Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: 9+h8vh52TMJPh8qBjHGqEPacl+oexekAZQejhkC+woI=
Subject key identifier: 52:B2:B5:0C:97:7E:FE:F3:76:5B:A2:B4:11:9F:3B:49:ED:3D:26:14
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 019FA297675270B3AA5E9BFD7EE48F634064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: 0174
Signing time: Mon 27 Jul 2026 08:00:59 +0000
Manifest this update: Mon 27 Jul 2026 08:00:59 +0000
Manifest next update: Tue 28 Jul 2026 08:00:59 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: +CgwrvgzD3WiwHHfQNNF2nYOxCVdh5uB7yDoiXu89y0=)
2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:67:52:70:b3:aa:5e:9b:fd:7e:e4:8f:63:40:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Jul 27 08:00:59 2026 GMT
Not After : Jul 28 08:00:59 2026 GMT
Subject: CN=52b2b50c977efef3765ba2b4119f3b49ed3d2614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:ce:39:5c:da:fd:c0:cd:49:f6:a3:44:5c:
c0:74:bb:11:b5:0c:40:78:2b:65:14:bf:03:82:00:
74:f7:5c:25:f7:57:af:ec:cf:27:99:97:28:ad:ef:
49:d1:21:39:74:e4:5d:db:eb:34:c4:d1:5e:9b:2d:
8e:2e:d1:ac:cd:6f:4b:ac:b3:31:c7:8b:15:1d:c9:
22:63:c0:a8:0d:f6:eb:f7:66:71:43:9d:eb:a2:2a:
2c:4a:7c:18:27:8c:52:bd:fa:fe:68:fa:fb:6d:80:
1a:a9:34:a7:8a:c1:aa:12:23:1f:65:00:03:2c:08:
55:0e:af:cb:93:e3:f5:e4:48:40:f9:bd:c9:04:46:
31:53:56:3d:55:b5:46:f8:74:d5:5b:00:f8:57:d4:
c7:55:ca:02:c5:20:e1:9c:2a:7a:f6:6f:5f:e5:e2:
b5:17:ab:2a:8e:b2:b5:aa:9f:ae:f3:84:36:d0:9a:
13:95:d9:ad:1f:e3:00:ee:ac:fc:a6:6c:ff:85:b8:
fe:60:d2:6f:86:34:07:db:96:66:71:6f:46:d7:a6:
23:38:af:7b:bd:1c:a0:f5:63:49:98:7b:52:dd:4b:
94:ce:1e:2e:ea:b7:92:35:c3:2c:96:35:bd:a8:f0:
51:ea:62:92:88:21:50:f9:16:68:60:8b:cf:ed:fb:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:B5:0C:97:7E:FE:F3:76:5B:A2:B4:11:9F:3B:49:ED:3D:26:14
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a6:92:55:d3:47:c5:6d:c2:45:00:c4:50:51:29:ed:49:e1:
f7:87:3b:e0:82:b3:26:d3:00:a2:a5:0c:e7:7d:85:4e:68:06:
8a:3d:59:3b:59:e9:4b:99:92:3c:09:f4:e3:11:98:95:7e:8f:
80:da:7e:ab:28:9f:d9:d0:59:4e:fc:c5:68:90:34:5e:49:12:
34:4a:33:93:41:aa:90:8e:50:cb:e4:8a:d5:c4:ad:f8:44:5d:
60:9a:be:65:77:33:08:c0:3e:7c:ae:3a:8d:9d:46:11:df:52:
84:5c:e1:14:18:f7:1c:71:4e:e7:91:e7:11:40:18:26:45:b7:
ca:3f:87:2e:aa:0a:96:d4:9c:3a:ff:e4:93:eb:b9:ca:29:73:
17:f6:85:c7:1d:86:4c:19:72:93:29:a2:e3:19:e5:f8:b8:1e:
ba:85:08:81:e5:48:de:9a:c4:da:2c:25:14:3e:9e:62:7d:d8:
91:7a:89:70:fc:26:ea:f1:b7:10:f2:99:fa:9b:e6:14:1e:59:
45:32:2a:4b:a1:d7:e7:c0:1f:92:42:a3:1c:59:a5:72:7b:56:
12:53:9f:3d:17:cc:8b:ad:dc:2f:3e:26:65:91:e2:65:31:9a:
82:25:d9:fc:45:57:2d:98:17:ec:2c:a7:b6:42:b3:93:78:e7:
4f:77:6b:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+il2dScLOqXpv9fuSPY0BkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGQ3MTU4YmRmZDQ2M2MzOTFmMTZjYmViMGI3MDllNDFh
NmZjOTYwHhcNMjYwNzI3MDgwMDU5WhcNMjYwNzI4MDgwMDU5WjAzMTEwLwYDVQQD
Eyg1MmIyYjUwYzk3N2VmZWYzNzY1YmEyYjQxMTlmM2I0OWVkM2QyNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCLOOVza/cDNSfajRFzAdLsRtQxA
eCtlFL8DggB091wl91ev7M8nmZcore9J0SE5dORd2+s0xNFemy2OLtGszW9LrLMx
x4sVHckiY8CoDfbr92ZxQ53roiosSnwYJ4xSvfr+aPr7bYAaqTSnisGqEiMfZQAD
LAhVDq/Lk+P15EhA+b3JBEYxU1Y9VbVG+HTVWwD4V9THVcoCxSDhnCp69m9f5eK1
F6sqjrK1qp+u84Q20JoTldmtH+MA7qz8pmz/hbj+YNJvhjQH25ZmcW9G16YjOK97
vRyg9WNJmHtS3UuUzh4u6reSNcMsljW9qPBR6mKSiCFQ+RZoYIvP7fuyLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKytQyXfv7zdluitBGfO0ntPSYUMB8GA1UdIwQY
MBaAFOJNcVi9/UY8OR8Wy+sLcJ5BpvyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGsxeFdMMzlSanc1SHhiTDZ3dHdua0dtX0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82ZDUxMzEtZDE5NC00NjA1LWEyNjct
ODQ0ODVjZmE0OGM4LzEvNGsxeFdMMzlSanc1SHhiTDZ3dHdua0dtX0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82ZDUxMzEtZDE5NC00NjA1LWEyNjctODQ0ODVjZmE0OGM4
LzEvNGsxeFdMMzlSanc1SHhiTDZ3dHdua0dtX0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKaSVdNH
xW3CRQDEUFEp7Unh94c74IKzJtMAoqUM532FTmgGij1ZO1npS5mSPAn04xGYlX6P
gNp+qyif2dBZTvzFaJA0XkkSNEozk0GqkI5Qy+SK1cSt+ERdYJq+ZXczCMA+fK46
jZ1GEd9ShFzhFBj3HHFO55HnEUAYJkW3yj+HLqoKltScOv/kk+u5yilzF/aFxx2G
TBlykymi4xnl+LgeuoUIgeVI3prE2iwlFD6eYn3YkXqJcPwm6vG3EPKZ+pvmFB5Z
RTIqS6HX58AfkkKjHFmlcntWElOfPRfMi63cLz4mZZHiZTGagiXZ/EVXLZgX7Cyn
tkKzk3jnT3drRQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:42:33 2026 by rpki-client