Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: 9qg0ePqJZMrhyXP9af090X8YhXk2ojBwGAU2A1OIYy0=
Subject key identifier: 78:36:C5:01:50:1C:AD:9E:43:A9:EF:0F:65:83:18:25:DC:0B:6C:CE
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 019FA9752BFB08B1D556506E38BB4754D278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 1241
Signing time: Tue 28 Jul 2026 16:00:56 +0000
Manifest this update: Tue 28 Jul 2026 16:00:56 +0000
Manifest next update: Wed 29 Jul 2026 16:00:56 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: +G38WwVsbt6mOmCoRNn7ULQLe21/BKRP5ze7MAUiImY=)
2: 6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa (hash: LkG1rsHegbWJdLC+vukY1wOXCMcnkOUFAcxz3/K326I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:2b:fb:08:b1:d5:56:50:6e:38:bb:47:54:d2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Jul 28 16:00:56 2026 GMT
Not After : Jul 29 16:00:56 2026 GMT
Subject: CN=7836c501501cad9e43a9ef0f65831825dc0b6cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:46:ca:61:ed:e0:e7:c7:a2:f6:a7:3a:95:
1d:b5:d0:02:a2:e6:ff:00:31:32:d2:eb:c6:fa:52:
68:50:01:79:fc:08:fc:92:2d:26:6e:c8:3c:4d:a1:
61:a1:53:58:0a:3c:a2:57:49:93:9e:4b:ab:d2:74:
fe:52:70:87:13:3b:9d:5b:c2:87:61:63:73:f6:b4:
5d:ea:96:f1:f0:1e:d6:8d:6b:9e:41:04:f3:0f:ab:
17:7d:51:75:32:42:76:a3:96:db:18:21:0c:95:a3:
ce:28:62:f2:39:90:d9:23:20:5d:80:be:14:2d:ff:
64:8a:c9:19:91:c8:af:df:d1:df:c6:bf:fb:6a:ff:
a6:09:b5:24:8a:56:f5:13:1c:70:fa:cf:11:fc:9f:
1c:01:06:7c:27:ec:1a:fb:be:4d:fe:f4:96:85:70:
4b:4f:75:31:c7:3e:76:d9:9c:4e:df:29:de:0c:db:
82:cb:f7:76:1d:13:68:a8:9c:6d:4d:d7:68:5f:0e:
32:e3:59:47:d0:24:06:38:52:08:ef:a7:5c:58:20:
6d:d3:f4:20:e0:26:d5:a1:81:6c:39:02:78:db:ef:
bc:e7:3b:7c:2c:44:71:dc:c3:7d:9b:f8:24:54:ea:
ea:1c:44:6b:a2:2a:b0:f2:5d:84:f8:b5:2d:2a:53:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:C5:01:50:1C:AD:9E:43:A9:EF:0F:65:83:18:25:DC:0B:6C:CE
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c9:38:dc:ae:30:48:59:32:6d:6a:51:da:6f:76:8e:3d:3a:
80:d1:b0:4d:22:99:ff:ae:1b:32:a7:50:a9:54:b1:2c:3d:5c:
e7:34:6f:06:2b:a1:54:6b:52:08:08:ce:ee:39:44:83:2e:72:
36:f0:2e:19:f9:8c:2f:87:52:7f:51:88:fb:e2:72:5e:9b:2e:
4b:3e:0e:f6:c0:28:dc:80:0c:71:68:8b:b6:9f:18:88:1d:e4:
e7:57:c7:00:76:01:48:d8:66:41:6f:9b:40:ae:bf:5c:78:c7:
97:e7:15:01:19:a7:c1:5c:b4:8b:a5:f1:16:1d:c8:e8:d4:d5:
5a:9c:e4:77:b5:69:9a:26:49:92:82:f8:15:5b:bf:f5:64:17:
56:37:7d:cf:e4:24:9d:cb:ba:b6:a1:36:58:bb:00:7b:4e:b7:
16:ed:9f:72:3f:5d:aa:80:a0:c6:63:8f:9e:f5:ae:44:63:f7:
60:f4:86:69:08:cf:5c:79:75:aa:e1:34:bc:fc:1b:9f:27:5c:
c3:59:d5:3e:81:eb:da:64:cf:a5:72:c3:bf:dd:b1:54:a9:d4:
45:4c:c6:3b:22:38:40:89:95:3d:0b:a3:93:23:2b:d3:3f:e3:
43:3a:6a:da:98:15:4d:7a:5b:86:b5:a7:2b:da:67:55:69:40:
cb:3e:1a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdSv7CLHVVlBuOLtHVNJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjE5Y2M1ZTM4ZDhmOWMxZDY1NDcxNzc2NjVmODkyMTFk
ZWM4OTkwHhcNMjYwNzI4MTYwMDU2WhcNMjYwNzI5MTYwMDU2WjAzMTEwLwYDVQQD
Eyg3ODM2YzUwMTUwMWNhZDllNDNhOWVmMGY2NTgzMTgyNWRjMGI2Y2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4tGymHt4OfHovanOpUdtdACoub/
ADEy0uvG+lJoUAF5/Aj8ki0mbsg8TaFhoVNYCjyiV0mTnkur0nT+UnCHEzudW8KH
YWNz9rRd6pbx8B7WjWueQQTzD6sXfVF1MkJ2o5bbGCEMlaPOKGLyOZDZIyBdgL4U
Lf9kiskZkciv39Hfxr/7av+mCbUkilb1Exxw+s8R/J8cAQZ8J+wa+75N/vSWhXBL
T3Uxxz522ZxO3yneDNuCy/d2HRNoqJxtTddoXw4y41lH0CQGOFII76dcWCBt0/Qg
4CbVoYFsOQJ42++85zt8LERx3MN9m/gkVOrqHERroiqw8l2E+LUtKlNZHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg2xQFQHK2eQ6nvD2WDGCXcC2zOMB8GA1UdIwQY
MBaAFOPxnMXjjY+cHWVHF3Zl+JIR3siZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUt
YTRiZTE3MmM3NmJhLzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8xYTg1YTgtZTRmOC00OThiLWE1YWUtYTRiZTE3MmM3NmJh
LzEvNF9HY3hlT05qNXdkWlVjWGRtWDRraEhleUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdck43K4w
SFkybWpR2m92jj06gNGwTSKZ/64bMqdQqVSxLD1c5zRvBiuhVGtSCAjO7jlEgy5y
NvAuGfmML4dSf1GI++JyXpsuSz4O9sAo3IAMcWiLtp8YiB3k51fHAHYBSNhmQW+b
QK6/XHjHl+cVARmnwVy0i6XxFh3I6NTVWpzkd7VpmiZJkoL4FVu/9WQXVjd9z+Qk
ncu6tqE2WLsAe063Fu2fcj9dqoCgxmOPnvWuRGP3YPSGaQjPXHl1quE0vPwbnydc
w1nVPoHr2mTPpXLDv92xVKnURUzGOyI4QImVPQujkyMr0z/jQzpq2pgVTXpbhrWn
K9pnVWlAyz4aBw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:29 2026 by rpki-client