Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: hRvEzEP7OoQiGhFGV7lTLVTZVwiF6hfbiqwR9OL8bN0=
Subject key identifier: 8D:CB:42:F8:BD:CC:37:5E:9C:74:EC:45:42:E2:DA:90:16:ED:6E:64
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 01A001DD3344F7080FF2BBE5AB71EDBFB57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0FF4
Signing time: Fri 14 Aug 2026 20:01:08 +0000
Manifest this update: Fri 14 Aug 2026 20:01:08 +0000
Manifest next update: Sat 15 Aug 2026 20:01:08 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: M+qqGYUyhHpzB7nv7nklbZ0MrTxzok8lcrJ5eTESsEc=)
2: k6jNcpaTNPSlXj617Gg3gS62Bto.roa (hash: 8LQYJjtnAC4ChUuR0xJhVpC5xdVYrcixNySIFaow6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:33:44:f7:08:0f:f2:bb:e5:ab:71:ed:bf:b5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Aug 14 20:01:08 2026 GMT
Not After : Aug 15 20:01:08 2026 GMT
Subject: CN=8dcb42f8bdcc375e9c74ec4542e2da9016ed6e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:5c:c7:87:3a:c6:e1:82:5f:68:cb:80:c4:
aa:dd:a9:c2:a5:3a:2e:86:27:b1:b0:92:d6:20:84:
4d:0b:1d:d0:0d:26:f6:4f:28:dd:3f:31:48:16:b2:
9a:0e:87:ca:99:28:64:4e:df:98:ff:46:bb:58:0f:
5c:cb:ad:4f:32:d4:a3:f7:f8:cc:30:8a:8f:8f:e5:
86:e2:24:a4:cd:d3:70:cf:c4:5f:6d:03:39:8d:36:
3b:92:19:0f:83:28:02:c1:46:b1:f3:39:7e:bb:61:
4d:7d:80:47:0f:30:b4:7a:1b:c7:c4:7f:11:9b:cb:
9a:13:54:c7:f9:e8:bb:9a:c6:46:67:f5:c9:cf:7b:
14:7b:eb:0e:c5:b5:1c:ac:39:c8:dc:08:9a:fd:24:
35:ff:a7:c8:c5:e8:5c:b8:4e:a2:5f:b9:c4:b8:51:
2d:ae:1c:7c:76:21:28:8c:9f:65:5d:f2:ea:5a:f0:
a3:24:59:4b:e5:9d:26:c1:2a:31:97:21:0d:e5:18:
60:a1:a8:9e:0b:1b:0f:b3:fe:fc:48:85:60:4a:d9:
e2:0f:4e:32:51:31:fc:28:c8:b2:fe:56:1b:98:dc:
62:c6:55:c7:10:dd:8c:bd:54:83:f8:c9:5a:2c:6f:
46:2b:54:b9:86:2f:8f:fe:d5:6e:b3:d1:9a:ac:8a:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CB:42:F8:BD:CC:37:5E:9C:74:EC:45:42:E2:DA:90:16:ED:6E:64
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:23:b9:ba:2a:a0:2e:a3:9f:bb:94:90:bd:1c:49:f0:58:d9:
e8:a7:33:ef:4f:fb:fd:cb:16:ca:fd:da:cf:91:18:a9:eb:07:
45:76:25:a9:e1:cb:8c:be:8f:b0:c3:97:86:5d:ec:89:7d:a5:
7a:f6:87:24:36:43:c6:b6:b1:31:9f:87:05:07:a2:5d:1c:09:
c1:e0:25:93:a4:10:27:8c:f6:17:ba:1c:ef:38:48:a5:97:f7:
34:92:94:b8:40:2c:50:15:81:be:69:f1:eb:8f:5f:d6:41:b6:
3c:08:09:ae:15:ad:bb:f3:19:20:0d:76:f8:2a:50:9e:1e:ec:
9c:36:dd:31:4a:e8:dc:1b:f1:7c:6a:7a:97:8e:da:ef:f7:16:
c9:94:98:e4:bb:cc:d1:d2:fa:56:10:d2:21:74:b2:ea:df:80:
6b:84:b9:3f:e5:1c:d9:64:af:21:9f:d1:45:cb:9b:eb:13:08:
b1:b9:5d:ee:a9:a8:1d:ff:36:1d:30:76:2a:a9:aa:77:b3:d2:
ff:3e:6a:10:68:4f:a2:36:6b:a5:d2:7b:a7:45:dd:9e:8f:25:
c2:f6:2e:9f:fa:47:c2:e3:70:28:69:80:25:b2:88:95:a1:7c:
c0:fa:d8:b5:7f:db:15:65:35:f9:36:ad:b8:d7:65:6f:d3:b9:
e1:17:b6:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3TNE9wgP8rvlq3Htv7V6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTEzYjkyMmVlN2ViYjlhZWNkZTE5YTcwZDBlMjViNzc3
NTBkMDIwHhcNMjYwODE0MjAwMTA4WhcNMjYwODE1MjAwMTA4WjAzMTEwLwYDVQQD
Eyg4ZGNiNDJmOGJkY2MzNzVlOWM3NGVjNDU0MmUyZGE5MDE2ZWQ2ZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuENcx4c6xuGCX2jLgMSq3anCpTou
hiexsJLWIIRNCx3QDSb2TyjdPzFIFrKaDofKmShkTt+Y/0a7WA9cy61PMtSj9/jM
MIqPj+WG4iSkzdNwz8RfbQM5jTY7khkPgygCwUax8zl+u2FNfYBHDzC0ehvHxH8R
m8uaE1TH+ei7msZGZ/XJz3sUe+sOxbUcrDnI3Aia/SQ1/6fIxehcuE6iX7nEuFEt
rhx8diEojJ9lXfLqWvCjJFlL5Z0mwSoxlyEN5RhgoaieCxsPs/78SIVgStniD04y
UTH8KMiy/lYbmNxixlXHEN2MvVSD+MlaLG9GK1S5hi+P/tVus9GarIq9sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3LQvi9zDdenHTsRULi2pAW7W5kMB8GA1UdIwQY
MBaAFOChO5Iu5+u5rs3hmnDQ4lt3dQ0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEt
MTBiMDIxMWQ5NmZjLzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mNzdjNWItMTliMi00YmMxLThmYWEtMTBiMDIxMWQ5NmZj
LzEvNEtFN2tpN242N211emVHYWNORGlXM2QxRFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiO5uiqg
LqOfu5SQvRxJ8FjZ6Kcz70/7/csWyv3az5EYqesHRXYlqeHLjL6PsMOXhl3siX2l
evaHJDZDxraxMZ+HBQeiXRwJweAlk6QQJ4z2F7oc7zhIpZf3NJKUuEAsUBWBvmnx
649f1kG2PAgJrhWtu/MZIA12+CpQnh7snDbdMUro3BvxfGp6l47a7/cWyZSY5LvM
0dL6VhDSIXSy6t+Aa4S5P+Uc2WSvIZ/RRcub6xMIsbld7qmoHf82HTB2Kqmqd7PS
/z5qEGhPojZrpdJ7p0Xdno8lwvYun/pHwuNwKGmAJbKIlaF8wPrYtX/bFWU1+Tat
uNdlb9O54Re2Ww==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:21 2026 by rpki-client