Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
File: E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft (raw, json)
Hash identifier: 7Uw2rAwHbU+/QVk0Dhq1b7KgWA3VB9z8vgUHgh9z98Q=
Subject key identifier: 2A:7C:7B:76:CC:BC:E0:D9:08:03:A5:D7:7D:84:5A:70:AC:23:09:64
Authority key identifier: 13:52:9D:09:C6:29:19:E2:AF:A4:53:6A:F1:06:E3:F4:A4:F3:DD:0C
Certificate issuer: /CN=13529d09c62919e2afa4536af106e3f4a4f3dd0c
Certificate serial: 019FA372DF24BA169C62EAB157768A3D4AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
Manifest number: 0114
Signing time: Mon 27 Jul 2026 12:00:42 +0000
Manifest this update: Mon 27 Jul 2026 12:00:42 +0000
Manifest next update: Tue 28 Jul 2026 12:00:42 +0000
Files and hashes: 1: Dg75WaAECc2_16xSrrua_Jl9vNA.roa (hash: Sqm9spSXxwwPSmf7/I85TDjTAS8g51LglO7cWoTaYU0=)
2: E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl (hash: EHAowBNbv9SZDYJceeQJ+x+VSDaOVSAbkgVFxDrf410=)
3: e5_vLejBPA3EP_yr_mC9Szf-bWM.roa (hash: RYb6H9omfbHfmdu03QeSOGuQd/N/QMFTHjBVUp9L/MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:df:24:ba:16:9c:62:ea:b1:57:76:8a:3d:4a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13529d09c62919e2afa4536af106e3f4a4f3dd0c
Validity
Not Before: Jul 27 12:00:42 2026 GMT
Not After : Jul 28 12:00:42 2026 GMT
Subject: CN=2a7c7b76ccbce0d90803a5d77d845a70ac230964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:5d:c7:e0:d5:60:4e:d4:17:c8:b9:1a:3f:
9b:64:88:4e:35:c2:fd:59:e7:2e:9d:e0:36:5b:bf:
e7:ef:63:a9:6a:1c:4c:c2:fe:63:82:3b:a4:03:52:
77:21:ad:da:25:7b:27:6b:e6:88:5d:82:f5:fb:33:
34:33:02:8f:0a:c5:3b:38:e4:90:2b:15:89:20:19:
a2:b7:30:04:45:8e:32:02:cb:e4:39:bd:bc:52:3c:
81:91:21:51:9d:24:3f:66:85:f0:91:c6:37:76:fb:
56:02:fa:91:f4:01:01:55:f9:86:84:75:40:67:92:
e4:e1:b0:c4:38:cc:fa:fb:ef:62:4e:38:87:36:72:
12:8f:74:96:24:3a:17:66:2e:15:fc:58:96:4b:00:
21:70:98:f7:6d:d2:0a:d2:23:e1:4d:c8:8d:17:a2:
01:be:2e:d1:cd:bb:13:e7:27:51:3f:c2:9e:1e:52:
99:63:57:8a:be:6f:79:ba:e8:f2:bd:ac:76:d9:83:
e2:f9:ff:1f:19:3d:04:2f:6b:be:f6:a2:4c:52:8d:
4e:1c:87:cc:e8:96:16:66:77:25:fa:d8:48:9e:a0:
25:03:fa:1f:e5:29:34:12:0a:a5:a8:30:14:2e:64:
6f:d8:fd:b8:2c:6b:bd:9f:ef:4a:e5:88:48:54:31:
e1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7C:7B:76:CC:BC:E0:D9:08:03:A5:D7:7D:84:5A:70:AC:23:09:64
X509v3 Authority Key Identifier:
keyid:13:52:9D:09:C6:29:19:E2:AF:A4:53:6A:F1:06:E3:F4:A4:F3:DD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1171f8-edeb-40e8-9588-874302109b00/1/E1KdCcYpGeKvpFNq8Qbj9KTz3Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9e:4b:e0:21:ae:46:6d:39:da:3f:92:67:cc:6a:aa:77:82:
