Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: ngPEdSuhdc38Qk5sVLnfg3HYDPOpZXVyETN/33IFMWk=
Subject key identifier: CD:36:88:DE:D0:D9:7D:A1:E4:36:60:7D:D2:04:13:B6:6A:F1:FA:A4
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019F8F7FAE786A8B7256DC9EB8DCB1680594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0D88
Signing time: Thu 23 Jul 2026 15:02:17 +0000
Manifest this update: Thu 23 Jul 2026 15:02:17 +0000
Manifest next update: Fri 24 Jul 2026 15:02:17 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: nqCOcc62yhTfip+r6R7N+tkDxqbxXCyzWXs0IdBFWuc=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:ae:78:6a:8b:72:56:dc:9e:b8:dc:b1:68:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Jul 23 15:02:17 2026 GMT
Not After : Jul 24 15:02:17 2026 GMT
Subject: CN=cd3688ded0d97da1e436607dd20413b66af1faa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:8e:2e:1f:fc:bb:11:4f:57:e1:f1:b8:6a:
df:91:8a:09:2b:dc:95:18:90:72:96:56:3d:28:48:
66:73:2d:54:f8:ae:8a:ad:26:ec:ba:cb:bd:b7:e5:
a6:cf:a8:a6:31:92:a7:c2:c6:1e:99:1e:94:fb:e8:
3c:ea:a7:e8:27:c5:c3:de:49:c1:34:8d:93:d2:50:
b8:0c:dc:0a:96:68:0e:d7:20:e1:75:9d:e5:15:32:
3d:e0:af:61:8d:85:f4:d6:8f:8f:db:ed:26:c1:6b:
46:31:47:3f:3a:b4:a1:29:e7:ca:b5:67:fc:e1:c6:
cc:d4:b8:6c:d8:8b:e2:f4:98:b8:08:17:eb:ab:22:
0f:b3:ce:ef:d3:52:3d:25:25:80:d0:2d:75:a3:95:
7f:3f:61:b8:aa:43:71:4f:4b:86:ad:5f:07:f8:48:
bd:03:a5:0a:4d:71:b8:d4:de:23:26:fb:d8:ba:25:
43:82:18:c4:be:3a:6e:95:fe:92:05:eb:ee:a6:14:
a8:7d:71:c4:32:c6:98:ee:5e:a6:02:22:05:41:2d:
f4:e5:f1:f9:46:c8:81:c0:2f:37:d5:de:27:89:81:
d1:da:6a:d9:95:3c:07:43:a2:95:91:47:f4:a0:16:
ec:de:0c:68:7c:e2:35:41:94:2d:d8:92:4c:0e:cb:
e3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:36:88:DE:D0:D9:7D:A1:E4:36:60:7D:D2:04:13:B6:6A:F1:FA:A4
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4e:b4:e5:62:e8:34:93:52:c3:2f:07:d4:e9:b6:32:fc:6b:
41:5b:b6:11:b9:1d:58:80:06:e8:11:59:b6:90:c0:33:a5:26:
84:20:3a:96:da:38:58:7d:d4:ec:00:ea:60:ad:bc:6e:7d:f4:
81:7b:73:24:88:e4:0d:33:14:12:78:3a:99:ec:6e:f0:f3:e0:
4b:b4:61:6b:d1:90:09:d8:2b:e5:4e:dd:1d:46:fb:99:5d:d3:
da:1f:82:7d:21:89:dd:55:80:b9:53:ef:49:2d:75:54:86:90:
28:32:2b:cd:aa:c6:d5:5c:24:98:c8:9f:2c:0a:59:96:6f:e8:
82:2b:c1:89:17:46:f4:5d:e8:38:72:1f:dc:10:43:a0:9a:4a:
18:8a:19:f5:13:04:9d:6a:69:63:8b:0e:7b:b7:bd:8a:ba:8f:
43:13:60:b6:3d:78:bf:8d:b7:87:62:56:6b:ca:1b:01:58:74:
31:d5:88:57:70:11:f8:92:75:99:c0:be:32:e8:aa:d8:0c:83:
de:65:8a:e3:09:e7:9e:10:fd:22:82:4a:7c:8f:72:f7:78:5f:
8f:5f:41:ef:70:8b:e2:8a:73:00:1e:34:f4:a4:a0:81:a6:a2:
b9:25:d0:59:fa:3b:23:4a:83:47:d3:2f:b7:12:7a:92:11:87:
a2:cb:4d:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf654aotyVtyeuNyxaAWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDJjMmI3NGQ3NTc1YTIyOGE3ZTY0ZjA0MDZmM2EzOTdj
N2FlNTYwHhcNMjYwNzIzMTUwMjE3WhcNMjYwNzI0MTUwMjE3WjAzMTEwLwYDVQQD
EyhjZDM2ODhkZWQwZDk3ZGExZTQzNjYwN2RkMjA0MTNiNjZhZjFmYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph+OLh/8uxFPV+HxuGrfkYoJK9yV
GJByllY9KEhmcy1U+K6KrSbsusu9t+Wmz6imMZKnwsYemR6U++g86qfoJ8XD3knB
NI2T0lC4DNwKlmgO1yDhdZ3lFTI94K9hjYX01o+P2+0mwWtGMUc/OrShKefKtWf8
4cbM1Lhs2Ivi9Ji4CBfrqyIPs87v01I9JSWA0C11o5V/P2G4qkNxT0uGrV8H+Ei9
A6UKTXG41N4jJvvYuiVDghjEvjpulf6SBevuphSofXHEMsaY7l6mAiIFQS305fH5
RsiBwC831d4niYHR2mrZlTwHQ6KVkUf0oBbs3gxofOI1QZQt2JJMDsvj+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM02iN7Q2X2h5DZgfdIEE7Zq8fqkMB8GA1UdIwQY
MBaAFOJCwrdNdXWiKKfmTwQG86OXx65WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYt
Y2JiOGNmZWU2ZTNjLzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYtY2JiOGNmZWU2ZTNj
LzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWU605WLo
NJNSwy8H1Om2MvxrQVu2EbkdWIAG6BFZtpDAM6UmhCA6lto4WH3U7ADqYK28bn30
gXtzJIjkDTMUEng6mexu8PPgS7Rha9GQCdgr5U7dHUb7mV3T2h+CfSGJ3VWAuVPv
SS11VIaQKDIrzarG1VwkmMifLApZlm/ogivBiRdG9F3oOHIf3BBDoJpKGIoZ9RME
nWppY4sOe7e9irqPQxNgtj14v423h2JWa8obAVh0MdWIV3AR+JJ1mcC+Muiq2AyD
3mWK4wnnnhD9IoJKfI9y93hfj19B73CL4opzAB409KSggaaiuSXQWfo7I0qDR9Mv
txJ6khGHostNSw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:18:20 2026 by rpki-client