Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: clUXN68zqL8QoA6jZzDwOdgy4LysdWnNwq8EUn3etgo=
Subject key identifier: D4:BB:83:7D:97:A3:F3:82:23:35:31:18:BC:D7:14:FA:5A:93:94:3F
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019FABD1386F9D828C5B8F7BC4557D4D012C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 03:00:43 +0000
Manifest this update: Wed 29 Jul 2026 03:00:43 +0000
Manifest next update: Thu 30 Jul 2026 03:00:43 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: VzRuATsNncQ1U5BhCM2AL0i7JOUkCgTTaQwYzKwDkJw=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:38:6f:9d:82:8c:5b:8f:7b:c4:55:7d:4d:01:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Jul 29 03:00:43 2026 GMT
Not After : Jul 30 03:00:43 2026 GMT
Subject: CN=d4bb837d97a3f38223353118bcd714fa5a93943f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:08:c1:9b:91:fc:6d:05:39:d9:0e:45:4b:
73:de:38:00:70:c3:93:58:d3:5f:8b:cd:94:e4:fd:
49:b7:84:31:14:79:b5:fb:d4:8c:99:cd:54:93:a4:
7e:04:5f:cc:42:f5:42:5d:b4:51:7e:d8:82:3e:62:
81:80:0b:6b:c0:73:cc:58:95:a9:01:00:31:03:c7:
e8:12:3c:4d:87:e1:05:2e:95:7b:4b:00:f9:9a:58:
a4:73:1c:f4:fa:5d:18:bb:fe:34:8a:0b:ab:82:90:
28:8c:6a:19:87:7c:f6:32:c5:1a:64:e0:9d:63:0d:
6d:21:99:45:7b:08:b5:a9:14:bf:e6:a6:c7:ed:4e:
65:24:4c:f9:85:60:18:09:87:fb:7c:34:bc:06:08:
95:5f:14:f9:e2:ed:db:a2:91:69:ba:fa:23:fc:b6:
10:92:f8:3e:17:89:1b:d2:a5:17:ae:dd:00:75:b3:
85:bc:8b:08:e0:e5:92:47:27:c3:f1:3a:63:44:52:
2c:a4:ee:d4:54:7d:18:5d:1d:6f:8f:91:e1:54:84:
16:c6:8b:a0:d4:e4:12:c5:bc:36:4e:66:a3:28:b6:
a7:83:d4:e0:c8:99:1a:29:f6:d3:bd:3a:73:99:de:
d4:f8:d3:24:59:6c:1e:98:23:fc:1d:10:f2:2a:ba:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:83:7D:97:A3:F3:82:23:35:31:18:BC:D7:14:FA:5A:93:94:3F
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:10:da:45:da:e3:50:b9:ab:bf:f7:e2:81:51:68:3e:5f:01:
5c:a9:b5:b3:20:24:54:5e:6b:f1:71:07:c2:fc:6f:57:6f:6b:
6c:30:84:53:d9:21:37:dc:39:90:c5:15:98:93:dc:73:f7:1b:
e6:d8:b8:d6:9e:5a:3d:dd:ae:46:e2:df:74:73:46:a4:3a:f8:
b8:d7:c0:ae:14:10:54:9e:a1:f5:d6:99:ff:1c:25:2d:fc:52:
2f:9f:ec:32:fd:ba:3b:2c:3e:f5:5b:ad:f1:12:65:e0:50:8b:
65:1c:16:9b:49:65:7a:db:50:4e:7c:18:94:10:c2:bb:03:76:
2f:31:40:fe:44:f6:e0:36:8c:bf:2f:2a:e5:d6:b0:c9:dd:b6:
40:80:57:35:c7:8b:d8:fb:4f:66:a2:49:d0:8d:c8:0d:9e:da:
5f:16:d4:9d:60:5a:a3:48:4c:db:49:60:91:d5:ac:2d:c3:b9:
3b:e6:18:bb:db:a7:d2:9a:78:04:5d:63:94:e1:0d:f8:7c:dc:
aa:12:0f:d7:d7:ba:43:8f:8e:c9:c5:e2:0e:9b:b9:1b:bd:95:
15:2b:cd:9a:e7:d5:7f:7b:24:e4:02:36:2c:4b:e3:0e:a3:e9:
a0:5e:1b:c8:02:72:30:54:cb:be:af:01:07:ca:c6:82:95:d6:
76:3e:e1:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0ThvnYKMW497xFV9TQEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDU0YzQ1NmNlNjhiYThmZWNhZDU0MmFhYjk2MTBiMWVj
YzEyZTIwHhcNMjYwNzI5MDMwMDQzWhcNMjYwNzMwMDMwMDQzWjAzMTEwLwYDVQQD
EyhkNGJiODM3ZDk3YTNmMzgyMjMzNTMxMThiY2Q3MTRmYTVhOTM5NDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnMIwZuR/G0FOdkORUtz3jgAcMOT
WNNfi82U5P1Jt4QxFHm1+9SMmc1Uk6R+BF/MQvVCXbRRftiCPmKBgAtrwHPMWJWp
AQAxA8foEjxNh+EFLpV7SwD5mlikcxz0+l0Yu/40igurgpAojGoZh3z2MsUaZOCd
Yw1tIZlFewi1qRS/5qbH7U5lJEz5hWAYCYf7fDS8BgiVXxT54u3bopFpuvoj/LYQ
kvg+F4kb0qUXrt0AdbOFvIsI4OWSRyfD8TpjRFIspO7UVH0YXR1vj5HhVIQWxoug
1OQSxbw2TmajKLang9TgyJkaKfbTvTpzmd7U+NMkWWwemCP8HRDyKrp0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS7g32Xo/OCIzUxGLzXFPpak5Q/MB8GA1UdIwQY
MBaAFOJFTEVs5ouo/srVQqq5YQsezBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQt
OWY5N2IwZmM0ODMyLzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQtOWY5N2IwZmM0ODMy
LzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxDaRdrj
ULmrv/figVFoPl8BXKm1syAkVF5r8XEHwvxvV29rbDCEU9khN9w5kMUVmJPcc/cb
5ti41p5aPd2uRuLfdHNGpDr4uNfArhQQVJ6h9daZ/xwlLfxSL5/sMv26Oyw+9Vut
8RJl4FCLZRwWm0llettQTnwYlBDCuwN2LzFA/kT24DaMvy8q5dawyd22QIBXNceL
2PtPZqJJ0I3IDZ7aXxbUnWBao0hM20lgkdWsLcO5O+YYu9un0pp4BF1jlOEN+Hzc
qhIP19e6Q4+OycXiDpu5G72VFSvNmufVf3sk5AI2LEvjDqPpoF4byAJyMFTLvq8B
B8rGgpXWdj7h7A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:03:47 2026 by rpki-client