
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: UDNqHihXCe0KKAO6qscuC1sZJZbpihQV/FAu5UqWlas=
Subject key identifier: B8:94:78:12:DF:0C:AC:9F:12:D6:46:61:58:29:59:D2:3B:B9:47:D8
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019EBF23D880113EC88120660409E5F21373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 04:00:57 +0000
Manifest this update: Sat 13 Jun 2026 04:00:57 +0000
Manifest next update: Sun 14 Jun 2026 04:00:57 +0000
Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: h9rv6pfrwpmdHkr9t/NzlxzxRaep9dzpmtbQG8QFlHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:d8:80:11:3e:c8:81:20:66:04:09:e5:f2:13:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jun 13 04:00:57 2026 GMT
Not After : Jun 14 04:00:57 2026 GMT
Subject: CN=b8947812df0cac9f12d64661582959d23bb947d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:d1:15:e6:71:59:46:f6:c5:a9:25:fb:69:
a0:92:6f:9c:2c:20:a7:7b:79:75:ca:ea:ba:3f:13:
32:62:6c:f5:15:52:cd:85:ea:28:e1:b6:bb:db:59:
e2:64:53:84:58:bc:33:84:c5:0c:ad:61:81:2e:0c:
d4:91:4b:88:4f:98:3a:18:6d:a2:f0:b3:6d:a0:d6:
9d:80:32:ee:3a:8b:23:2f:3e:fe:d1:f3:f5:4a:4a:
1f:0c:7f:7b:6b:5d:cb:5e:06:94:fb:18:d5:cc:58:
01:c9:28:ed:c9:9a:59:61:27:9d:91:b9:ab:6b:0e:
23:05:48:87:86:43:bd:5b:6a:a8:22:b3:54:90:f3:
21:78:2d:a6:8c:64:6a:a4:2d:d8:9a:f2:3f:1b:e4:
9f:5e:e9:42:3c:23:9d:54:78:e7:ea:62:ca:cb:49:
a3:01:d5:e4:2b:89:ef:1b:9d:ce:05:ff:de:12:fd:
da:9e:24:60:7f:d1:90:84:05:6c:a9:8b:16:b0:df:
43:11:22:c7:21:4f:fe:46:2b:c4:27:54:e3:ae:7c:
69:62:b2:e0:b8:97:91:8f:ae:bc:a7:c8:12:21:48:
90:19:f7:d3:ee:49:91:f6:ab:98:17:be:1a:06:70:
ce:3c:2c:4d:ec:ab:90:8f:a0:1c:c5:f7:7d:22:3d:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:94:78:12:DF:0C:AC:9F:12:D6:46:61:58:29:59:D2:3B:B9:47:D8
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:45:50:12:da:0b:7f:b4:d7:8b:43:d6:48:8d:93:3c:d2:d7:
f5:23:60:6e:e7:c0:49:a2:3b:c3:a7:73:35:fb:21:67:d5:54:
0a:f6:5e:8f:b3:76:50:41:cc:ec:27:12:9f:96:56:08:78:06:
13:80:9e:85:aa:7e:b9:8d:1d:16:09:6e:92:c1:03:0c:81:47:
00:af:c6:28:65:00:a6:4a:14:e4:c0:cd:9d:36:ee:f7:53:9a:
f5:a7:47:4b:3f:bc:4d:54:96:a3:b2:93:a9:5d:47:7e:cc:ef:
62:68:9c:81:80:f9:07:19:14:0b:ab:6f:34:3c:b1:ac:ed:3f:
11:fb:fa:3e:5e:e6:ac:49:f2:86:89:87:83:97:72:a4:76:98:
6e:88:1e:16:d8:71:d8:c8:09:d7:2a:0d:ab:ae:93:8b:82:e4:
2a:76:0b:f1:42:a3:f0:87:e0:8e:9c:c7:af:32:8c:8f:ef:73:
08:54:d3:4f:1f:1e:dc:96:a3:cf:b8:51:1a:d4:74:85:76:fe:
2b:ad:f9:d7:ed:d9:04:94:34:f3:ea:45:07:4b:1b:be:a3:74:
ad:3e:d2:b2:7e:af:ec:2d:f7:4a:4c:95:36:db:1a:f7:3a:83:
7d:cc:09:b2:e9:8c:18:93:f4:6c:32:6e:79:88:2a:47:bf:e8:
c1:87:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:55:35 2026 by rpki-client