Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
File: 4VW0MN7doRMQ9shzieMgj8ZSnps.mft (raw, json)
Hash identifier: p0U3p0ii5P1MLxtDBTIeNtgWnu2hnlD1W1gQM2vAnm4=
Subject key identifier: 86:97:A0:C5:53:A7:02:D5:73:0D:56:C8:9A:0C:B7:B0:25:E2:40:98
Authority key identifier: E1:55:B4:30:DE:DD:A1:13:10:F6:C8:73:89:E3:20:8F:C6:52:9E:9B
Certificate issuer: /CN=e155b430dedda11310f6c87389e3208fc6529e9b
Certificate serial: 019F8F7DEC64C6D9F305BEC0F5428E5A7467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
Manifest number: 12EE
Signing time: Thu 23 Jul 2026 15:00:22 +0000
Manifest this update: Thu 23 Jul 2026 15:00:22 +0000
Manifest next update: Fri 24 Jul 2026 15:00:22 +0000
Files and hashes: 1: 4VW0MN7doRMQ9shzieMgj8ZSnps.crl (hash: BP/IR55+prb36hpFHVbJedjTbYKge9mOfu6PNMSrkRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:ec:64:c6:d9:f3:05:be:c0:f5:42:8e:5a:74:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e155b430dedda11310f6c87389e3208fc6529e9b
Validity
Not Before: Jul 23 15:00:22 2026 GMT
Not After : Jul 24 15:00:22 2026 GMT
Subject: CN=8697a0c553a702d5730d56c89a0cb7b025e24098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:26:bc:e8:1f:e7:74:4e:f8:80:f3:d3:78:
05:3b:90:89:e3:c4:43:2f:c4:73:22:a0:6c:39:3e:
67:25:d9:de:34:22:35:17:43:d7:1a:7b:4e:98:b1:
fe:8c:5e:c5:15:59:fe:26:ce:9b:0b:3c:5d:56:7f:
48:73:70:bc:6c:7a:8e:83:ac:e9:6f:eb:75:09:80:
9f:45:82:ec:0d:07:94:d3:8a:dc:e7:68:09:65:52:
3a:97:26:b9:04:99:15:2f:b0:01:20:b0:56:4f:ba:
45:d1:b2:fb:74:b7:56:0d:f9:64:4e:bb:59:e5:e5:
3c:ec:f7:96:45:2b:55:21:05:cc:45:de:86:cb:53:
24:0e:b1:2c:b3:ba:46:01:ac:6d:38:08:6a:e9:92:
1e:bf:3e:9d:44:5e:5f:d2:bb:60:45:be:06:fb:93:
90:22:e2:53:61:c8:3a:a0:ae:46:04:bd:7a:da:50:
0d:0c:4e:9b:07:7e:51:05:73:46:9d:20:ec:ef:49:
bc:73:8e:9b:d5:6b:73:49:2a:d6:49:3f:c6:81:14:
69:fb:06:c7:bc:f0:a5:44:73:06:21:64:68:32:fe:
d3:f3:31:78:6a:73:36:98:e5:15:2e:c2:61:e2:41:
a5:42:63:ec:ae:48:71:32:9f:ba:68:05:8a:f1:15:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:97:A0:C5:53:A7:02:D5:73:0D:56:C8:9A:0C:B7:B0:25:E2:40:98
X509v3 Authority Key Identifier:
keyid:E1:55:B4:30:DE:DD:A1:13:10:F6:C8:73:89:E3:20:8F:C6:52:9E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:40:6f:d9:9d:49:fa:70:ee:b9:ca:7d:f4:91:95:65:40:2a:
dd:4e:28:be:46:9b:63:17:d4:aa:f9:9b:c1:00:cb:f3:1b:bb:
