Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
File: 1KfKDW2_IW-UsFm4kZdgmFjcclc.mft (raw, json)
Hash identifier: ZzKQ6vcvQN7GCeF+WRkwZB1fGTIiMJa4FaW7s2TAoTY=
Subject key identifier: 2C:17:20:A1:3A:33:75:63:05:04:4D:42:B8:A2:69:A9:0E:2C:F1:41
Authority key identifier: D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
Certificate issuer: /CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Certificate serial: 019F8F7EF753F1210C9555F133D53E411502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:30 +0000
Manifest this update: Thu 23 Jul 2026 15:01:30 +0000
Manifest next update: Fri 24 Jul 2026 15:01:30 +0000
Files and hashes: 1: 1KfKDW2_IW-UsFm4kZdgmFjcclc.crl (hash: /nABkqovjpuWjkJgcPTtbcsCT3ZXubmf0hOt0oWUnN4=)
2: uoNpQh4ifZ34O19c1R5qUVlogEE.roa (hash: gHKmqmMiLwnyxP87W/6N6XbUpWy1lA1P9JZgvRaP+3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:f7:53:f1:21:0c:95:55:f1:33:d5:3e:41:15:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Validity
Not Before: Jul 23 15:01:30 2026 GMT
Not After : Jul 24 15:01:30 2026 GMT
Subject: CN=2c1720a13a33756305044d42b8a269a90e2cf141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:3c:e0:5e:bf:d6:bd:6a:63:6d:a8:0c:6e:
54:51:13:b5:64:fa:61:01:6b:b6:8b:97:be:b0:ba:
a2:84:97:9f:02:7b:0c:19:4e:09:a3:6e:5d:44:d5:
fd:9c:2d:28:93:9e:cf:a7:26:bb:9d:49:8a:5b:13:
be:5f:bf:5c:51:6a:23:28:c6:1d:bc:c4:49:66:6a:
a0:1c:47:9f:20:6e:fc:62:8a:ab:cd:34:4e:12:91:
cb:f1:c6:76:60:08:1d:f4:3a:d1:01:81:43:78:05:
11:98:c4:f9:87:d9:fb:2f:4a:e6:2a:97:fc:79:9f:
41:56:be:13:f2:f1:91:22:9a:c3:1b:4c:c3:53:51:
c2:8c:59:53:e8:82:85:82:6b:4c:6e:40:99:c9:f7:
5a:cd:2d:72:6e:b3:ab:55:7e:6c:e0:73:3b:a2:d0:
d9:2c:ad:9d:98:39:ec:8e:f3:c6:99:fd:20:3e:47:
5c:ff:9b:ef:ad:8f:d6:75:83:e8:14:a2:23:fd:d2:
94:cd:91:89:ee:92:b0:42:d5:af:c1:62:40:5f:b8:
21:de:17:a7:62:39:61:fc:98:9d:6c:41:20:46:94:
6d:fa:36:40:d6:d1:2c:92:fa:26:5a:62:e9:4b:63:
f8:85:90:d9:f8:07:01:b7:6c:3a:6c:24:ad:22:99:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:17:20:A1:3A:33:75:63:05:04:4D:42:B8:A2:69:A9:0E:2C:F1:41
X509v3 Authority Key Identifier:
keyid:D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b4:d2:c4:a4:b0:ab:31:64:1d:fb:19:fb:70:2c:d2:17:27:
cc:57:c2:99:4b:73:41:e6:3e:d5:87:f5:2d:ad:8c:15:74:12:
