Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
File: 4KM3CoQbiT57aPhqOTNjWC4QVkg.mft (raw, json)
Hash identifier: jy2lBOnJOyJacRgprgO0g38CkRrxjspZmhWr1AJRfYk=
Subject key identifier: 72:44:A3:17:55:BB:C0:65:6E:F8:44:6C:0E:96:9B:59:BF:B1:0F:32
Authority key identifier: E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48
Certificate issuer: /CN=e0a3370a841b893e7b68f86a393363582e105648
Certificate serial: 019FA899674C578867A55A69FC97B1590E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
Manifest number: 0EAC
Signing time: Tue 28 Jul 2026 12:00:53 +0000
Manifest this update: Tue 28 Jul 2026 12:00:53 +0000
Manifest next update: Wed 29 Jul 2026 12:00:53 +0000
Files and hashes: 1: 4KM3CoQbiT57aPhqOTNjWC4QVkg.crl (hash: kvRAZz3RtCOGLZVDe3HG4tOPH4lnSaoUr4pFbyOZlKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:67:4c:57:88:67:a5:5a:69:fc:97:b1:59:0e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a3370a841b893e7b68f86a393363582e105648
Validity
Not Before: Jul 28 12:00:53 2026 GMT
Not After : Jul 29 12:00:53 2026 GMT
Subject: CN=7244a31755bbc0656ef8446c0e969b59bfb10f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:14:91:15:e6:7f:4e:01:41:65:c7:4f:bb:
3a:e8:2f:41:81:33:e2:16:6e:2c:a0:15:b6:ea:1c:
69:e6:f9:9d:20:4e:85:47:70:ec:11:89:86:ba:35:
e9:d6:1c:7a:3f:f1:35:8d:c2:cd:a7:85:6c:6d:6a:
19:5c:8f:17:1d:c7:26:23:22:0f:dc:b2:92:9a:2f:
e1:1c:89:49:25:9f:33:9b:dd:4f:57:a8:d7:94:92:
0a:26:f5:91:da:cf:01:96:58:63:07:f4:10:0c:c1:
55:22:03:dc:89:96:3b:b5:dd:5c:47:72:54:2c:74:
70:d2:ac:1c:ba:d2:c9:c4:6c:04:ce:11:f1:21:ab:
db:f5:b4:cc:01:67:2e:14:23:fd:2e:4b:a0:b5:a1:
2e:af:d9:47:6c:47:58:ff:e1:2d:8f:d2:04:b1:29:
37:44:5d:b1:8e:dd:cb:a6:0a:00:f4:ac:93:d0:86:
d8:74:f8:11:8b:39:b3:df:9e:7b:89:cb:c1:6d:b4:
02:bd:7f:f4:c6:4a:eb:16:7b:f1:2c:19:58:6a:12:
c5:d5:4b:21:76:bc:8b:19:b0:2b:b2:a8:eb:32:70:
8a:33:d8:0c:34:12:1c:b4:ce:d3:74:b0:b3:1d:b8:
5b:78:f7:80:3e:10:dc:3e:c5:4b:df:a4:b6:85:1a:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:44:A3:17:55:BB:C0:65:6E:F8:44:6C:0E:96:9B:59:BF:B1:0F:32
X509v3 Authority Key Identifier:
keyid:E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:88:27:4a:94:00:f7:68:d7:c8:0a:94:5e:62:29:8f:02:c0:
44:a9:1f:38:dc:34:30:4b:08:59:7e:3b:dd:6a:06:24:9c:30:
75:f3:d6:d5:bc:05:0e:8d:21:24:81:5f:4a:1a:09:9e:14:d5:
