Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: JUDV8IMshOPkgfyFmN75QsKgxQZdf9BRAuvYY46tt58=
Subject key identifier: 30:DD:32:A1:93:54:C5:F5:BF:6D:01:22:CA:BE:15:56:26:55:E4:E5
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 019EC2C9950F999EDBC3105FF44F9376F843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 1040
Signing time: Sat 13 Jun 2026 21:00:51 +0000
Manifest this update: Sat 13 Jun 2026 21:00:51 +0000
Manifest next update: Sun 14 Jun 2026 21:00:51 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: gsZtQ+UCCAsq4va0uS1is42HAI2DyOHzsDaydJF6tTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:95:0f:99:9e:db:c3:10:5f:f4:4f:93:76:f8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Jun 13 21:00:51 2026 GMT
Not After : Jun 14 21:00:51 2026 GMT
Subject: CN=30dd32a19354c5f5bf6d0122cabe15562655e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:50:52:72:c6:da:c1:56:1b:56:a2:1d:6e:db:
e9:8c:dd:5b:6f:97:4f:e9:a3:ab:16:64:08:13:ca:
ed:a2:69:b1:e1:5c:b4:94:b0:a3:4b:aa:50:63:82:
3d:95:93:a4:46:e3:e5:3b:7f:6e:0b:d4:a2:5a:c6:
c6:56:a7:fc:f0:fc:cb:42:32:f9:88:1a:29:6e:e9:
3f:ff:fa:22:78:fd:7e:13:b0:f2:e6:0c:97:20:55:
96:72:a2:ad:2f:42:23:00:82:5c:52:f8:5d:e7:a5:
5a:3d:44:fe:ce:10:85:e9:ac:2f:b2:e1:ba:b3:d1:
97:ea:c3:43:07:af:23:a7:19:1d:48:92:e9:71:78:
5e:6b:4c:51:ba:62:28:56:5f:e9:e0:ed:72:2e:89:
27:ed:cd:fa:58:14:5a:d7:32:75:6f:de:80:3f:ca:
a6:d2:42:f2:cc:73:1e:8c:4b:61:62:71:1c:19:c1:
7b:6e:1d:5f:ce:ed:e1:2f:1c:6f:7a:53:63:86:6b:
87:f4:44:67:a5:1b:2a:1a:fe:55:56:96:5f:50:f4:
4b:6c:92:d1:e1:ff:f8:07:73:83:3c:78:89:81:c7:
92:9b:3b:d4:dc:26:63:56:fc:ea:e4:53:22:fe:94:
4c:68:20:f0:e4:30:37:5c:69:7a:f5:5a:26:9a:95:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:32:A1:93:54:C5:F5:BF:6D:01:22:CA:BE:15:56:26:55:E4:E5
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:90:54:60:7f:8d:16:bd:67:70:cf:36:9b:13:d2:dc:af:88:
33:75:aa:61:64:d6:0f:6d:bb:b3:ef:b6:e9:55:03:62:db:5e:
e9:44:17:c0:c3:3f:66:0d:9c:d5:bd:7b:13:c4:54:87:6e:8a:
48:55:6d:8b:1c:d6:75:1a:c1:86:89:81:e1:72:31:6a:0a:4b:
44:3f:c5:e8:a0:d1:bb:69:b3:09:fc:f5:90:1c:f7:de:9e:72:
16:dd:c4:1e:df:f9:99:4c:73:f4:32:28:ad:f8:30:73:ef:1a:
44:99:5b:5c:e7:6d:f1:e6:d8:76:89:22:73:c1:49:73:8b:f1:
e6:b8:7b:4f:16:c4:99:ab:4c:0e:9a:cc:c3:2e:dc:d4:a4:e5:
44:ab:b3:f4:49:fb:ae:ee:48:d4:13:25:92:dc:25:4d:89:3d:
31:c2:69:61:ed:a5:88:98:58:49:a7:47:dd:7a:17:d7:14:07:
55:e8:1e:3f:bb:5f:8c:1c:1c:9d:f6:80:b7:78:2c:d9:86:3f:
95:76:00:97:18:6d:f6:be:d8:fa:12:de:92:18:7e:06:92:19:
67:e9:90:62:6d:30:a0:a8:ee:b5:21:7f:f8:6c:32:b4:53:16:
5a:a1:28:6a:a2:4f:5c:42:52:a5:92:17:03:d4:c7:34:2f:7b:
28:3b:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:05 2026 by rpki-client