Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: Yg0MyguNCtLMZqugdMvRurhLK4rqLGdSgtpG98ZtSDU=
Subject key identifier: 69:03:39:3C:ED:D5:54:3E:8F:16:12:00:89:30:31:1F:69:DB:41:6A
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019EBEED34BCA03CF84058973C50D58B868E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1964
Signing time: Sat 13 Jun 2026 03:01:17 +0000
Manifest this update: Sat 13 Jun 2026 03:01:17 +0000
Manifest next update: Sun 14 Jun 2026 03:01:17 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: 15uTJ5ySlsGdJLLlqDzOcExvpwylNzweuHVbxWtuSrs=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:34:bc:a0:3c:f8:40:58:97:3c:50:d5:8b:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Jun 13 03:01:17 2026 GMT
Not After : Jun 14 03:01:17 2026 GMT
Subject: CN=6903393cedd5543e8f1612008930311f69db416a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:18:52:13:a4:e6:41:57:e6:cc:89:e9:bd:c1:
22:f0:fe:3a:41:bc:37:cd:ae:3f:63:c1:4a:eb:3c:
8b:c6:84:44:4f:2b:c2:cf:db:13:97:6c:ad:b9:26:
c5:a2:dc:5e:33:46:55:49:34:68:69:a3:5b:20:5e:
32:03:70:0a:35:fa:1b:10:39:d9:39:79:99:ef:87:
e7:5c:22:c5:7a:19:8a:cd:70:85:65:c1:51:b8:e5:
bf:a9:99:65:63:0d:52:7c:69:57:9f:e0:37:a3:ff:
4e:22:e6:50:5a:d7:36:db:6e:f5:67:df:5d:e3:cb:
e8:a3:bd:f1:d8:bc:8a:30:bd:e3:ee:af:64:52:7d:
94:d3:b2:50:18:04:5a:e1:93:eb:2b:0d:a4:37:b6:
47:8d:a3:ef:26:0c:ed:ff:13:2e:08:1c:1b:57:95:
e0:c5:ab:87:d2:66:66:cb:98:b5:f4:99:39:44:31:
53:2b:fb:6d:38:74:72:1c:20:1e:2a:b5:68:2b:ce:
b5:e1:10:38:d7:fa:bc:84:57:98:67:5b:8b:d0:5e:
65:8d:37:3a:ec:b0:6c:cd:77:38:d3:3f:6c:16:99:
fa:1f:f0:57:19:22:06:9c:fb:0b:a4:64:30:fa:a8:
45:58:e1:3f:0c:d3:61:67:fb:3c:36:d3:f2:f0:da:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:39:3C:ED:D5:54:3E:8F:16:12:00:89:30:31:1F:69:DB:41:6A
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9d:b5:43:4b:90:d4:47:9e:20:1a:ae:a0:17:56:43:e8:ad:
0e:1c:87:ba:2f:df:a5:d3:10:3d:96:e5:f2:05:67:86:da:df:
56:cd:6d:90:f4:d5:6d:c8:49:c7:4a:d3:11:28:6c:3a:e3:9e:
6e:9b:31:55:fb:ba:3c:7c:67:f1:7b:ce:66:57:dc:ef:cb:08:
e3:1b:e5:90:78:de:2a:24:c0:b8:0e:ee:8f:cb:2d:5f:c6:48:
0b:5e:1b:ad:1e:84:8c:8e:33:a4:7c:c1:d8:1d:8a:b0:2a:cb:
b0:c1:b8:83:2e:06:51:0d:98:e5:3f:7c:1e:07:d8:7e:dc:3e:
e4:5a:9f:40:b0:8c:29:ad:48:0b:f9:e0:41:30:be:28:03:65:
af:20:47:ec:13:2f:b0:bf:7c:a5:4c:0f:14:a9:10:18:22:ca:
74:6c:d5:ae:18:79:0b:76:4d:60:89:e9:0a:99:07:d1:a7:00:
06:d6:f7:88:a4:0b:bd:1b:ab:d2:48:e5:b0:cd:95:e5:f3:d0:
9b:45:ca:e0:14:c4:72:c2:79:1a:78:aa:bb:d6:60:8b:71:c5:
b6:bf:99:e6:7f:40:c9:7d:47:1d:c1:73:a3:c9:3e:b9:85:6d:
68:02:0c:63:dc:9e:21:e4:3b:76:b0:bb:02:ed:e4:18:b8:c8:
96:01:0e:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7TS8oDz4QFiXPFDVi4aOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1
M2Q5NDAwHhcNMjYwNjEzMDMwMTE3WhcNMjYwNjE0MDMwMTE3WjAzMTEwLwYDVQQD
Eyg2OTAzMzkzY2VkZDU1NDNlOGYxNjEyMDA4OTMwMzExZjY5ZGI0MTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xhSE6TmQVfmzInpvcEi8P46Qbw3
za4/Y8FK6zyLxoRETyvCz9sTl2ytuSbFotxeM0ZVSTRoaaNbIF4yA3AKNfobEDnZ
OXmZ74fnXCLFehmKzXCFZcFRuOW/qZllYw1SfGlXn+A3o/9OIuZQWtc22271Z99d
48voo73x2LyKML3j7q9kUn2U07JQGARa4ZPrKw2kN7ZHjaPvJgzt/xMuCBwbV5Xg
xauH0mZmy5i19Jk5RDFTK/ttOHRyHCAeKrVoK8614RA41/q8hFeYZ1uL0F5ljTc6
7LBszXc40z9sFpn6H/BXGSIGnPsLpGQw+qhFWOE/DNNhZ/s8NtPy8Nq1rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkDOTzt1VQ+jxYSAIkwMR9p20FqMB8GA1UdIwQY
MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt
MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1
LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ21Q0uQ
1EeeIBquoBdWQ+itDhyHui/fpdMQPZbl8gVnhtrfVs1tkPTVbchJx0rTEShsOuOe
bpsxVfu6PHxn8XvOZlfc78sI4xvlkHjeKiTAuA7uj8stX8ZIC14brR6EjI4zpHzB
2B2KsCrLsMG4gy4GUQ2Y5T98HgfYftw+5FqfQLCMKa1IC/ngQTC+KANlryBH7BMv
sL98pUwPFKkQGCLKdGzVrhh5C3ZNYInpCpkH0acABtb3iKQLvRur0kjlsM2V5fPQ
m0XK4BTEcsJ5Gniqu9Zgi3HFtr+Z5n9AyX1HHcFzo8k+uYVtaAIMY9yeIeQ7drC7
Au3kGLjIlgEO9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:10 2026 by rpki-client