c7:6c:11:aa:c3:5b:17:90:f3:6a:67:fd:8c:9f:36:b5:5e:e7:
bf:5e:46:f1:04:d0:76:29:1b:30:96:4b:c9:25:16:ca:09:17:
2a:be:f9:d8:53:58:bc:47:41:f8:a3:6d:c8:df:d8:6f:6b:fa:
60:e1:ad:26:27:8f:20:9f:23:7d:7a:fe:08:e9:23:9d:52:22:
4a:0f:79:03:3b:8d:b4:d4:e6:72:00:b2:c7:3a:42:8e:cf:86:
46:d9:6f:04:ad:c7:8e:a9:60:19:d4:81:3c:02:4e:bc:8f:14:
7b:8f:c8:f0:a1:83:94:33:bf:ce:e0:f2:cd:fa:b5:ca:a6:5a:
9d:bb:49:e6:75:2d:fa:c6:39:51:2b:1b:80:3c:a7:f3:51:48:
92:3e:1c:6d:21:6f:97:4d:10:39:04:ec:ee:2b:b3:7d:2d:aa:
02:ce:e9:91:e3:fd:be:7d:09:0f:dd:1c:96:d4:82:c9:2a:d3:
1c:12:a4:8a:13:b7:d1:3c:55:72:aa:92:8c:1b:71:d3:6b:b9:
05:dd:f3:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omWdMV4hnpVpp/JexWQ6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTMzNzBhODQxYjg5M2U3YjY4Zjg2YTM5MzM2MzU4MmUx
MDU2NDgwHhcNMjYwNzI4MTIwMDUzWhcNMjYwNzI5MTIwMDUzWjAzMTEwLwYDVQQD
Eyg3MjQ0YTMxNzU1YmJjMDY1NmVmODQ0NmMwZTk2OWI1OWJmYjEwZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxEUkRXmf04BQWXHT7s66C9BgTPi
Fm4soBW26hxp5vmdIE6FR3DsEYmGujXp1hx6P/E1jcLNp4VsbWoZXI8XHccmIyIP
3LKSmi/hHIlJJZ8zm91PV6jXlJIKJvWR2s8BllhjB/QQDMFVIgPciZY7td1cR3JU
LHRw0qwcutLJxGwEzhHxIavb9bTMAWcuFCP9LkugtaEur9lHbEdY/+Etj9IEsSk3
RF2xjt3LpgoA9KyT0IbYdPgRizmz3557icvBbbQCvX/0xkrrFnvxLBlYahLF1Ush
dryLGbArsqjrMnCKM9gMNBIctM7TdLCzHbhbePeAPhDcPsVL36S2hRoqEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJEoxdVu8BlbvhEbA6Wm1m/sQ8yMB8GA1UdIwQY
MBaAFOCjNwqEG4k+e2j4ajkzY1guEFZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtNM0NvUWJpVDU3YVBocU9UTmpXQzRRVmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85NTc0NmUtYmU1Mi00MmVlLTljYzgt
YzNlZGI0ZDhmNzFlLzEvNEtNM0NvUWJpVDU3YVBocU9UTmpXQzRRVmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85NTc0NmUtYmU1Mi00MmVlLTljYzgtYzNlZGI0ZDhmNzFl
LzEvNEtNM0NvUWJpVDU3YVBocU9UTmpXQzRRVmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4gnSpQA
92jXyAqUXmIpjwLARKkfONw0MEsIWX473WoGJJwwdfPW1bwFDo0hJIFfShoJnhTV
x2wRqsNbF5Dzamf9jJ82tV7nv15G8QTQdikbMJZLySUWygkXKr752FNYvEdB+KNt
yN/Yb2v6YOGtJiePIJ8jfXr+COkjnVIiSg95AzuNtNTmcgCyxzpCjs+GRtlvBK3H
jqlgGdSBPAJOvI8Ue4/I8KGDlDO/zuDyzfq1yqZanbtJ5nUt+sY5USsbgDyn81FI
kj4cbSFvl00QOQTs7iuzfS2qAs7pkeP9vn0JD90cltSCySrTHBKkihO30TxVcqqS
jBtx02u5Bd3zwA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:12 2026 by rpki-client