Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: 06so0KJ8wyg94eWEXJMynRzGgig4rE2B4WIvPUc+ZNM=
Subject key identifier: E4:B4:97:CB:0C:F4:17:E3:CC:86:88:64:D8:95:60:43:4E:77:21:FC
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019F90C79024295DB901B54C7F6F575FD22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 19CC
Signing time: Thu 23 Jul 2026 21:00:25 +0000
Manifest this update: Thu 23 Jul 2026 21:00:25 +0000
Manifest next update: Fri 24 Jul 2026 21:00:25 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: xmXLUojxCHlWu6YXKsOH58aDQJpiaaWsYJcXOlajRuI=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:90:24:29:5d:b9:01:b5:4c:7f:6f:57:5f:d2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jul 23 21:00:25 2026 GMT
Not After : Jul 24 21:00:25 2026 GMT
Subject: CN=e4b497cb0cf417e3cc868864d89560434e7721fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:c5:29:f2:79:8b:e9:6a:56:a2:60:c1:0f:
fa:a5:af:6b:85:ed:20:83:dc:f4:99:a1:22:24:00:
f3:d5:df:62:05:d8:af:52:22:ec:ec:3c:f4:75:56:
1d:03:a9:b1:00:b2:c4:b4:83:78:82:88:53:86:4f:
d5:46:4a:c9:2c:b4:f3:69:b6:e2:aa:c3:f4:9c:3a:
11:7d:32:d5:f1:91:65:3f:c2:4a:d8:9f:ee:cf:37:
e7:07:e3:30:67:5f:3a:99:61:82:19:91:9a:13:83:
c8:94:d3:20:95:67:7f:2a:9d:27:42:6e:f5:a1:7b:
37:d8:bb:59:77:66:15:6e:85:c1:26:da:80:c1:03:
12:4c:db:bf:dc:f3:4b:8a:3a:a5:7a:61:89:d9:04:
1f:18:2e:49:c3:2f:4c:47:4f:3c:06:6e:1e:4e:c6:
37:21:ff:f7:f6:db:e6:13:39:87:4a:a0:6a:6a:32:
02:85:15:e3:1e:c7:bd:86:04:a6:62:f7:56:48:4b:
48:af:02:42:c1:5e:42:b1:89:a4:a6:f5:5f:6a:1e:
4f:c4:57:ab:b7:29:89:2c:75:e4:24:5b:22:5d:89:
76:6d:a8:00:63:f0:26:92:95:b5:9e:e3:fe:0b:10:
40:ed:b8:a9:ac:08:24:c9:a8:8e:bf:89:51:0f:f7:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B4:97:CB:0C:F4:17:E3:CC:86:88:64:D8:95:60:43:4E:77:21:FC
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:87:f8:b8:fc:16:e5:db:74:25:e6:b7:7e:4e:63:67:b3:82:
eb:65:bf:09:65:07:77:c8:47:74:1e:6f:3d:14:ae:b1:e3:1e:
29:6a:82:5f:3c:6a:b4:39:d7:2b:6b:0e:4d:5d:77:8d:f0:38:
96:30:ca:70:ea:ae:9e:1f:4e:2d:1d:0e:71:d7:3d:42:4d:f7:
95:6f:ad:79:d1:93:fa:f6:9b:85:35:96:57:5c:81:f7:c6:16:
c1:ca:30:e1:fe:7e:ac:f6:3e:b0:9e:89:b7:a8:e0:5f:fd:ee:
1c:0e:55:bf:fa:68:ab:7b:7a:25:15:6a:57:13:d3:ed:51:1a:
a0:6a:d1:43:ad:15:79:30:e1:1c:fd:21:fc:26:78:0e:ef:a2:
e5:27:5f:a3:f2:77:38:66:00:9d:51:e9:f6:fc:f5:09:30:ed:
c3:8a:f2:8e:56:a7:6e:b1:1a:03:91:5d:02:bb:3d:bf:40:89:
58:d9:aa:e2:8d:2c:2d:c9:b6:96:42:63:41:a9:73:2a:ec:ee:
3e:3a:74:d6:43:ac:f1:69:34:b8:d5:da:2c:b7:2e:43:8f:ef:
32:c2:1c:12:06:b2:20:7b:ef:39:94:6c:e7:9c:a9:86:75:36:
34:10:c5:06:17:74:f7:0d:de:05:46:d6:1d:e5:6a:b9:b7:8b:
7a:e0:34:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx5AkKV25AbVMf29XX9ItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODgwZWQxMDIxZDBlY2FjNzEyMDU2NzNiMDA0ODEzYjM5
ZGZjOTkwHhcNMjYwNzIzMjEwMDI1WhcNMjYwNzI0MjEwMDI1WjAzMTEwLwYDVQQD
EyhlNGI0OTdjYjBjZjQxN2UzY2M4Njg4NjRkODk1NjA0MzRlNzcyMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHzFKfJ5i+lqVqJgwQ/6pa9rhe0g
g9z0maEiJADz1d9iBdivUiLs7Dz0dVYdA6mxALLEtIN4gohThk/VRkrJLLTzabbi
qsP0nDoRfTLV8ZFlP8JK2J/uzzfnB+MwZ186mWGCGZGaE4PIlNMglWd/Kp0nQm71
oXs32LtZd2YVboXBJtqAwQMSTNu/3PNLijqlemGJ2QQfGC5Jwy9MR088Bm4eTsY3
If/39tvmEzmHSqBqajIChRXjHse9hgSmYvdWSEtIrwJCwV5CsYmkpvVfah5PxFer
tymJLHXkJFsiXYl2bagAY/AmkpW1nuP+CxBA7biprAgkyaiOv4lRD/eoTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOS0l8sM9BfjzIaIZNiVYENOdyH8MB8GA1UdIwQY
MBaAFNeIDtECHQ7KxxIFZzsASBOznfyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUt
MDQ3NzdjMTk4ZWYxLzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC83NTY1MDUtMjA2Mi00OWU3LTk0ZmUtMDQ3NzdjMTk4ZWYx
LzEvMTRnTzBRSWREc3JIRWdWbk93QklFN09kX0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYf4uPwW
5dt0Jea3fk5jZ7OC62W/CWUHd8hHdB5vPRSuseMeKWqCXzxqtDnXK2sOTV13jfA4
ljDKcOqunh9OLR0Ocdc9Qk33lW+tedGT+vabhTWWV1yB98YWwcow4f5+rPY+sJ6J
t6jgX/3uHA5Vv/poq3t6JRVqVxPT7VEaoGrRQ60VeTDhHP0h/CZ4Du+i5Sdfo/J3
OGYAnVHp9vz1CTDtw4ryjlanbrEaA5FdArs9v0CJWNmq4o0sLcm2lkJjQalzKuzu
Pjp01kOs8Wk0uNXaLLcuQ4/vMsIcEgayIHvvOZRs55yphnU2NBDFBhd09w3eBUbW
HeVqubeLeuA0pw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:44 2026 by rpki-client