64:d4:64:01:1c:11:99:34:dc:8d:75:17:cf:cb:a4:fb:74:45:
f5:04:fd:0c:fc:6a:6b:50:45:59:ee:25:b1:55:5a:9f:aa:da:
7d:07:9c:be:c3:16:5c:6b:82:70:9f:14:44:20:ed:eb:c1:0f:
09:2a:c2:e3:9f:12:f7:a6:e7:bb:0c:62:c9:c0:47:5f:e1:09:
3c:31:9c:e5:f5:d7:08:21:4d:c5:78:0d:a7:0b:9f:4f:2d:8d:
d7:b7:39:ab:80:40:eb:22:38:4c:b4:25:77:32:4c:2b:84:77:
71:85:ed:e7:0b:c2:81:c3:f4:e1:0f:f7:3b:31:35:d2:d9:b8:
4f:4f:cf:b0:09:80:7b:7f:34:4d:29:d8:07:59:c6:21:74:50:
73:ee:9a:4c:1e:9f:b4:c4:b4:b8:7b:9b:b5:09:29:ce:85:de:
29:5b:a6:15:80:05:65:57:22:1f:7f:cf:78:44:44:96:58:14:
1c:9b:a5:02:e7:f2:b8:b5:b7:0e:37:d0:df:f5:3b:17:ea:c1:
0e:24:a2:d5:d9:a0:5a:5e:6d:24:1f:20:2e:3c:90:7a:c1:49:
bb:3c:90:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfexkxtnzBb7A9UKOWnRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTViNDMwZGVkZGExMTMxMGY2Yzg3Mzg5ZTMyMDhmYzY1
MjllOWIwHhcNMjYwNzIzMTUwMDIyWhcNMjYwNzI0MTUwMDIyWjAzMTEwLwYDVQQD
Eyg4Njk3YTBjNTUzYTcwMmQ1NzMwZDU2Yzg5YTBjYjdiMDI1ZTI0MDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0EmvOgf53RO+IDz03gFO5CJ48RD
L8RzIqBsOT5nJdneNCI1F0PXGntOmLH+jF7FFVn+Js6bCzxdVn9Ic3C8bHqOg6zp
b+t1CYCfRYLsDQeU04rc52gJZVI6lya5BJkVL7ABILBWT7pF0bL7dLdWDflkTrtZ
5eU87PeWRStVIQXMRd6Gy1MkDrEss7pGAaxtOAhq6ZIevz6dRF5f0rtgRb4G+5OQ
IuJTYcg6oK5GBL162lANDE6bB35RBXNGnSDs70m8c46b1WtzSSrWST/GgRRp+wbH
vPClRHMGIWRoMv7T8zF4anM2mOUVLsJh4kGlQmPsrkhxMp+6aAWK8RW8dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaXoMVTpwLVcw1WyJoMt7Al4kCYMB8GA1UdIwQY
MBaAFOFVtDDe3aETEPbIc4njII/GUp6bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZXME1ON2RvUk1ROXNoemllTWdqOFpTbnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iZjlkNTUtYjBkNS00YjA3LTkyYjAt
MGQ3NDA2MGExNmRkLzEvNFZXME1ON2RvUk1ROXNoemllTWdqOFpTbnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iZjlkNTUtYjBkNS00YjA3LTkyYjAtMGQ3NDA2MGExNmRk
LzEvNFZXME1ON2RvUk1ROXNoemllTWdqOFpTbnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUBv2Z1J
+nDuucp99JGVZUAq3U4ovkabYxfUqvmbwQDL8xu7ZNRkARwRmTTcjXUXz8uk+3RF
9QT9DPxqa1BFWe4lsVVan6rafQecvsMWXGuCcJ8URCDt68EPCSrC458S96bnuwxi
ycBHX+EJPDGc5fXXCCFNxXgNpwufTy2N17c5q4BA6yI4TLQldzJMK4R3cYXt5wvC
gcP04Q/3OzE10tm4T0/PsAmAe380TSnYB1nGIXRQc+6aTB6ftMS0uHubtQkpzoXe
KVumFYAFZVciH3/PeEREllgUHJulAufyuLW3DjfQ3/U7F+rBDiSi1dmgWl5tJB8g
LjyQesFJuzyQ9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:03 2026 by rpki-client