Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: L3v2/pQokf5+HPnJ+tE6oLre1WcqUD/zFC6uzxYkPD8=
Subject key identifier: 32:89:0F:43:56:D1:67:53:32:24:73:94:32:24:1F:7B:88:80:F1:73
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 019EBE48122EDAF852646DE42E55BB140DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 1538
Signing time: Sat 13 Jun 2026 00:00:54 +0000
Manifest this update: Sat 13 Jun 2026 00:00:54 +0000
Manifest next update: Sun 14 Jun 2026 00:00:54 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: WLB3/pTDOs5sh6GIRYr3nUzFhORyXlnE5kBQK1hVSCY=)
2: R3kq7Tu6gRsTs905XA3OIx0hnx8.asa (hash: i0v0le2V8KgOYY+tMlhW7yajuhdDrHP/SvNGEb/LiEQ=)
3: XT_1jof6p0-6Rq9yGMKNddmG5gc.roa (hash: zoD4X0KwRY+rISekdKuEzTq6itAQw0dp7xwB+9IQQEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:12:2e:da:f8:52:64:6d:e4:2e:55:bb:14:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Jun 13 00:00:54 2026 GMT
Not After : Jun 14 00:00:54 2026 GMT
Subject: CN=32890f4356d167533224739432241f7b8880f173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:f8:cd:e9:e4:21:fd:59:8d:24:aa:16:5f:
47:80:bc:88:60:04:0b:1c:4e:d9:2d:8d:70:23:60:
61:0c:85:02:8c:5a:6d:59:d0:bb:11:e9:dc:8b:4f:
9f:1b:e4:ff:74:67:22:ed:12:b3:de:3b:86:a2:17:
48:38:81:6a:ba:3b:52:5b:59:cd:97:c9:7f:07:6f:
e1:76:93:44:84:5c:a7:3e:19:85:8b:07:ea:bc:83:
d9:26:74:5d:35:bb:36:ca:52:b7:e2:d0:17:8e:13:
78:61:29:c7:3a:f3:3c:2f:22:29:84:ab:86:6a:a2:
a0:9e:6e:ca:1d:e1:48:53:2b:3b:16:28:8c:11:9f:
10:c1:97:81:cc:21:83:7b:8c:c9:79:5f:d4:ee:98:
29:d0:c2:a7:c4:72:4d:5a:d4:39:1d:1f:01:08:63:
f7:55:a8:9b:35:ec:5e:38:11:ab:25:00:70:45:fc:
a3:b8:9e:eb:a0:9b:cc:53:48:8d:a0:6e:65:4a:4b:
75:c0:05:b2:f0:b5:31:58:78:40:1f:51:f2:4c:8c:
a2:42:9c:b9:fd:5f:34:0a:21:87:3d:d7:e8:74:d3:
53:1c:8b:59:7f:1c:a4:65:18:e3:9b:53:ba:0c:e1:
4e:7e:5e:57:05:33:cf:9f:56:a2:df:09:8c:9c:b5:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:89:0F:43:56:D1:67:53:32:24:73:94:32:24:1F:7B:88:80:F1:73
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:af:44:0f:7d:82:80:2c:76:36:85:23:ba:aa:f8:e8:53:66:
d7:05:a2:da:3d:5c:07:4e:3d:ed:b4:5d:02:0a:04:5e:01:a2:
57:c8:44:86:c3:04:8f:45:4e:12:42:54:52:ad:1a:48:31:ac:
e3:88:b4:f2:38:76:36:9c:87:12:c8:41:e5:f5:a0:14:14:76:
87:f6:e5:ca:d0:7b:06:c2:93:02:a9:89:df:0a:8a:94:5e:e9:
6c:5a:cf:d2:32:5a:5c:1c:bc:3f:6d:41:0c:80:ee:ab:1a:a8:
48:09:11:4c:59:f1:d8:96:ff:7d:5d:0a:a3:7f:6d:f9:bf:f5:
ef:4e:c2:85:aa:10:9b:02:50:02:a6:c7:ac:df:a6:8b:4e:e6:
25:cc:1c:ad:39:85:d8:47:ff:db:06:82:b2:c4:ac:e5:15:28:
4f:e4:c9:56:75:09:1f:a3:ea:98:61:b5:f0:26:ff:d6:2b:4e:
c6:cd:73:dc:37:f9:88:bd:9f:a9:fe:90:c5:0f:f8:0f:8f:84:
83:c6:06:80:29:c1:7a:98:4c:9a:b5:1f:1f:4a:62:57:b6:92:
c3:44:03:7b:29:67:a1:2f:ed:85:b0:80:05:9a:ca:62:59:b1:
73:eb:27:2a:25:d0:d8:39:5d:94:df:76:ac:91:8f:5d:7e:18:
82:81:c3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:21:06 2026 by rpki-client