Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: YtGEAspSNMnRFcpTkk5RdP2X998VcS2hzs05XsUHp6g=
Subject key identifier: 38:AD:5D:6D:A1:0F:9A:08:DC:FD:10:5D:7E:95:16:CF:BC:9A:F0:97
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019EC2C958800D4DDAF7810DE6F9429C32A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 017F
Signing time: Sat 13 Jun 2026 21:00:35 +0000
Manifest this update: Sat 13 Jun 2026 21:00:35 +0000
Manifest next update: Sun 14 Jun 2026 21:00:35 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: AB5bT6ztZ7i8MH5wW/JoBghRE3O0lKlUpUWPawlVBr4=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:58:80:0d:4d:da:f7:81:0d:e6:f9:42:9c:32:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Jun 13 21:00:35 2026 GMT
Not After : Jun 14 21:00:35 2026 GMT
Subject: CN=38ad5d6da10f9a08dcfd105d7e9516cfbc9af097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:20:a3:ba:65:3d:87:4c:6f:9d:36:03:ef:
ea:0a:31:11:df:4d:5a:1f:60:6a:fe:ab:12:90:ef:
00:bb:27:ff:cf:7c:cb:94:81:ba:7c:b5:ba:d0:72:
89:86:07:f4:25:cf:67:68:bc:16:28:0a:d6:53:c7:
85:c2:0a:e2:65:d9:2d:7d:c9:43:59:e7:19:c4:32:
77:02:1b:ec:87:ff:5d:62:6e:86:f1:88:bc:a5:35:
dc:e5:94:5d:5e:1d:97:71:f1:40:92:08:cb:0f:1d:
c8:22:20:e1:40:da:de:3b:f7:14:cd:c5:1c:81:cc:
29:c0:f9:0f:55:61:12:d8:12:5b:29:30:78:bc:75:
da:33:9e:36:aa:c0:32:76:82:19:58:f0:5d:18:2b:
0b:ec:3c:ee:ab:08:8e:21:2e:15:9e:0c:57:9c:3a:
23:63:4d:18:2b:26:ae:2f:ef:2c:f1:39:b3:6d:3d:
d3:69:81:dd:c2:7c:d7:7c:8c:60:9a:eb:04:9f:2c:
e1:b4:29:a3:7c:b1:5d:7d:ed:34:1b:d1:dc:ca:57:
23:a8:cb:a1:90:ca:aa:9a:b2:dc:62:b1:98:8e:d3:
6b:d0:02:94:4d:8d:ab:81:78:53:c8:71:11:b1:f6:
00:7b:6f:1d:9e:4d:17:03:c8:7b:79:f1:f6:3a:4c:
b4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AD:5D:6D:A1:0F:9A:08:DC:FD:10:5D:7E:95:16:CF:BC:9A:F0:97
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7b:24:19:3a:55:e0:22:51:05:64:c9:70:fd:ee:e3:60:9b:
49:22:7e:c2:6a:75:c3:c7:a3:94:aa:73:56:24:57:7e:48:ee:
df:94:04:f9:0b:07:0d:95:8d:60:dd:ac:3e:77:a7:f4:a9:67:
79:e8:55:50:e2:d4:da:34:74:f2:88:5f:d3:0b:a8:1c:48:fd:
cd:a7:dc:41:55:16:61:2b:5c:dd:04:72:c8:a6:92:03:05:28:
e6:ad:dc:f6:18:f7:2e:77:70:27:b4:44:a6:05:48:f5:da:0f:
62:2a:b3:f2:e9:ee:3f:45:a9:75:8b:33:b9:7c:d5:8f:4e:46:
d5:a8:2a:d0:b0:a6:57:7c:e2:42:e4:65:db:d5:a5:92:70:df:
fb:78:43:1c:72:c5:5a:56:04:cb:cd:fd:83:02:84:db:65:91:
a9:b0:0b:90:f5:3d:18:77:66:82:78:45:bb:74:06:92:34:93:
11:97:b2:23:c0:3c:88:13:83:eb:df:d3:ab:89:5e:d8:dc:65:
11:1f:33:19:cd:91:05:a4:04:50:bf:04:a5:76:fe:d0:84:d1:
a6:8f:1d:86:7c:9d:c2:5c:1a:27:c9:7a:c9:60:22:fa:8e:00:
eb:91:83:c3:fc:e1:52:4e:7e:80:b0:bf:f2:1e:71:fc:95:5b:
65:f3:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:43:28 2026 by rpki-client