Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: WVDHJwQ+xSdeKzRBX6b09+DB0gZrd9CFlz3ixr8m5Bg=
Subject key identifier: 6A:3D:A1:0E:83:F5:F0:C0:B2:0A:31:A9:C9:D5:5F:CA:16:19:4C:71
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019EBFFF3478E4AC067F1DAFED6CD77B976C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 148D
Signing time: Sat 13 Jun 2026 08:00:33 +0000
Manifest this update: Sat 13 Jun 2026 08:00:33 +0000
Manifest next update: Sun 14 Jun 2026 08:00:33 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: KJ5r5Ek7ldCfDki/r7ZRdSaaifjCR1RUdbdVbh8NKgg=)
2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
3: ObqCC5ItaIb9zSaMr1gSLuQWW7g.roa (hash: z8qeiKJfszyHlpziW66XElBOILDVztPeTixCMaYCXnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:34:78:e4:ac:06:7f:1d:af:ed:6c:d7:7b:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Jun 13 08:00:33 2026 GMT
Not After : Jun 14 08:00:33 2026 GMT
Subject: CN=6a3da10e83f5f0c0b20a31a9c9d55fca16194c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:04:9c:43:99:e3:8b:6d:07:50:db:a4:42:
f1:bb:15:c3:24:ce:90:a0:61:24:84:a6:36:1c:5f:
33:ed:6b:56:63:c6:e4:77:d4:26:54:51:c7:ba:f9:
28:c5:e2:29:60:74:83:70:78:24:71:6d:6d:93:24:
fb:cc:bc:3a:0c:b7:43:ea:17:2a:fd:24:8a:f1:1e:
2e:83:71:9b:ab:24:c0:73:ff:0e:91:39:5b:28:64:
fc:ea:1a:c2:cd:2c:4e:a1:e7:5a:c2:de:77:85:96:
67:30:34:3c:d1:99:03:b8:d0:10:aa:ca:0c:fd:68:
00:5e:d4:68:ea:4f:1e:68:f5:5f:50:05:94:36:fb:
ff:f0:d7:fc:41:cd:b5:ed:86:54:7d:d5:1e:7b:04:
64:30:58:25:be:40:3b:1b:4f:39:0e:17:83:73:fb:
1d:c7:dd:8a:0b:da:98:22:56:83:6d:09:c8:51:85:
4f:d4:09:4b:67:af:f1:65:56:2f:84:ff:0f:66:00:
c6:65:0a:df:a8:5b:0d:e5:b2:d8:64:90:d6:f5:b0:
c0:18:30:bc:36:d5:6a:de:ba:a1:06:a9:62:aa:4f:
e7:19:d4:92:78:77:ec:13:e6:ad:fb:62:cf:f0:7c:
2d:c7:ed:bf:ac:cf:e8:dd:2d:38:57:62:ad:f7:0d:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3D:A1:0E:83:F5:F0:C0:B2:0A:31:A9:C9:D5:5F:CA:16:19:4C:71
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:30:7a:03:0f:5a:4f:51:56:d2:06:9f:79:89:25:b8:ba:e5:
09:cc:aa:13:c7:6f:6d:f5:a5:6b:d8:8e:9e:d1:f5:b8:b7:88:
b3:61:20:c0:35:fc:94:a8:3e:dc:60:2c:4b:da:5f:51:d0:76:
6b:43:22:19:63:31:89:fc:98:3e:16:e0:f8:7f:72:fc:c9:46:
c5:df:e1:fa:28:76:73:ee:7d:d0:8d:24:e6:0d:73:36:87:28:
79:2e:49:f2:5b:8a:2c:a9:ed:34:28:46:87:a8:52:c1:31:44:
90:47:3a:8c:bd:9e:98:1a:e5:ed:29:3c:36:2a:c4:52:39:0f:
d0:50:be:5c:5c:ae:d0:4a:e2:95:0d:68:75:92:cf:91:61:ff:
f4:e3:5c:8b:d6:f0:a6:f8:ad:81:7a:db:c8:10:47:79:79:bf:
24:b1:79:92:22:92:0b:30:c1:b9:bb:6e:63:73:34:0c:93:6e:
e1:ad:2d:a4:eb:58:4c:7a:03:58:56:26:02:7d:67:fb:bd:e9:
48:06:ea:25:4e:ad:48:1b:d6:40:6d:47:31:96:d2:ab:fa:b1:
e9:fc:9b:5d:d9:11:44:4d:76:b7:23:18:da:98:ed:98:7b:50:
a2:54:ca:3c:a4:6c:33:bc:93:ff:36:9c:06:a4:ee:c6:04:92:
e7:63:fb:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//zR45KwGfx2v7WzXe5dsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWRiMGM1YjJkOTYxMGVmNTg2ZTk3ZmJhMWZjYTg3NTAw
NmYzZGEwHhcNMjYwNjEzMDgwMDMzWhcNMjYwNjE0MDgwMDMzWjAzMTEwLwYDVQQD
Eyg2YTNkYTEwZTgzZjVmMGMwYjIwYTMxYTljOWQ1NWZjYTE2MTk0YzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbMEnEOZ44ttB1DbpELxuxXDJM6Q
oGEkhKY2HF8z7WtWY8bkd9QmVFHHuvkoxeIpYHSDcHgkcW1tkyT7zLw6DLdD6hcq
/SSK8R4ug3GbqyTAc/8OkTlbKGT86hrCzSxOoedawt53hZZnMDQ80ZkDuNAQqsoM
/WgAXtRo6k8eaPVfUAWUNvv/8Nf8Qc217YZUfdUeewRkMFglvkA7G085DheDc/sd
x92KC9qYIlaDbQnIUYVP1AlLZ6/xZVYvhP8PZgDGZQrfqFsN5bLYZJDW9bDAGDC8
NtVq3rqhBqliqk/nGdSSeHfsE+at+2LP8Hwtx+2/rM/o3S04V2Kt9w3JGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo9oQ6D9fDAsgoxqcnVX8oWGUxxMB8GA1UdIwQY
MBaAFOGdsMWy2WEO9Ybpf7ofyodQBvPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQt
MGNmNzRiZTMwM2ZmLzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQtMGNmNzRiZTMwM2Zm
LzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDB6Aw9a
T1FW0gafeYkluLrlCcyqE8dvbfWla9iOntH1uLeIs2EgwDX8lKg+3GAsS9pfUdB2
a0MiGWMxifyYPhbg+H9y/MlGxd/h+ih2c+590I0k5g1zNocoeS5J8luKLKntNChG
h6hSwTFEkEc6jL2emBrl7Sk8NirEUjkP0FC+XFyu0ErilQ1odZLPkWH/9ONci9bw
pvitgXrbyBBHeXm/JLF5kiKSCzDBubtuY3M0DJNu4a0tpOtYTHoDWFYmAn1n+73p
SAbqJU6tSBvWQG1HMZbSq/qx6fybXdkRRE12tyMY2pjtmHtQolTKPKRsM7yT/zac
BqTuxgSS52P7oA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:34:55 2026 by rpki-client