Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: zfToaXKt5G0jeCOCD8SZEx+LYNVDFs2UQ1v417UOjkY=
Subject key identifier: 78:28:1C:22:96:48:8A:A3:C4:99:F5:59:32:90:FF:26:DC:01:E1:A9
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019F916DAC7BBEE111DC189E8B3867739C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 00:01:51 +0000
Manifest this update: Fri 24 Jul 2026 00:01:51 +0000
Manifest next update: Sat 25 Jul 2026 00:01:51 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: FY7eQ8xDJLurPNhNroU6HELGDQa/wNt7JkPsCqDvNM4=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:ac:7b:be:e1:11:dc:18:9e:8b:38:67:73:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Jul 24 00:01:51 2026 GMT
Not After : Jul 25 00:01:51 2026 GMT
Subject: CN=78281c2296488aa3c499f5593290ff26dc01e1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:00:15:9d:99:91:a3:07:e3:bd:a8:71:50:
f4:f8:80:68:92:14:aa:ff:c2:39:4e:e1:f3:4b:a1:
7a:65:05:ff:a4:a9:fd:05:9d:92:e9:7b:56:5f:5c:
3b:62:94:8a:d7:c1:56:e6:8e:cc:31:b5:16:41:a0:
04:d5:1e:9d:7b:25:a0:fd:43:24:19:29:47:c7:d9:
da:ac:74:38:13:6b:63:e4:6e:88:f8:51:64:f3:6e:
70:44:20:de:9e:a0:f6:48:c1:92:9d:d2:3b:22:ab:
07:1e:8b:d1:09:7c:08:31:27:45:e6:56:cb:5e:f3:
02:2e:d1:2c:85:27:9a:d1:9f:46:06:35:bb:62:1d:
22:a1:1c:fb:98:a7:cc:f7:eb:57:57:32:21:c8:51:
84:a1:5c:1f:89:bd:05:c4:54:72:b8:a1:05:5b:51:
e0:ae:45:db:1e:a3:98:6e:1b:a3:e5:eb:f0:9d:32:
62:fc:78:19:66:c4:4e:48:93:fb:33:a7:c7:87:52:
5b:0f:97:86:80:30:2d:f7:c7:f5:51:6a:3c:1b:21:
62:69:78:cc:9c:c3:be:07:a7:08:62:ae:a9:54:3f:
21:10:cc:88:d1:d6:f1:64:45:59:cb:6c:27:f4:90:
64:11:10:4b:c7:8c:94:40:e1:a6:0d:23:0e:da:1b:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:28:1C:22:96:48:8A:A3:C4:99:F5:59:32:90:FF:26:DC:01:E1:A9
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:84:d8:c1:42:13:08:ea:1c:8b:d1:da:15:f1:42:92:fb:f8:
2e:57:c0:c0:fd:82:0f:78:4d:ae:01:fa:57:32:40:fd:48:33:
2d:d7:25:d0:db:ab:d5:8c:b4:dd:38:1a:91:d4:fc:49:82:f4:
fb:59:14:e9:42:28:d7:f7:83:6a:e0:e9:63:69:d8:ea:a8:89:
c1:bd:d8:2b:1b:14:c5:3a:9d:ab:82:33:e1:31:6f:84:c1:30:
68:26:24:65:ec:47:db:69:ce:17:f1:f9:6e:23:3c:52:2f:67:
85:b8:4e:51:b6:5a:04:bf:5b:08:77:f3:1a:69:c8:23:cd:0d:
ec:35:ff:52:8a:06:da:28:bd:9e:48:b7:72:95:4c:f0:1b:78:
1d:6f:16:35:9f:bf:b8:d9:36:cd:dd:59:5d:2d:a5:05:c3:49:
1a:25:ec:0a:80:10:0a:70:38:f7:80:c9:01:10:7a:c0:aa:10:
7d:0a:d7:84:9d:c3:93:44:a3:74:86:42:d3:02:99:7f:20:b2:
42:3f:c9:c2:f0:11:85:0f:51:f3:c8:e6:da:93:18:8e:98:2c:
d9:36:09:51:2e:78:10:50:7d:d9:13:24:8a:23:52:90:cf:2a:
dc:14:4c:8b:00:dd:bb:12:27:a3:20:7f:2f:06:75:30:92:64:
f2:33:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:28 2026 by rpki-client