Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: YVW+tlo9vCaYUtVlF54ymap6qH4+b9VUb4+2qwJi8gg=
Subject key identifier: AB:53:09:AB:6A:29:28:75:4E:54:31:FC:10:56:97:73:41:A6:9A:76
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 019F9400293C594478776175E255FA49C17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 08EE
Signing time: Fri 24 Jul 2026 12:01:06 +0000
Manifest this update: Fri 24 Jul 2026 12:01:06 +0000
Manifest next update: Sat 25 Jul 2026 12:01:06 +0000
Files and hashes: 1: 22Qs5ZZUH-o_UxeMTTaGlozw9ck.roa (hash: dzmFhhN9JFvpfi1wur97KqUtYf7OFbub2fPBQrwEANI=)
2: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: uefRbBOfHvihRtiaVVgRsm/L6pW21pwjmP3xHgqA4Uw=)
3: OOmJ-RkbduxK-k7822kHHTnwfho.roa (hash: Zhhmx3+Bddmr+hDQFTAMK3LPfl5DC3igpcEZIPBCFZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:29:3c:59:44:78:77:61:75:e2:55:fa:49:c1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Jul 24 12:01:06 2026 GMT
Not After : Jul 25 12:01:06 2026 GMT
Subject: CN=ab5309ab6a2928754e5431fc1056977341a69a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:d5:79:62:d3:da:90:c0:50:19:6a:43:42:
72:8f:24:45:f0:df:02:b7:c3:a5:a1:74:ea:6a:05:
b9:1b:28:0d:07:3b:9e:6d:18:19:05:00:27:e8:18:
2b:bf:98:af:3a:22:f6:f3:04:eb:61:0b:bb:dc:e0:
83:0d:97:6f:31:41:f3:09:e5:e8:6b:f2:c0:04:1e:
36:f9:a9:e2:61:68:b3:a2:68:45:28:7d:20:d8:c1:
13:c1:fb:19:bf:bc:c1:49:42:8d:0c:fb:4b:ee:e1:
38:d5:34:b6:9e:7c:53:3d:08:b2:55:c1:64:4b:c1:
92:91:ca:29:85:ab:f2:b7:a3:c8:cd:8b:08:0a:c4:
0f:90:70:22:41:d7:45:67:a2:99:a0:4c:19:65:75:
b6:95:8b:ca:14:59:4c:20:63:04:94:6d:0f:1c:cf:
4b:d7:19:f2:93:26:a4:4c:35:6e:34:ea:61:32:28:
d8:3e:91:8e:28:f8:7b:da:d2:1e:46:e6:4e:c2:e0:
ad:4f:06:df:f5:25:7c:c9:11:0f:b6:62:0a:eb:3f:
e4:c7:48:26:19:ef:37:73:da:7d:41:31:68:78:e6:
c4:dc:51:8a:5e:2f:f6:d2:c9:73:09:b8:99:03:6c:
64:08:60:0f:c9:bb:37:7f:8d:b3:91:71:60:c5:55:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:53:09:AB:6A:29:28:75:4E:54:31:FC:10:56:97:73:41:A6:9A:76
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:27:c6:41:ec:e6:f1:28:42:89:29:34:a2:dc:5b:ec:b9:f2:
84:2d:c5:06:64:3d:f0:20:24:3b:90:c0:f1:82:e8:19:cb:27:
db:88:a1:7b:94:02:9e:0a:d7:17:5c:7a:b9:78:dd:e5:b6:2b:
3d:7f:dc:d0:3d:ca:17:cf:43:7b:34:a1:bb:b9:93:23:5e:67:
c4:d2:7b:9b:7b:6a:1e:1a:69:e6:57:56:38:81:6f:70:6b:43:
24:6b:25:24:7f:fb:77:43:2f:67:b6:4f:c3:aa:16:8b:3b:3b:
50:4e:33:ef:0b:23:d1:92:18:64:0a:90:1d:8e:fd:81:6a:bb:
a8:d7:f0:48:0e:cf:66:d8:92:e8:57:d2:b2:ac:e8:fc:2f:a7:
25:af:23:77:2d:96:a3:4b:e2:af:4c:0a:78:39:f8:53:34:1d:
58:59:85:90:ce:e0:00:61:4f:72:1d:0f:e9:e7:a5:34:50:59:
41:09:aa:2d:9d:e6:e8:a0:c1:e6:37:b3:46:e3:b0:dc:b4:f0:
da:70:87:09:6d:bf:ec:86:61:6b:fe:ca:bb:8c:3a:d4:c5:7d:
df:c9:4e:03:b6:8b:2d:bb:e1:a3:54:a9:29:bd:f9:9e:17:05:
28:ad:ff:84:8d:db:71:b6:d0:81:8e:5d:97:e2:a3:88:30:e1:
a1:97:ef:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UACk8WUR4d2F14lX6ScF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjJiYjkyYmJlZTlmNmRlNzc1N2QyNTZkNDhmNjZlMjA3
ZjQ0YWYwHhcNMjYwNzI0MTIwMTA2WhcNMjYwNzI1MTIwMTA2WjAzMTEwLwYDVQQD
EyhhYjUzMDlhYjZhMjkyODc1NGU1NDMxZmMxMDU2OTc3MzQxYTY5YTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTDVeWLT2pDAUBlqQ0JyjyRF8N8C
t8OloXTqagW5GygNBzuebRgZBQAn6Bgrv5ivOiL28wTrYQu73OCDDZdvMUHzCeXo
a/LABB42+aniYWizomhFKH0g2METwfsZv7zBSUKNDPtL7uE41TS2nnxTPQiyVcFk
S8GSkcophavyt6PIzYsICsQPkHAiQddFZ6KZoEwZZXW2lYvKFFlMIGMElG0PHM9L
1xnykyakTDVuNOphMijYPpGOKPh72tIeRuZOwuCtTwbf9SV8yREPtmIK6z/kx0gm
Ge83c9p9QTFoeObE3FGKXi/20slzCbiZA2xkCGAPybs3f42zkXFgxVXdLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtTCatqKSh1TlQx/BBWl3NBppp2MB8GA1UdIwQY
MBaAFOBiu5K77p9t53V9JW1I9m4gf0SvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGIt
MWFiNWQ2MjA5ZjU3LzEvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWY1MTgtMTU2Ni00YTZiLTgwNGItMWFiNWQ2MjA5ZjU3
LzEvNEdLN2tydnVuMjNuZFgwbGJVajJiaUJfUks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCfGQezm
8ShCiSk0otxb7LnyhC3FBmQ98CAkO5DA8YLoGcsn24ihe5QCngrXF1x6uXjd5bYr
PX/c0D3KF89DezShu7mTI15nxNJ7m3tqHhpp5ldWOIFvcGtDJGslJH/7d0MvZ7ZP
w6oWizs7UE4z7wsj0ZIYZAqQHY79gWq7qNfwSA7PZtiS6FfSsqzo/C+nJa8jdy2W
o0vir0wKeDn4UzQdWFmFkM7gAGFPch0P6eelNFBZQQmqLZ3m6KDB5jezRuOw3LTw
2nCHCW2/7IZha/7Ku4w61MV938lOA7aLLbvho1SpKb35nhcFKK3/hI3bcbbQgY5d
l+KjiDDhoZfvww==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:24:47 2026 by rpki-client