:da:30:c6:71:28:86:f6:34:e4:0b:5a:
91:a1:16:1a:1a:ae:4f:d9:0e:6e:d1:e0:51:de:3d:
08:58:e0:bb:be:53:97:c2:44:df:62:dd:58:a6:55:
40:3b:d4:c0:b8:31:48:c6:ed:97:3d:cb:33:21:ef:
d6:c7:11:a0:cd:cd:da:75:86:3e:0c:e7:78:e1:35:
72:9a:f3:62:14:5f:76:36:51:74:cb:82:55:8e:1e:
bb:49:91:d9:b1:32:13:dc:ec:29:04:b9:79:b0:1e:
0e:0f:12:ca:7e:cb:1e:3e:14:16:8e:28:5c:d1:2c:
a9:74:a2:d3:3e:26:68:54:ae:59:49:53:35:08:ff:
86:36:6c:54:f7:f6:23:60:25:9c:4e:58:ea:94:05:
d1:0f:6e:f8:73:5e:b6:ab:e1:91:6e:fa:5a:e3:55:
36:ac:fb:85:47:36:32:ff:42:4b:14:a2:43:85:b5:
df:15:bb:52:80:77:e1:3b:49:cb:5b:12:d6:de:d9:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A8:D2:AE:C0:37:C1:55:D2:31:D1:D7:91:CD:B0:B4:6C:05:42:D1
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ea:ef:cb:ab:2c:48:9d:15:19:f8:e5:ae:a5:82:93:66:97:
d0:84:e0:54:03:2b:52:ec:e5:de:19:71:70:9e:f6:84:cc:5f:
2f:eb:df:a2:be:c8:8b:2c:06:20:46:bc:20:67:15:83:86:fb:
d9:3e:24:d0:e3:b8:bc:0d:82:25:2b:e9:cb:92:5f:b6:fe:5b:
bb:1d:f4:df:9d:07:23:59:48:1c:09:58:00:45:71:d2:52:6d:
1c:25:e5:1a:c2:82:dc:b4:7f:ed:1d:2b:05:ce:a5:44:d6:78:
18:58:af:4f:22:e2:e5:07:94:43:f6:5b:e9:27:08:a3:6d:1e:
f1:ff:c7:77:d1:95:14:c8:95:d0:b6:8e:79:eb:07:f0:49:f9:
5e:bc:17:95:30:e9:08:c0:6e:90:b0:fb:13:35:25:f0:60:e8:
42:1e:39:42:85:95:00:1b:ca:bb:55:d6:68:6c:d7:5f:df:37:
38:ae:64:1f:9e:4a:1f:98:8a:f9:ab:29:aa:27:f6:9b:5a:0e:
9f:8a:61:33:83:48:56:aa:53:b2:9b:bb:28:cb:5b:01:43:75:
81:0b:4e:17:28:cd:1b:b2:3a:32:35:f0:d8:b5:db:43:99:f2:
02:4f:56:aa:78:cd:b0:ab:8e:66:a9:87:52:ed:10:51:63:62:
ff:ec:31:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSIyKY5w5H4x+DQaXQ+t6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWFiYTNjMmY1NjI4M2NlNWM3NGJjZTQwNTg0NGMxNTkx
YmFiZmMwHhcNMjYwNjEzMTQwMDE3WhcNMjYwNjE0MTQwMDE3WjAzMTEwLwYDVQQD
EyhlNmE4ZDJhZWMwMzdjMTU1ZDIzMWQxZDc5MWNkYjBiNDZjMDU0MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l9HJVn78bYOZt+BCd4gPcjh0i23
xeibpB0YWYOcC17bm5pEX87YhGYMyubYleb8UfViA9kUpSge4n9VxgEC2jDGcSiG
9jTkC1qRoRYaGq5P2Q5u0eBR3j0IWOC7vlOXwkTfYt1YplVAO9TAuDFIxu2XPcsz
Ie/WxxGgzc3adYY+DOd44TVymvNiFF92NlF0y4JVjh67SZHZsTIT3OwpBLl5sB4O
DxLKfssePhQWjihc0SypdKLTPiZoVK5ZSVM1CP+GNmxU9/YjYCWcTljqlAXRD274
c162q+GRbvpa41U2rPuFRzYy/0JLFKJDhbXfFbtSgHfhO0nLWxLW3tkO8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOao0q7AN8FV0jHR15HNsLRsBULRMB8GA1UdIwQY
MBaAFOMaujwvVig85cdLzkBYRMFZG6v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgt
NWYyODEzN2E3NjU4LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgtNWYyODEzN2E3NjU4
LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApervy6ss
SJ0VGfjlrqWCk2aX0ITgVAMrUuzl3hlxcJ72hMxfL+vfor7IiywGIEa8IGcVg4b7
2T4k0OO4vA2CJSvpy5Jftv5bux30350HI1lIHAlYAEVx0lJtHCXlGsKC3LR/7R0r
Bc6lRNZ4GFivTyLi5QeUQ/Zb6ScIo20e8f/Hd9GVFMiV0LaOeesH8En5XrwXlTDp
CMBukLD7EzUl8GDoQh45QoWVABvKu1XWaGzXX983OK5kH55KH5iK+aspqif2m1oO
n4phM4NIVqpTspu7KMtbAUN1gQtOFyjNG7I6MjXw2LXbQ5nyAk9WqnjNsKuOZqmH
Uu0QUWNi/+wxvw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:35 2026 by rpki-client