Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
File: 1KfKDW2_IW-UsFm4kZdgmFjcclc.mft (raw, json)
Hash identifier: 3NvMHDWqz7OoGqglxaozWyaHMRBorRFwt6/5UZjLzuw=
Subject key identifier: 89:F1:59:AD:DF:02:51:0A:34:34:4F:6A:39:75:1B:0E:A9:57:F5:B1
Authority key identifier: D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
Certificate issuer: /CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Certificate serial: 019FAC7645D6A41E5D0435A531EFC05B18FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:59 +0000
Manifest this update: Wed 29 Jul 2026 06:00:59 +0000
Manifest next update: Thu 30 Jul 2026 06:00:59 +0000
Files and hashes: 1: 1KfKDW2_IW-UsFm4kZdgmFjcclc.crl (hash: EkPHwvU21a6JzGCQpSJ8zGBGbpqWmklHyntyWXpg0AE=)
2: uoNpQh4ifZ34O19c1R5qUVlogEE.roa (hash: gHKmqmMiLwnyxP87W/6N6XbUpWy1lA1P9JZgvRaP+3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:45:d6:a4:1e:5d:04:35:a5:31:ef:c0:5b:18:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Validity
Not Before: Jul 29 06:00:59 2026 GMT
Not After : Jul 30 06:00:59 2026 GMT
Subject: CN=89f159addf02510a34344f6a39751b0ea957f5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:37:d2:59:27:c2:70:fb:e7:05:55:8d:2d:
36:02:c7:d2:7d:5a:56:62:a4:68:8d:3d:1b:ea:67:
9e:cf:6d:a9:78:fb:23:10:79:0a:7e:80:f7:88:af:
10:27:6a:43:82:7d:b7:60:df:54:d7:0d:e9:4e:57:
e8:23:31:d5:60:41:6b:e6:bf:66:ff:73:13:cd:7a:
d7:31:cf:56:03:22:a3:3c:a9:5b:13:d1:c6:36:4f:
f1:87:cf:21:d7:84:c3:72:6b:eb:e9:df:28:34:32:
2d:62:90:32:a1:9e:61:3d:b3:37:06:06:74:e6:73:
6e:05:15:04:bc:a1:ec:10:d5:1b:fe:7a:e8:eb:c5:
63:d4:8e:01:ae:8d:d6:02:00:1c:4c:1e:f4:95:62:
7d:36:3e:de:0d:c0:13:ef:9a:1f:db:05:34:a1:00:
aa:56:ae:d0:64:16:6c:94:47:22:7d:96:ae:59:81:
17:b2:07:db:72:92:99:0a:90:5a:66:5a:7b:00:51:
17:ee:84:3d:1e:d7:58:1f:44:a3:82:33:c0:7d:af:
6c:2c:aa:8d:cb:21:05:b2:2b:fb:e3:e2:3f:f3:94:
a3:a1:78:bb:14:ef:84:29:13:a0:21:aa:c8:18:c8:
94:2a:8c:64:42:f4:47:ae:a1:88:0d:1f:6a:7d:a3:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F1:59:AD:DF:02:51:0A:34:34:4F:6A:39:75:1B:0E:A9:57:F5:B1
X509v3 Authority Key Identifier:
keyid:D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a9:b8:1e:74:2d:ba:36:13:65:8e:12:99:ec:28:0e:ba:3e:
ae:b1:69:6d:f9:21:37:23:0c:19:fc:dd:26:93:eb:8f:54:96:
e1:96:53:9f:d3:b6:96:82:bb:a3:36:ed:66:41:3c:5a:4c:74:
84:ba:c7:f9:23:63:d3:41:bc:d7:2f:39:b5:da:41:0d:e9:4f:
ab:44:d4:e3:d2:e3:e1:85:53:63:ab:95:f8:03:bb:80:77:b3:
e4:78:21:ef:db:6e:33:cd:3d:d5:19:5a:c7:45:a4:b8:e6:c2:
8e:4e:aa:1f:c8:e2:c9:64:c1:a8:f8:d6:0b:a1:a2:80:70:e1:
90:84:8e:fa:c6:2d:f4:0c:a6:7a:f9:af:4a:49:09:f2:97:ee:
ae:81:42:57:af:bc:8c:46:15:81:57:cf:46:bb:1f:65:32:78:
e3:b4:b3:76:ca:d8:3d:44:ba:d6:74:b2:7c:6c:00:b0:68:9e:
3e:78:21:01:b1:a8:9f:a1:84:a1:f6:d2:a9:db:6b:d4:de:95:
64:be:54:e1:7e:2b:8a:c5:25:a3:9e:47:51:c6:a8:82:be:99:
e5:50:57:dd:5b:ab:6e:9b:92:98:87:ef:16:a8:91:f6:6c:51:
f6:d7:ef:b8:6f:af:da:58:96:98:06:b5:32:a3:04:b6:ae:bd:
42:8f:a5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:10 2026 by rpki-client