Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: pW91Eyyq4z7gpMOX5sjGzOx9zPCALEy20Ztej4+cEa8=
Subject key identifier: A8:4D:54:CE:21:E8:F3:A0:85:DC:B1:EA:3D:B9:34:5E:03:FE:F9:5B
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 019EC1EE45CF06EFB8E3D4C87B8C59B74C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: 0133
Signing time: Sat 13 Jun 2026 17:01:18 +0000
Manifest this update: Sat 13 Jun 2026 17:01:18 +0000
Manifest next update: Sun 14 Jun 2026 17:01:18 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: YZIZNyy7aKEIczBNYn7LhTbXnN0VUZk/SqRPgtNqQ64=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:45:cf:06:ef:b8:e3:d4:c8:7b:8c:59:b7:4c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Jun 13 17:01:18 2026 GMT
Not After : Jun 14 17:01:18 2026 GMT
Subject: CN=a84d54ce21e8f3a085dcb1ea3db9345e03fef95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:01:de:ea:75:29:d9:27:da:50:c2:5d:92:
b0:f6:9f:25:34:07:3c:11:c4:d4:52:3a:b1:01:47:
5a:74:96:22:b4:18:e7:33:82:00:32:a9:ed:82:06:
7a:b1:5a:06:ce:99:dc:de:c7:0f:60:17:4b:a1:e3:
a0:53:c9:0a:fa:e2:b3:dd:3c:14:b6:6a:23:11:3d:
a8:45:ec:2a:8f:da:38:5f:07:4c:8e:6f:66:13:6f:
c7:64:42:0c:ce:6f:c8:d0:47:37:a4:5e:85:83:be:
04:16:ad:e7:50:06:84:99:98:f6:11:39:d4:19:1a:
b9:a5:bd:75:5e:45:f3:4c:6c:85:6b:9a:89:22:00:
0d:9b:b9:66:1d:f6:cd:d0:47:c1:6b:9d:26:9c:51:
e8:01:d8:d5:24:9e:8e:34:67:aa:fa:18:86:f2:e2:
8c:e8:0b:49:5f:bc:bf:d3:dc:d3:14:10:4b:c4:1e:
35:b8:f4:dc:2d:92:db:19:34:4e:cb:a5:d8:94:e3:
98:0f:75:55:d8:65:32:77:30:fe:bd:29:54:f6:b7:
75:99:b0:15:37:da:c1:f3:8b:51:32:8f:34:b2:04:
2c:6a:dc:84:c3:21:f7:ab:fb:18:11:2a:93:e0:33:
04:3f:c7:0e:61:44:6f:66:32:14:d2:7b:77:62:9c:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4D:54:CE:21:E8:F3:A0:85:DC:B1:EA:3D:B9:34:5E:03:FE:F9:5B
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:a3:08:10:99:a2:97:23:b7:93:fc:2d:63:b4:b3:57:72:
6a:16:74:bc:58:78:6b:74:4c:69:3e:ee:05:d2:68:62:2e:b7:
57:3e:8b:5d:23:77:42:c0:1f:6d:8c:93:81:2b:96:6d:97:ee:
a7:2c:c2:02:72:0a:10:c1:0d:a6:c7:61:db:14:5c:42:a6:41:
55:12:0b:99:e8:06:04:00:f7:2b:e2:f4:6b:76:89:20:1d:55:
f7:98:dc:8e:36:f0:cb:7e:cb:c3:2b:74:23:ab:c6:1f:2c:e2:
f3:c8:93:bb:f5:3f:a8:d6:e1:c6:52:6b:24:12:12:2c:3c:04:
88:2a:af:30:74:24:71:8a:31:eb:b6:24:5d:cc:47:3a:e8:e9:
7b:bc:6c:c1:24:03:3f:5a:47:ab:a2:a4:3f:17:e4:b4:ed:9f:
cd:7b:6e:df:33:cd:9b:53:63:af:e6:bd:f4:b7:4e:90:61:75:
0a:e4:55:31:63:88:fc:99:ac:c5:0a:f7:d5:74:d1:1e:8d:bd:
b6:58:dd:93:9f:6c:12:a0:b5:1f:20:99:7f:d8:0a:bc:57:8a:
a4:8c:ff:7f:e3:5f:23:1d:20:97:89:b7:98:c9:be:56:1a:5b:
cf:7f:42:e1:39:48:55:6e:c7:bd:14:d4:25:c0:aa:e4:c4:ea:
a1:f0:ca:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7kXPBu+449TIe4xZt0wMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjhiZDBkMjVlNTVhYzFhNDJhODRjMmEzYjljODkwODM2
MWQ2ZTEwHhcNMjYwNjEzMTcwMTE4WhcNMjYwNjE0MTcwMTE4WjAzMTEwLwYDVQQD
EyhhODRkNTRjZTIxZThmM2EwODVkY2IxZWEzZGI5MzQ1ZTAzZmVmOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAsB3up1Kdkn2lDCXZKw9p8lNAc8
EcTUUjqxAUdadJYitBjnM4IAMqntggZ6sVoGzpnc3scPYBdLoeOgU8kK+uKz3TwU
tmojET2oRewqj9o4XwdMjm9mE2/HZEIMzm/I0Ec3pF6Fg74EFq3nUAaEmZj2ETnU
GRq5pb11XkXzTGyFa5qJIgANm7lmHfbN0EfBa50mnFHoAdjVJJ6ONGeq+hiG8uKM
6AtJX7y/09zTFBBLxB41uPTcLZLbGTROy6XYlOOYD3VV2GUydzD+vSlU9rd1mbAV
N9rB84tRMo80sgQsatyEwyH3q/sYESqT4DMEP8cOYURvZjIU0nt3YpySowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhNVM4h6POghdyx6j25NF4D/vlbMB8GA1UdIwQY
MBaAFOJovQ0l5VrBpCqEwqO5yJCDYdbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kMmI4NmItMWFiOC00NTc0LWJlOGIt
OGMzMjJlNzQzN2U0LzEvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kMmI4NmItMWFiOC00NTc0LWJlOGItOGMzMjJlNzQzN2U0
LzEvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGCjCBCZ
opcjt5P8LWO0s1dyahZ0vFh4a3RMaT7uBdJoYi63Vz6LXSN3QsAfbYyTgSuWbZfu
pyzCAnIKEMENpsdh2xRcQqZBVRILmegGBAD3K+L0a3aJIB1V95jcjjbwy37Lwyt0
I6vGHyzi88iTu/U/qNbhxlJrJBISLDwEiCqvMHQkcYox67YkXcxHOujpe7xswSQD
P1pHq6KkPxfktO2fzXtu3zPNm1Njr+a99LdOkGF1CuRVMWOI/JmsxQr31XTRHo29
tljdk59sEqC1HyCZf9gKvFeKpIz/f+NfIx0gl4m3mMm+Vhpbz39C4TlIVW7HvRTU
JcCq5MTqofDKew==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:08:56 2026 by rpki-client