
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier: WIvysDDjKhT3Waj1IPaKdFPTaLeaUYb62jm85Xx/pik=
Subject key identifier: CF:9C:89:B4:D7:9D:F4:51:E2:27:E1:7B:34:30:C0:56:0F:07:26:F0
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 019EBEED404D9BF06860F44CC7F1EBABDDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 03:01:19 +0000
Manifest this update: Sat 13 Jun 2026 03:01:19 +0000
Manifest next update: Sun 14 Jun 2026 03:01:19 +0000
Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: NgkS/5piw3OQMvmHsdpoXdrNSmPc4zpk0j+ylAmxS5w=)
2: Rn2NWJkYlmshYFgoPzIuXMYWVGc.roa (hash: JJzFZmd7A4HTxXMIGqGZ67CiVP4Sj1WJIj0x7HOLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:40:4d:9b:f0:68:60:f4:4c:c7:f1:eb:ab:dd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Jun 13 03:01:19 2026 GMT
Not After : Jun 14 03:01:19 2026 GMT
Subject: CN=cf9c89b4d79df451e227e17b3430c0560f0726f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:66:08:b5:bd:d3:2a:86:71:86:3f:00:75:
fe:60:69:58:a7:dd:82:94:fe:7a:02:97:39:5d:31:
26:64:85:ca:7a:7d:d5:74:92:ca:54:e1:8c:0e:81:
e7:69:11:99:e6:f8:36:43:24:4f:f7:cc:8a:b1:31:
2b:58:45:20:05:d8:28:01:ec:44:e7:03:ca:e1:9d:
11:2e:a2:c0:de:e5:c4:86:2c:9b:6a:74:9b:5c:8f:
b8:e0:23:b5:6a:9a:f1:8d:b0:7b:64:93:34:e2:d5:
73:99:91:9c:f5:1e:02:4b:48:e0:fa:c9:45:03:de:
01:b3:78:ef:30:7d:5f:fc:33:df:6e:8a:bd:ce:cf:
c5:6a:e3:d9:47:a7:f8:bf:c8:c7:ab:00:e8:72:62:
1b:12:ba:63:5a:c4:e6:b6:2c:5a:a1:fb:f9:f4:14:
c4:0d:10:cf:bf:83:be:f9:10:1a:de:06:dd:90:bc:
a6:3a:78:65:32:bf:ad:7c:59:10:ff:21:87:b8:13:
68:cc:85:9c:15:1a:46:49:45:b8:ef:ba:24:4b:cd:
30:fa:60:90:b0:13:45:5a:04:d2:a6:6f:7d:8e:4f:
30:58:2d:c1:9d:14:f0:aa:dd:44:4d:23:8c:92:55:
d1:09:90:b1:b2:48:ec:e7:64:2b:77:6a:7f:c0:1e:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:89:B4:D7:9D:F4:51:E2:27:E1:7B:34:30:C0:56:0F:07:26:F0
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:15:e0:cf:3b:d8:bc:b1:4a:44:6c:1c:2d:d6:bf:73:94:5f:
0f:b3:62:7d:6c:9f:24:45:b5:1c:e8:fa:91:5c:83:ba:27:c9:
fa:58:0d:ba:c9:af:c4:22:ed:a1:0d:93:32:c0:ca:a5:66:dd:
11:d9:ea:10:0c:e6:fe:89:82:21:37:3f:0f:e6:07:c0:ab:ef:
a0:7b:22:50:83:2f:92:f2:c5:4b:30:c8:38:4d:19:02:db:c5:
41:74:9e:19:b3:eb:01:89:36:6d:1d:d5:25:21:61:da:de:61:
72:e8:95:55:72:9d:d5:99:83:ad:3e:46:ab:ad:91:ea:9d:9d:
3d:87:bd:b3:6a:36:36:43:b6:0d:0a:86:e9:8a:57:4b:14:6a:
48:91:33:34:1d:8c:27:08:b6:29:34:34:43:46:81:6e:dd:54:
d8:de:c8:55:e6:28:bf:61:f7:23:6f:0f:5a:4b:72:93:d0:43:
0e:ff:71:19:1f:a9:76:01:7d:4e:44:c4:59:ba:6c:c4:b7:5e:
d0:4b:15:02:52:bf:02:ac:63:3c:24:74:e5:cc:12:96:fc:83:
e4:8a:d4:77:94:f6:6b:80:6b:1a:ca:fa:33:54:af:bf:30:21:
f2:a3:6d:ce:3e:82:a0:68:61:f2:01:c4:8c:45:6e:91:81:34:
33:c3:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:11 2026 by rpki-client