Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: R6qoJaOUAsW4n9GEBstYwaWFiz4+galKQB1E7VuDkJg=
Subject key identifier: 23:28:A5:2B:75:9F:2A:DB:BF:01:16:CB:F4:4F:F8:B9:78:E8:65:6B
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 019EC2921771896151714D15526FD0638B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 0B08
Signing time: Sat 13 Jun 2026 20:00:14 +0000
Manifest this update: Sat 13 Jun 2026 20:00:14 +0000
Manifest next update: Sun 14 Jun 2026 20:00:14 +0000
Files and hashes: 1: OBJUqWKdq6kiQbp0gg2le_lxwc8.roa (hash: Q6TNVRFJT35RFtqmG8IVN0WlQLvaNhPi6XH41fNOOas=)
2: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: 0HR8jjYYVhcCUzgQrTt6GkFxXUyTf6NMRCygHqteD5s=)
3: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (hash: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:17:71:89:61:51:71:4d:15:52:6f:d0:63:8b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Jun 13 20:00:14 2026 GMT
Not After : Jun 14 20:00:14 2026 GMT
Subject: CN=2328a52b759f2adbbf0116cbf44ff8b978e8656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:52:d5:6b:1e:1b:08:44:fd:40:46:0c:36:
74:4b:15:2c:9a:dd:15:c5:c3:67:13:ce:1e:98:9d:
a6:77:ea:96:5e:26:67:17:93:23:e0:25:31:9e:50:
4e:cd:c8:46:94:b5:57:0a:72:28:7c:b0:d0:37:c1:
77:5f:78:b5:b4:b9:12:e6:e9:17:86:36:96:78:35:
38:46:f3:aa:f6:49:3d:06:09:01:a8:4d:8d:6a:5a:
81:de:a9:7b:38:e6:e7:6f:76:94:34:23:39:97:69:
0e:bb:97:92:e1:a4:7b:b0:ac:73:de:2e:ef:7b:fc:
0c:76:5c:3f:15:41:71:86:c2:60:55:0b:83:1b:6a:
a7:53:c5:14:6e:8b:cb:25:e6:e1:b4:cb:91:5e:6b:
a1:f8:d4:4d:cd:46:c0:f9:18:fd:2b:a4:af:ab:43:
c8:fc:19:a4:c7:1c:31:90:22:a6:99:ea:55:f3:e2:
4f:ae:e2:3b:30:b2:e8:6c:a7:5f:fc:99:65:39:52:
f1:07:30:0c:81:ee:ff:76:9f:23:9e:94:97:c4:f7:
6d:4e:34:b2:a3:cc:5e:73:77:c8:f8:c0:22:6d:60:
1d:bd:f4:35:19:9a:6f:9c:be:8e:e3:e1:7d:be:32:
37:90:7e:30:a2:80:f8:fc:4b:e9:ff:6e:57:ab:3a:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:28:A5:2B:75:9F:2A:DB:BF:01:16:CB:F4:4F:F8:B9:78:E8:65:6B
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3f:e0:ed:e3:bb:4f:10:37:44:f0:25:64:17:f7:b7:e1:93:
bd:e9:df:1c:75:3d:18:0e:e5:40:32:c8:22:fc:58:0d:b1:49:
04:10:7a:87:de:f9:2d:ba:50:0f:7f:ed:3d:d2:a9:a5:6a:01:
e5:50:fa:b6:30:42:56:da:a4:ba:db:90:d9:df:2d:fb:59:1b:
04:65:32:50:a5:36:f0:0d:f0:91:ea:c6:ba:05:05:d1:63:61:
ca:78:b7:0c:0b:70:1c:10:39:33:52:ce:fc:08:1e:a4:53:c0:
53:43:eb:cd:a5:84:eb:b2:91:42:c8:aa:c3:35:de:70:72:9b:
3f:85:6f:80:41:44:86:92:2c:5f:22:9e:3b:f5:8c:23:41:cb:
f4:6a:74:2e:fb:7e:0c:dc:50:19:84:59:a0:5d:b6:9f:fb:fc:
d2:43:ac:de:65:ba:ca:da:63:45:f6:f4:95:fb:f3:6e:dd:75:
ad:c8:24:86:f0:7e:21:83:ff:d1:2b:b9:7a:0c:85:4a:d5:db:
f5:bf:77:ad:37:44:cc:fe:a2:ec:72:f2:4d:1e:37:cb:89:74:
e6:1c:70:37:95:0f:50:25:cd:b6:c5:d8:5e:e5:db:f9:b3:4c:
10:ab:03:c6:b7:bf:f8:de:e5:43:7c:f7:f6:8f:86:52:e3:7c:
be:1e:dd:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CkhdxiWFRcU0VUm/QY4t/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3
ZGU1YzQwHhcNMjYwNjEzMjAwMDE0WhcNMjYwNjE0MjAwMDE0WjAzMTEwLwYDVQQD
EygyMzI4YTUyYjc1OWYyYWRiYmYwMTE2Y2JmNDRmZjhiOTc4ZTg2NTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nZS1WseGwhE/UBGDDZ0SxUsmt0V
xcNnE84emJ2md+qWXiZnF5Mj4CUxnlBOzchGlLVXCnIofLDQN8F3X3i1tLkS5ukX
hjaWeDU4RvOq9kk9BgkBqE2NalqB3ql7OObnb3aUNCM5l2kOu5eS4aR7sKxz3i7v
e/wMdlw/FUFxhsJgVQuDG2qnU8UUbovLJebhtMuRXmuh+NRNzUbA+Rj9K6Svq0PI
/BmkxxwxkCKmmepV8+JPruI7MLLobKdf/JllOVLxBzAMge7/dp8jnpSXxPdtTjSy
o8xec3fI+MAibWAdvfQ1GZpvnL6O4+F9vjI3kH4wooD4/Evp/25XqzqZ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMopSt1nyrbvwEWy/RP+Ll46GVrMB8GA1UdIwQY
MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt
NjJiMWRhMjYxMzI5LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5
LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEj/g7eO7
TxA3RPAlZBf3t+GTvenfHHU9GA7lQDLIIvxYDbFJBBB6h975LbpQD3/tPdKppWoB
5VD6tjBCVtqkutuQ2d8t+1kbBGUyUKU28A3wkerGugUF0WNhyni3DAtwHBA5M1LO
/AgepFPAU0PrzaWE67KRQsiqwzXecHKbP4VvgEFEhpIsXyKeO/WMI0HL9Gp0Lvt+
DNxQGYRZoF22n/v80kOs3mW6ytpjRfb0lfvzbt11rcgkhvB+IYP/0Su5egyFStXb
9b93rTdEzP6i7HLyTR43y4l05hxwN5UPUCXNtsXYXuXb+bNMEKsDxre/+N7lQ3z3
9o+GUuN8vh7dgQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:54 2026 by rpki-client