54:cd:d3:bc:e1:01:39:a0:7b:92:7d:76:b8:c4:03:99:61:4a:
33:2b:60:43:51:21:d6:3c:a9:04:b9:ea:7e:dc:81:46:f2:06:
9c:51:5f:67:e4:20:98:44:59:d2:bf:48:3c:82:47:80:ae:9b:
48:49:69:df:d0:41:d3:00:8d:39:06:bc:53:de:07:b1:ba:6f:
58:d7:6b:ae:cc:57:d9:53:ee:23:2b:ef:af:9b:ad:e7:13:17:
00:2e:91:36:e9:fc:dd:9a:f3:c9:19:57:fb:f4:f4:ee:34:bb:
f6:85:ff:7a:ee:3d:d4:87:1f:0c:ed:43:a2:1f:b0:6f:c9:db:
f9:cd:e5:aa:d6:07:f4:ee:1d:dc:b7:c5:97:4b:77:c1:3b:3c:
7f:5e:b6:35:0d:25:df:1e:67:d1:0f:09:55:9f:85:4b:f7:9d:
50:ee:49:8f:05:a4:10:38:eb:19:b8:41:2f:e5:c6:6f:97:11:
16:e1:cf:dc:01:5c:ee:8b:56:ae:a7:9d:45:68:97:09:33:09:
dc:f0:47:bf:01:34:9d:d6:7f:cb:a6:b8:05:74:0a:e0:cc:88:
d9:2f:60:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfvdT8SEMlVXxM9U+QRUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YTdjYTBkNmRiZjIxNmY5NGIwNTliODkxOTc2MDk4NThk
YzcyNTcwHhcNMjYwNzIzMTUwMTMwWhcNMjYwNzI0MTUwMTMwWjAzMTEwLwYDVQQD
EygyYzE3MjBhMTNhMzM3NTYzMDUwNDRkNDJiOGEyNjlhOTBlMmNmMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvQ84F6/1r1qY22oDG5UURO1ZPph
AWu2i5e+sLqihJefAnsMGU4Jo25dRNX9nC0ok57Ppya7nUmKWxO+X79cUWojKMYd
vMRJZmqgHEefIG78YoqrzTROEpHL8cZ2YAgd9DrRAYFDeAURmMT5h9n7L0rmKpf8
eZ9BVr4T8vGRIprDG0zDU1HCjFlT6IKFgmtMbkCZyfdazS1ybrOrVX5s4HM7otDZ
LK2dmDnsjvPGmf0gPkdc/5vvrY/WdYPoFKIj/dKUzZGJ7pKwQtWvwWJAX7gh3hen
Yjlh/JidbEEgRpRt+jZA1tEskvomWmLpS2P4hZDZ+AcBt2w6bCStIpnVCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwXIKE6M3VjBQRNQriiaakOLPFBMB8GA1UdIwQY
MBaAFNSnyg1tvyFvlLBZuJGXYJhY3HJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtmS0RXMl9JVy1Vc0ZtNGtaZGdtRmpjY2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDct
OTExNjBiYjRjNjU5LzEvMUtmS0RXMl9JVy1Vc0ZtNGtaZGdtRmpjY2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wMWM3YzAtZTcwMC00MThlLTkyMDctOTExNjBiYjRjNjU5
LzEvMUtmS0RXMl9JVy1Vc0ZtNGtaZGdtRmpjY2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLTSxKSw
qzFkHfsZ+3As0hcnzFfCmUtzQeY+1Yf1La2MFXQSVM3TvOEBOaB7kn12uMQDmWFK
MytgQ1Eh1jypBLnqftyBRvIGnFFfZ+QgmERZ0r9IPIJHgK6bSElp39BB0wCNOQa8
U94HsbpvWNdrrsxX2VPuIyvvr5ut5xMXAC6RNun83ZrzyRlX+/T07jS79oX/eu49
1IcfDO1Doh+wb8nb+c3lqtYH9O4d3LfFl0t3wTs8f162NQ0l3x5n0Q8JVZ+FS/ed
UO5JjwWkEDjrGbhBL+XGb5cRFuHP3AFc7otWrqedRWiXCTMJ3PBHvwE0ndZ/y6a4
BXQK4MyI2S9gfQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:10 2026 by rpki-client