bd:30:1a:96:6f:2b:11:9d:af:45:ea:90:e6:6a:64:14:49:bb:
14:4e:bd:42:4c:e4:b6:cb:b7:25:ca:b9:bb:90:b3:f5:eb:50:
c0:6a:64:62:19:27:b4:54:a3:95:71:38:26:ef:97:91:83:22:
4e:cb:bc:4e:1b:38:17:f1:a2:10:ff:0d:a1:82:be:30:13:43:
37:f9:12:9b:94:fe:1a:a8:33:1f:56:d2:53:95:14:5d:d4:ca:
38:0a:6a:6a:9f:c9:ff:ab:d1:bb:aa:87:c3:da:c2:6c:0a:f4:
13:87:1c:bb:27:c4:40:34:3d:b3:ca:68:18:41:e0:78:b9:05:
99:5a:db:c5:43:fb:20:49:23:e1:cc:7f:39:a5:a9:55:0c:b9:
6f:c3:02:05:5d:be:a0:09:14:a3:c9:ed:d9:01:92:8f:2d:fb:
01:73:8b:43:06:f4:93:df:72:0d:9e:6b:02:b8:67:17:26:7e:
33:53:37:cc:b8:d0:b7:59:93:14:e8:b1:87:c5:0c:96:d3:68:
cf:b7:98:40:dd:be:bc:64:9a:68:9a:ae:32:f9:43:d9:09:07:
19:2a:ff:1f:1e:c0:1d:aa:dc:78:38:fd:7e:f2:f3:67:2e:3d:
f9:b8:bc:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jct8kuhacYuqxV3aKPUrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNTI5ZDA5YzYyOTE5ZTJhZmE0NTM2YWYxMDZlM2Y0YTRm
M2RkMGMwHhcNMjYwNzI3MTIwMDQyWhcNMjYwNzI4MTIwMDQyWjAzMTEwLwYDVQQD
EygyYTdjN2I3NmNjYmNlMGQ5MDgwM2E1ZDc3ZDg0NWE3MGFjMjMwOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznNdx+DVYE7UF8i5Gj+bZIhONcL9
WecuneA2W7/n72OpahxMwv5jgjukA1J3Ia3aJXsna+aIXYL1+zM0MwKPCsU7OOSQ
KxWJIBmitzAERY4yAsvkOb28UjyBkSFRnSQ/ZoXwkcY3dvtWAvqR9AEBVfmGhHVA
Z5Lk4bDEOMz6++9iTjiHNnISj3SWJDoXZi4V/FiWSwAhcJj3bdIK0iPhTciNF6IB
vi7RzbsT5ydRP8KeHlKZY1eKvm95uujyvax22YPi+f8fGT0EL2u+9qJMUo1OHIfM
6JYWZncl+thInqAlA/of5Sk0EgqlqDAULmRv2P24LGu9n+9K5YhIVDHhVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp8e3bMvODZCAOl132EWnCsIwlkMB8GA1UdIwQY
MBaAFBNSnQnGKRnir6RTavEG4/Sk890MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTFLZENjWXBHZUt2cEZOcThRYmo5S1R6M1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xMTcxZjgtZWRlYi00MGU4LTk1ODgt
ODc0MzAyMTA5YjAwLzEvRTFLZENjWXBHZUt2cEZOcThRYmo5S1R6M1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8xMTcxZjgtZWRlYi00MGU4LTk1ODgtODc0MzAyMTA5YjAw
LzEvRTFLZENjWXBHZUt2cEZOcThRYmo5S1R6M1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJ5L4CGu
Rm052j+SZ8xqqneCvTAalm8rEZ2vReqQ5mpkFEm7FE69Qkzktsu3Jcq5u5Cz9etQ
wGpkYhkntFSjlXE4Ju+XkYMiTsu8Ths4F/GiEP8NoYK+MBNDN/kSm5T+GqgzH1bS
U5UUXdTKOApqap/J/6vRu6qHw9rCbAr0E4ccuyfEQDQ9s8poGEHgeLkFmVrbxUP7
IEkj4cx/OaWpVQy5b8MCBV2+oAkUo8nt2QGSjy37AXOLQwb0k99yDZ5rArhnFyZ+
M1M3zLjQt1mTFOixh8UMltNoz7eYQN2+vGSaaJquMvlD2QkHGSr/Hx7AHarceDj9
fvLzZy49+bi81w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:52:52 2026 by rpki-client