Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: ilC+rpmf31DUb8hpHsjwVQXNYRyE2BV9NkVlBpAaYoU=
Subject key identifier: 2F:F9:5D:7C:A9:32:27:F8:37:52:50:6F:20:B2:5D:C3:91:4A:4B:FC
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019FAA883BB1E8443CE5E4E47B6EE53658FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 21:01:22 +0000
Manifest this update: Tue 28 Jul 2026 21:01:22 +0000
Manifest next update: Wed 29 Jul 2026 21:01:22 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: csXaXvtq6DZXyfyOQmowDIa5J6hJExNF1ElY6YCASbo=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:3b:b1:e8:44:3c:e5:e4:e4:7b:6e:e5:36:58:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Jul 28 21:01:22 2026 GMT
Not After : Jul 29 21:01:22 2026 GMT
Subject: CN=2ff95d7ca93227f83752506f20b25dc3914a4bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:68:ea:75:92:c1:2f:92:7d:12:22:b7:82:
05:26:98:7e:f0:1b:db:76:5f:1e:10:82:74:ed:88:
f1:03:ee:26:bd:32:53:0b:ae:d8:10:7e:06:c0:6f:
54:c9:b9:c4:1a:de:44:86:af:30:be:71:5c:55:c6:
2a:93:ab:e4:15:b1:74:ae:d7:50:ba:b3:17:d7:f8:
96:ba:df:ba:25:75:3f:94:02:d8:bf:a1:42:50:9c:
aa:b2:c3:6f:51:34:5c:0f:fc:84:ca:16:a6:9a:c0:
da:cb:d7:81:3a:98:55:60:38:10:54:fb:b8:d0:c8:
63:3b:6f:19:a9:f1:56:87:4f:40:f3:c3:5a:6c:82:
96:e7:a0:40:6a:35:69:f3:dd:da:5f:c8:aa:30:ab:
ba:b6:d4:0a:3a:42:94:36:ff:b6:30:5c:73:bd:06:
30:a2:d5:7b:6d:76:0c:42:9c:89:dd:df:07:f0:7d:
4d:e8:b6:56:72:b4:2d:41:a2:2d:e0:a0:52:0a:8d:
90:cd:25:26:8d:d3:c5:aa:e5:f5:47:38:17:16:cd:
76:cc:41:77:3c:17:1d:90:d8:72:bf:cd:2b:90:a1:
8b:95:6b:9d:c3:37:57:5c:57:63:98:0d:17:96:16:
76:bb:95:6e:1c:d5:50:99:d8:0c:a9:b1:df:c8:8c:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F9:5D:7C:A9:32:27:F8:37:52:50:6F:20:B2:5D:C3:91:4A:4B:FC
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:87:6a:f2:ec:e9:db:13:b7:36:16:9d:41:80:bc:b6:f5:ad:
35:ec:79:6c:78:da:2d:0d:22:03:8f:55:cc:ef:2d:b7:a3:34:
a2:99:8c:8c:e1:ae:08:cd:ee:57:dc:27:c4:a7:10:e9:6a:a0:
8a:18:43:5f:b3:ad:56:e6:45:fd:45:4a:01:52:fb:4d:ae:01:
aa:65:26:01:e2:d2:52:69:57:89:29:a5:0f:ad:15:ac:ba:55:
2b:c9:65:e0:e2:c0:73:0d:f0:58:25:14:83:76:29:2d:2a:89:
46:ba:f5:86:e3:fd:0d:3c:50:61:7c:01:99:6d:ff:08:62:38:
30:d4:e8:3e:dc:57:33:3d:51:70:bb:74:53:93:e3:f2:96:f2:
4e:d1:01:25:fa:06:ee:be:d5:48:73:ef:dd:4c:40:c6:80:fc:
0c:41:0e:e4:11:a0:db:d1:a2:75:5e:da:a6:00:b4:72:7e:33:
85:8c:72:48:c3:63:40:1d:35:0e:91:62:5f:f9:bc:3e:8a:d2:
03:cd:8e:cb:16:d7:32:0d:de:09:a8:1f:7f:7e:c4:9b:22:6f:
29:dc:8e:f9:59:d6:d8:17:db:8e:22:d2:99:c8:37:5f:b7:b4:
a6:f5:14:aa:73:b4:4d:ba:66:9b:7c:6b:27:95:f7:2c:75:a2:
ef:e0:6f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiDux6EQ85eTke27lNlj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDBhMDI1ZTBlNjFhNDRkOTNlNGE4MDFlMzg4OGIyNmU3
YmQyNDEwHhcNMjYwNzI4MjEwMTIyWhcNMjYwNzI5MjEwMTIyWjAzMTEwLwYDVQQD
EygyZmY5NWQ3Y2E5MzIyN2Y4Mzc1MjUwNmYyMGIyNWRjMzkxNGE0YmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGxo6nWSwS+SfRIit4IFJph+8Bvb
dl8eEIJ07YjxA+4mvTJTC67YEH4GwG9UybnEGt5Ehq8wvnFcVcYqk6vkFbF0rtdQ
urMX1/iWut+6JXU/lALYv6FCUJyqssNvUTRcD/yEyhammsDay9eBOphVYDgQVPu4
0MhjO28ZqfFWh09A88NabIKW56BAajVp893aX8iqMKu6ttQKOkKUNv+2MFxzvQYw
otV7bXYMQpyJ3d8H8H1N6LZWcrQtQaIt4KBSCo2QzSUmjdPFquX1RzgXFs12zEF3
PBcdkNhyv80rkKGLlWudwzdXXFdjmA0XlhZ2u5VuHNVQmdgMqbHfyIydJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/5XXypMif4N1JQbyCyXcORSkv8MB8GA1UdIwQY
MBaAFOJAoCXg5hpE2T5KgB44iLJue9JBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUt
Yzc5ZDRlZWI1YWQ2LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUtYzc5ZDRlZWI1YWQ2
LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIdq8uzp
2xO3NhadQYC8tvWtNex5bHjaLQ0iA49VzO8tt6M0opmMjOGuCM3uV9wnxKcQ6Wqg
ihhDX7OtVuZF/UVKAVL7Ta4BqmUmAeLSUmlXiSmlD60VrLpVK8ll4OLAcw3wWCUU
g3YpLSqJRrr1huP9DTxQYXwBmW3/CGI4MNToPtxXMz1RcLt0U5Pj8pbyTtEBJfoG
7r7VSHPv3UxAxoD8DEEO5BGg29GidV7apgC0cn4zhYxySMNjQB01DpFiX/m8PorS
A82OyxbXMg3eCagff37EmyJvKdyO+VnW2BfbjiLSmcg3X7e0pvUUqnO0Tbpmm3xr
J5X3LHWi7+BvgQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:45 2026 by rpki-client