Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: KYBS95caclaFNMcJU6br1PYeNdOMlcOHqFc+2P8MGzs=
Subject key identifier: 13:08:4A:4C:CF:37:2C:AA:8F:7A:B3:22:D2:9B:6D:0D:54:A8:02:5F
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019FA9E2849A98BE7D39452F977BFD6BEC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 18:00:22 +0000
Manifest this update: Tue 28 Jul 2026 18:00:22 +0000
Manifest next update: Wed 29 Jul 2026 18:00:22 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: eAPLCN3VgW0Gc8SkWYiJxeJqthxh06nD8yo0OXyNPRU=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:84:9a:98:be:7d:39:45:2f:97:7b:fd:6b:ec:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jul 28 18:00:22 2026 GMT
Not After : Jul 29 18:00:22 2026 GMT
Subject: CN=13084a4ccf372caa8f7ab322d29b6d0d54a8025f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:dc:41:fa:4b:fa:a3:1f:0c:0e:4f:0f:54:
9b:dd:44:17:3c:57:9c:a1:d3:cd:77:5e:db:66:25:
44:c7:0e:a1:39:8b:f5:5e:84:d9:de:fb:29:75:ed:
32:06:a1:5e:ff:38:93:09:40:f5:e8:de:5b:5a:1c:
eb:fc:1e:84:75:0b:b0:7c:25:83:76:45:72:ba:bf:
f9:79:00:a5:2a:ea:5c:6e:0f:83:5c:29:b9:8d:c3:
20:c0:0f:d8:9c:6f:a7:f9:6d:cc:4e:7e:49:9d:b2:
71:96:ae:33:de:f0:77:72:51:73:9c:95:7a:0f:41:
10:07:90:50:7e:54:8b:4f:6b:ec:2f:ad:13:e0:e9:
8b:04:53:f8:e9:4d:4c:ba:7c:4c:d0:38:0b:29:cd:
e7:34:0b:37:4e:2b:79:f3:15:94:e2:5b:54:38:4b:
b9:85:d6:09:b6:ac:7c:84:05:d1:0a:c6:64:6c:b9:
03:56:83:d1:fe:93:72:d0:6e:1e:00:f4:d0:b7:5a:
71:0f:75:6e:54:95:5a:ba:f8:52:a9:cb:87:25:7b:
b0:5b:cf:18:8e:69:86:e8:c1:d0:aa:16:7a:90:40:
ec:61:81:0d:a4:96:05:aa:5d:1f:98:6c:cc:f5:6e:
56:86:bb:aa:bd:64:6d:18:48:12:b7:0b:d4:ea:c0:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:4A:4C:CF:37:2C:AA:8F:7A:B3:22:D2:9B:6D:0D:54:A8:02:5F
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:42:80:d4:dd:0a:24:87:ee:2e:ca:72:49:3e:12:e0:fe:
6b:e6:c2:c3:2c:73:98:05:41:0e:53:05:71:a0:ad:b9:6d:05:
6b:28:30:cf:cd:22:05:87:91:dd:90:f8:49:db:b7:ae:4a:10:
9a:d1:17:23:a1:85:a0:11:49:e5:36:98:d7:50:9b:b6:d9:31:
90:3c:6f:d0:16:95:ee:4c:20:cb:d2:bc:fa:cf:a5:91:09:3b:
e1:94:9e:d0:f1:bd:d7:d1:64:3c:42:bc:df:40:c5:0e:22:a2:
2a:a4:f3:93:56:99:99:50:95:75:9f:42:47:0f:e3:46:41:07:
f8:15:a4:ec:ae:25:2b:1d:f2:e7:c7:fb:20:c6:60:44:b0:36:
23:ea:10:20:74:a9:8d:fc:82:dc:2c:b0:1c:20:60:ba:5f:ba:
80:43:79:87:0a:23:03:e7:29:44:0d:7f:7c:e6:70:8f:b2:15:
a9:5f:79:54:0a:f9:4b:9d:bc:ec:95:0c:d8:06:f3:17:e7:39:
c2:ac:94:66:c8:aa:a5:78:88:87:f6:b1:a5:5a:dd:c0:98:85:
2e:f0:9d:ae:c6:64:aa:03:47:a4:42:a6:88:d7:3a:67:c3:42:
b1:16:e2:f0:32:a7:d3:b4:d4:b6:bc:3c:2e:21:d4:fa:65:cd:
d7:59:7d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4oSamL59OUUvl3v9a+wCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODgwZWQxMDIxZDBlY2FjNzEyMDU2NzNiMDA0ODEzYjM5
ZGZjOTkwHhcNMjYwNzI4MTgwMDIyWhcNMjYwNzI5MTgwMDIyWjAzMTEwLwYDVQQD
EygxMzA4NGE0Y2NmMzcyY2FhOGY3YWIzMjJkMjliNmQwZDU0YTgwMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSPcQfpL+qMfDA5PD1Sb3UQXPFec
odPNd17bZiVExw6hOYv1XoTZ3vspde0yBqFe/ziTCUD16N5bWhzr/B6EdQuwfCWD
dkVyur/5eQClKupcbg+DXCm5jcMgwA/YnG+n+W3MTn5JnbJxlq4z3vB3clFznJV6
D0EQB5BQflSLT2vsL60T4OmLBFP46U1MunxM0DgLKc3nNAs3Tit58xWU4ltUOEu5
hdYJtqx8hAXRCsZkbLkDVoPR/pNy0G4eAPTQt1pxD3VuVJVauvhSqcuHJXuwW88Y
jmmG6MHQqhZ6kEDsYYENpJYFql0fmGzM9W5WhruqvWRtGEgStwvU6sCW3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMISkzPNyyqj3qzItKbbQ1UqAJfMB8GA1UdIwQY
MBaAFNeIDtECHQ7KxxIFZzsASBOznfyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUt
MDQ3NzdjMTk4ZWYxLzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUtMDQ3NzdjMTk4ZWYx
LzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVRCgNTd
CiSH7i7Kckk+EuD+a+bCwyxzmAVBDlMFcaCtuW0Faygwz80iBYeR3ZD4Sdu3rkoQ
mtEXI6GFoBFJ5TaY11CbttkxkDxv0BaV7kwgy9K8+s+lkQk74ZSe0PG919FkPEK8
30DFDiKiKqTzk1aZmVCVdZ9CRw/jRkEH+BWk7K4lKx3y58f7IMZgRLA2I+oQIHSp
jfyC3CywHCBgul+6gEN5hwojA+cpRA1/fOZwj7IVqV95VAr5S5287JUM2AbzF+c5
wqyUZsiqpXiIh/axpVrdwJiFLvCdrsZkqgNHpEKmiNc6Z8NCsRbi8DKn07TUtrw8
LiHU+mXN11l9dw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:34:51 2026 by rpki-client