Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: 8Mbs4cfP78XX2kNPoGV7PJkIgfBB+G49TDWFf5rw1Tg=
Subject key identifier: 5E:0F:F6:96:E9:41:DD:C9:A7:36:FD:6C:AB:23:77:11:1D:8A:97:EA
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019FA9754BCA22F0C856010CCE36E25D1EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1939
Signing time: Tue 28 Jul 2026 16:01:04 +0000
Manifest this update: Tue 28 Jul 2026 16:01:04 +0000
Manifest next update: Wed 29 Jul 2026 16:01:04 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: 4dfA6e6cNOcN56L0VbUqf1dhQc8p5cjndiYYXhqCZko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:4b:ca:22:f0:c8:56:01:0c:ce:36:e2:5d:1e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Jul 28 16:01:04 2026 GMT
Not After : Jul 29 16:01:04 2026 GMT
Subject: CN=5e0ff696e941ddc9a736fd6cab2377111d8a97ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:17:be:f4:62:59:f1:9b:72:4b:ce:5c:11:
67:51:5d:df:22:26:11:1d:9b:a0:00:7c:e1:f5:f9:
ca:26:3c:eb:fd:53:c8:f9:c8:d9:f6:f1:d5:4a:39:
b3:5a:32:ff:5a:45:55:34:d9:03:ac:70:7f:45:2b:
ea:73:25:d5:49:03:96:2b:93:c8:4b:ea:3b:c5:ff:
5e:fc:2b:03:8a:67:02:3b:1c:d4:77:4b:28:8c:b0:
67:07:3a:19:e9:bc:2e:0a:ed:99:83:d9:da:70:09:
82:5a:57:51:ef:05:fc:96:69:b7:60:79:2d:2e:ac:
6e:30:b8:31:97:78:6e:4f:10:f9:80:cc:d5:ef:8a:
6e:22:50:1a:ad:56:2c:23:47:f5:63:6a:94:ba:dc:
97:7e:64:4e:57:90:26:11:74:c5:6c:43:d1:0f:2f:
c2:3d:92:39:85:98:f2:1e:d3:16:e4:69:a2:de:7e:
68:04:b6:a0:46:77:70:81:93:07:7e:25:cd:ae:2e:
ca:59:bd:33:1d:be:cc:e2:d0:39:0f:bd:1d:01:26:
86:4d:8c:0e:5a:9b:98:c7:60:a0:99:cc:54:4c:6f:
b8:a4:39:5d:23:a9:14:44:0b:2c:d9:23:36:c5:3b:
7f:69:e9:69:bc:69:0e:8d:46:76:be:76:d7:99:97:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:F6:96:E9:41:DD:C9:A7:36:FD:6C:AB:23:77:11:1D:8A:97:EA
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:11:b3:30:c8:37:44:01:f8:ff:e1:73:b3:90:91:c6:a8:09:
84:39:ea:b7:a6:8d:d5:b4:95:fc:dd:44:5f:e4:a2:1f:86:d5:
f8:3b:59:fc:7e:90:ba:15:c1:05:f7:bd:c3:c2:52:6d:19:c8:
d9:54:43:16:f4:10:a5:6b:56:6d:21:29:13:53:8e:d5:2c:fe:
d7:fc:4a:de:ae:1c:8f:36:c6:44:ba:7d:02:eb:da:54:20:64:
bf:90:61:68:2d:99:92:c5:f2:c6:c4:2a:51:53:11:8e:1a:26:
ed:5a:ed:81:cc:b2:88:ab:0e:1d:a1:ac:bf:68:21:61:fc:1b:
20:48:7a:65:2b:d5:07:13:d9:94:1e:4c:af:46:fa:53:b5:26:
88:df:79:5e:98:fd:dc:6e:e8:ba:8f:30:34:c0:0f:aa:8f:2a:
9e:48:f2:65:00:ca:82:aa:3a:52:0d:ff:77:ed:87:f1:b2:b8:
59:11:2f:e1:14:f8:6e:7d:b9:73:5a:01:87:0c:e2:18:13:a5:
f3:6b:40:1a:8c:d2:9e:fb:9b:69:6d:b3:e8:ef:02:db:42:c8:
71:53:30:f6:9a:f8:62:3a:d4:cc:ff:34:b0:a5:d5:96:9d:be:
ab:d6:d7:f1:85:72:3a:65:99:51:d5:b9:e8:c5:ba:18:14:e3:
fc:43:99:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdUvKIvDIVgEMzjbiXR7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj
Y2VkZmMwHhcNMjYwNzI4MTYwMTA0WhcNMjYwNzI5MTYwMTA0WjAzMTEwLwYDVQQD
Eyg1ZTBmZjY5NmU5NDFkZGM5YTczNmZkNmNhYjIzNzcxMTFkOGE5N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXQXvvRiWfGbckvOXBFnUV3fIiYR
HZugAHzh9fnKJjzr/VPI+cjZ9vHVSjmzWjL/WkVVNNkDrHB/RSvqcyXVSQOWK5PI
S+o7xf9e/CsDimcCOxzUd0sojLBnBzoZ6bwuCu2Zg9nacAmCWldR7wX8lmm3YHkt
LqxuMLgxl3huTxD5gMzV74puIlAarVYsI0f1Y2qUutyXfmROV5AmEXTFbEPRDy/C
PZI5hZjyHtMW5Gmi3n5oBLagRndwgZMHfiXNri7KWb0zHb7M4tA5D70dASaGTYwO
WpuYx2CgmcxUTG+4pDldI6kURAss2SM2xTt/aelpvGkOjUZ2vnbXmZfZHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4P9pbpQd3Jpzb9bKsjdxEdipfqMB8GA1UdIwQY
MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt
MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5
LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyRGzMMg3
RAH4/+Fzs5CRxqgJhDnqt6aN1bSV/N1EX+SiH4bV+DtZ/H6QuhXBBfe9w8JSbRnI
2VRDFvQQpWtWbSEpE1OO1Sz+1/xK3q4cjzbGRLp9AuvaVCBkv5BhaC2ZksXyxsQq
UVMRjhom7VrtgcyyiKsOHaGsv2ghYfwbIEh6ZSvVBxPZlB5Mr0b6U7UmiN95Xpj9
3G7ouo8wNMAPqo8qnkjyZQDKgqo6Ug3/d+2H8bK4WREv4RT4bn25c1oBhwziGBOl
82tAGozSnvubaW2z6O8C20LIcVMw9pr4YjrUzP80sKXVlp2+q9bX8YVyOmWZUdW5
6MW6GBTj/EOZ3w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:07 2026 by rpki-client