Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: VFRjImRJwsrVdx3ovatT+18yTDHNp32zpYTVIbNdLoQ=
Subject key identifier: A6:C1:6D:84:B1:62:A0:DD:BB:B3:18:74:97:CC:6D:49:2E:02:85:CB
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019EC06E28FE78D89E664D985B957E46E9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 08B9
Signing time: Sat 13 Jun 2026 10:01:45 +0000
Manifest this update: Sat 13 Jun 2026 10:01:45 +0000
Manifest next update: Sun 14 Jun 2026 10:01:45 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: 8xuLoCFNgfSQu66bYrVz0XgUcQZjC34N+Kp7dvYEF/Y=)
2: Um8x4FnVBBKSkcy47VZrVv_LDxE.roa (hash: tfl71U6Q8ML7hqI6qdxoHZc1rgsYETV4BNFwPX3unlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:28:fe:78:d8:9e:66:4d:98:5b:95:7e:46:e9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Jun 13 10:01:45 2026 GMT
Not After : Jun 14 10:01:45 2026 GMT
Subject: CN=a6c16d84b162a0ddbbb3187497cc6d492e0285cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:07:82:b8:cf:5b:5a:73:d2:dc:d8:bf:bc:
80:9e:5a:ff:b1:76:bb:2f:d6:ff:bf:ce:c5:32:e9:
5b:7b:f5:a3:ad:cc:2e:c6:0f:2c:c1:0e:15:b5:39:
0d:59:33:02:9d:17:0c:8d:0d:f0:d2:69:a0:8e:28:
1f:cd:bd:f1:09:1f:49:2c:4c:3c:e3:fd:59:0f:dc:
82:86:04:cc:30:1e:35:3f:7b:a2:37:73:f3:c2:aa:
d9:93:52:eb:c1:2f:da:9b:3e:ba:02:cb:4e:44:cc:
a3:de:bc:a8:7f:0c:f5:24:77:d6:7b:8d:25:97:49:
3f:9f:b0:ca:e0:08:07:26:d3:4f:30:2f:41:00:64:
e0:c0:eb:a7:9e:7f:9f:41:3b:e1:da:62:c1:be:53:
5b:cf:db:0d:96:73:94:de:9f:20:9e:ae:2f:b0:cf:
ce:49:d4:95:c3:2f:42:41:2c:10:c0:c8:7c:9b:eb:
67:fd:7c:1a:b6:8a:82:bf:a8:49:b1:99:c3:0d:d0:
46:8e:95:62:1b:d0:b4:af:f4:5a:7a:64:c7:38:53:
15:dd:9d:4f:c0:eb:a3:28:0b:2c:2c:15:b3:7e:c9:
42:21:6f:77:1f:54:30:0a:bf:b3:e9:bd:01:81:d3:
5b:3f:4b:79:54:21:72:6f:42:56:21:35:da:38:62:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:6D:84:B1:62:A0:DD:BB:B3:18:74:97:CC:6D:49:2E:02:85:CB
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d2:89:52:4a:a6:16:28:68:14:fa:31:f8:0e:bb:64:c5:66:
00:b7:32:a0:20:e2:11:4e:9f:12:43:c8:19:fd:13:0d:d5:28:
f2:15:09:95:39:73:8e:9d:7c:be:12:12:5e:34:93:93:50:95:
ce:d7:ad:55:a6:b0:9a:8f:80:a5:20:4f:cb:95:8b:40:5f:8c:
f8:99:42:7b:14:6a:2f:eb:0b:8b:4d:89:6d:90:0f:16:50:6d:
0c:44:ea:8f:b7:ad:e1:6a:ec:e0:76:6f:80:73:57:d2:a4:30:
bb:5a:f6:e2:ea:b1:87:5c:a5:7d:d7:1b:a0:24:b8:31:60:9d:
67:99:83:6d:55:d9:ab:88:09:5c:3d:01:65:7b:5d:43:38:be:
65:0b:e8:6d:11:d5:f0:91:2d:06:5d:87:9a:5f:97:8f:18:a8:
70:34:3b:e6:ac:dd:31:e1:76:87:11:39:62:6e:ff:cf:04:03:
30:67:1b:3b:e5:e8:d6:da:af:75:46:3b:76:87:2d:b0:23:e7:
42:99:84:9e:7a:db:76:5d:70:a1:b8:88:bf:11:f4:04:78:ff:
da:e9:61:b1:2c:6e:a7:f2:69:f3:a5:3e:0b:d4:ca:41:a1:71:
8d:9e:84:2b:15:31:17:3a:31:d0:d0:f5:97:81:42:73:d0:d8:
8e:4d:4a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:40 2026 by rpki-client