Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: 5LgBHC2g6gzgvsqpglaKN3ZXFI/fj1BQR3eAF+8720I=
Subject key identifier: CD:D9:1E:BE:8E:DF:21:65:2E:1F:65:54:2D:D2:3B:9E:2B:76:4F:1E
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019FAC08B0637D202A83753F711E1C812F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 04:01:18 +0000
Manifest this update: Wed 29 Jul 2026 04:01:18 +0000
Manifest next update: Thu 30 Jul 2026 04:01:18 +0000
Files and hashes: 1: Osa6LFpPjxzccoJpJWUFai3FcOM.roa (hash: f4ffH8gs+kFN1V+wclg/L6EHE6p7VK3WcfAizujX7hA=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: 20t7kIKJmV+BS9ZJMvFHxRu9JaGwpddBoiJUvYCrhWo=)
3: hulhdN0Qn-peYoW5Is6weOEdrhI.roa (hash: s79WL7wCJTobjZ+5yZurGdhzF/MfqEzBAkYlfeNPrEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:b0:63:7d:20:2a:83:75:3f:71:1e:1c:81:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Jul 29 04:01:18 2026 GMT
Not After : Jul 30 04:01:18 2026 GMT
Subject: CN=cdd91ebe8edf21652e1f65542dd23b9e2b764f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:29:ca:7c:02:b4:ba:41:fc:3b:4d:56:97:55:
da:d5:59:b3:88:11:84:49:19:8b:20:5c:73:2e:82:
1c:e1:df:d4:2e:fc:09:ae:fa:5f:69:0e:7a:ba:e1:
6f:a7:a6:c9:1c:92:92:48:83:02:2c:db:7d:90:ab:
7a:3b:bc:c5:79:c8:a9:39:dd:7d:ea:9d:17:d3:77:
d1:51:ce:81:b1:5f:3d:6e:94:43:98:19:dd:63:ee:
ca:2a:96:3b:c5:6b:36:d3:10:ed:dd:f3:89:c8:90:
c2:2e:20:4d:25:06:48:4d:a0:6b:5f:ca:f0:cf:56:
7e:71:0e:f3:86:de:f7:e6:6e:91:d1:6c:46:5c:e7:
46:8a:0d:e0:09:24:8f:02:fb:9f:f2:f5:93:70:88:
a1:64:cc:37:e8:0a:de:3c:fb:c4:03:e1:e0:b8:37:
d4:42:f8:78:e1:2d:8f:35:45:5f:41:98:84:0b:6f:
ab:f5:d9:1d:5b:97:77:5f:81:1a:be:e7:3c:65:06:
2f:24:af:2a:5b:8f:56:f4:2e:9f:da:45:bc:ef:2c:
da:90:2e:a3:4a:91:eb:39:4a:7e:d3:db:e1:4d:7a:
23:c0:3d:f3:89:7b:b4:3f:4f:31:49:bb:e8:59:13:
40:4b:d8:9b:b6:3a:06:22:58:b9:5c:f3:15:be:9d:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D9:1E:BE:8E:DF:21:65:2E:1F:65:54:2D:D2:3B:9E:2B:76:4F:1E
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:56:f7:6c:d9:6f:69:b0:38:96:f2:05:1e:39:0e:98:da:96:
c4:c9:7b:18:12:a9:41:37:36:d2:33:dc:e5:16:d4:cb:e5:c8:
1d:0e:79:8a:f2:4c:0c:12:09:26:86:95:24:9f:08:ed:5b:5e:
c2:14:60:71:77:6c:63:96:f8:66:48:8a:71:ed:42:37:bf:ea:
a4:55:a2:70:04:45:58:43:fb:31:e7:3d:3b:fb:09:8d:b3:50:
b2:e8:eb:3e:04:fe:00:95:e6:0c:db:e8:cc:fa:05:7d:11:0c:
5d:4b:76:bc:13:00:8c:50:54:c3:8a:bd:a9:99:95:7e:cb:c9:
26:4d:14:1d:51:d6:33:f1:5f:83:51:28:af:33:58:ef:1d:6c:
2d:3d:0f:50:1f:5f:44:dd:7a:ef:8c:26:7b:b6:fe:f1:f9:35:
97:be:79:99:a2:c2:c3:b3:db:d3:7e:5b:a8:bc:08:63:ad:e5:
05:e0:11:f8:fd:68:c3:44:b5:c4:6b:dd:81:6c:97:1d:1e:67:
ae:7b:de:f4:09:0f:ca:3c:60:3d:15:bd:8a:87:a1:ca:82:83:
1e:85:a5:6b:b4:95:42:93:00:e4:e7:8d:b2:35:7a:97:11:21:
23:4e:9b:3d:b1:36:2a:e9:58:94:0b:e7:0a:79:96:05:70:b7:
4c:96:f2:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCLBjfSAqg3U/cR4cgS9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTc2OTI5Y2JlMjFjZWRkOTRjMDEyYmE1OGJiMGI2ZjEy
OTcyMmUwHhcNMjYwNzI5MDQwMTE4WhcNMjYwNzMwMDQwMTE4WjAzMTEwLwYDVQQD
EyhjZGQ5MWViZThlZGYyMTY1MmUxZjY1NTQyZGQyM2I5ZTJiNzY0ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SnKfAK0ukH8O01Wl1Xa1VmziBGE
SRmLIFxzLoIc4d/ULvwJrvpfaQ56uuFvp6bJHJKSSIMCLNt9kKt6O7zFecipOd19
6p0X03fRUc6BsV89bpRDmBndY+7KKpY7xWs20xDt3fOJyJDCLiBNJQZITaBrX8rw
z1Z+cQ7zht735m6R0WxGXOdGig3gCSSPAvuf8vWTcIihZMw36ArePPvEA+HguDfU
Qvh44S2PNUVfQZiEC2+r9dkdW5d3X4Eavuc8ZQYvJK8qW49W9C6f2kW87yzakC6j
SpHrOUp+09vhTXojwD3ziXu0P08xSbvoWRNAS9ibtjoGIli5XPMVvp3GAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3ZHr6O3yFlLh9lVC3SO54rdk8eMB8GA1UdIwQY
MBaAFHCnaSnL4hzt2UwBK6WLsLbxKXIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQt
YTQwOWUyMmEyNDNlLzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMTRmNDctNjI4Yi00ZmI4LWIzNDQtYTQwOWUyMmEyNDNl
LzEvY0tkcEtjdmlITzNaVEFFcnBZdXd0dkVwY2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVb3bNlv
abA4lvIFHjkOmNqWxMl7GBKpQTc20jPc5RbUy+XIHQ55ivJMDBIJJoaVJJ8I7Vte
whRgcXdsY5b4ZkiKce1CN7/qpFWicARFWEP7Mec9O/sJjbNQsujrPgT+AJXmDNvo
zPoFfREMXUt2vBMAjFBUw4q9qZmVfsvJJk0UHVHWM/Ffg1EorzNY7x1sLT0PUB9f
RN1674wme7b+8fk1l755maLCw7Pb035bqLwIY63lBeAR+P1ow0S1xGvdgWyXHR5n
rnve9AkPyjxgPRW9ioehyoKDHoWla7SVQpMA5OeNsjV6lxEhI06bPbE2KulYlAvn
CnmWBXC3TJbyLg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:22 2026 by rpki-client