Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: fScdWsjZPOLFtAd/vaX7GgWzf70kgiGF+r8iQje0j0w=
Subject key identifier: 70:F9:0E:C0:AE:D2:3F:56:FE:8E:4E:34:50:A0:52:ED:7B:3D:7D:02
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019F189F09C7F09890EBBD23564CD3483A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 18EE
Signing time: Tue 30 Jun 2026 13:01:43 +0000
Manifest this update: Tue 30 Jun 2026 13:01:43 +0000
Manifest next update: Wed 01 Jul 2026 13:01:43 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: x0K1fyjolw9e+IEz2MR3ivgqTa2tgdi1HmzuniFjyFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:09:c7:f0:98:90:eb:bd:23:56:4c:d3:48:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Jun 30 13:01:43 2026 GMT
Not After : Jul 1 13:01:43 2026 GMT
Subject: CN=70f90ec0aed23f56fe8e4e3450a052ed7b3d7d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:18:6f:30:fe:af:8e:93:ff:67:78:c5:b0:
22:a7:c0:19:57:8f:20:19:97:81:cf:d0:c1:f6:20:
b2:12:3d:8a:8c:ea:f3:8a:90:8c:dc:6c:60:58:3a:
af:6f:4d:d2:4e:49:15:a9:5c:1b:65:55:31:d7:74:
01:af:b5:ec:53:46:b0:02:a8:21:05:a2:73:13:91:
fe:0a:0b:98:eb:a4:bd:17:6e:f6:6e:b4:08:97:87:
53:24:f5:fe:62:25:39:82:46:8f:08:77:72:21:b4:
6b:65:48:66:1f:e0:ac:ba:8b:f1:fa:70:17:18:ae:
3c:b0:43:15:ce:6b:d7:dd:0c:3a:a5:6d:cc:94:03:
02:f5:4d:ff:7d:3e:5f:08:e2:a8:eb:52:1f:31:bb:
ac:76:5c:55:b0:2d:74:21:a4:a9:9a:46:4f:99:ad:
ff:c7:30:58:cf:91:9f:60:77:76:68:a4:25:01:6d:
84:a5:9b:7d:6f:15:91:36:bf:34:62:00:d7:e3:73:
9b:28:e7:40:7c:61:fc:f5:fc:54:6a:09:f2:06:68:
9d:f0:5a:61:14:19:82:5c:f5:53:89:1a:14:ac:80:
02:3e:86:47:cb:09:38:4b:4b:dd:e2:68:e1:8f:1f:
2b:dc:3e:58:e8:e3:74:45:c6:ee:27:8c:57:69:bd:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:0E:C0:AE:D2:3F:56:FE:8E:4E:34:50:A0:52:ED:7B:3D:7D:02
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:84:8d:a1:e6:d2:db:57:e7:bb:90:6d:e0:33:eb:0d:9b:e1:
5e:a1:4e:a8:33:6f:01:1f:63:0b:b7:45:ab:9b:4b:4a:ab:9d:
5f:27:c3:d6:5f:00:c1:55:23:e4:8b:52:e4:b0:53:a1:f2:8e:
72:ad:f7:59:bc:9a:e9:ca:88:be:45:95:f3:b4:91:26:f3:c9:
53:b0:e9:9c:48:c2:40:ed:92:8a:3b:f3:ed:28:76:82:e9:65:
41:53:41:a7:a8:3d:5a:97:4e:2d:6d:98:76:b8:4a:a7:04:99:
29:9e:87:c6:e3:01:7a:60:5a:6e:19:a8:d8:fa:86:89:fd:52:
44:36:6c:db:66:5d:3d:90:41:cb:b1:b4:5b:9b:db:c4:aa:91:
a4:c5:bf:90:1d:15:5a:02:cb:66:1a:fe:34:a6:80:9b:71:f6:
e6:0a:66:69:17:a7:e8:b0:82:f7:00:8c:9c:21:28:07:5c:a5:
33:47:85:3d:81:b6:8a:35:47:89:2a:4f:75:b9:19:80:76:e3:
fd:93:21:21:50:81:d2:70:01:1a:88:a8:34:b3:0a:b4:61:46:
ed:59:45:ea:4d:87:b1:d3:48:d5:4f:36:e2:7d:1b:68:d4:3a:
c6:22:2b:be:93:8f:9c:e0:be:20:01:a8:fa:6b:51:a5:6b:eb:
92:52:a2:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnwnH8JiQ670jVkzTSDoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmVjNzRkYTU0OTM2YmVmNDJmZTI2MDU5N2RkNmQyMWRj
Y2VkZmMwHhcNMjYwNjMwMTMwMTQzWhcNMjYwNzAxMTMwMTQzWjAzMTEwLwYDVQQD
Eyg3MGY5MGVjMGFlZDIzZjU2ZmU4ZTRlMzQ1MGEwNTJlZDdiM2Q3ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/8YbzD+r46T/2d4xbAip8AZV48g
GZeBz9DB9iCyEj2KjOrzipCM3GxgWDqvb03STkkVqVwbZVUx13QBr7XsU0awAqgh
BaJzE5H+CguY66S9F272brQIl4dTJPX+YiU5gkaPCHdyIbRrZUhmH+Csuovx+nAX
GK48sEMVzmvX3Qw6pW3MlAMC9U3/fT5fCOKo61IfMbusdlxVsC10IaSpmkZPma3/
xzBYz5GfYHd2aKQlAW2EpZt9bxWRNr80YgDX43ObKOdAfGH89fxUagnyBmid8Fph
FBmCXPVTiRoUrIACPoZHywk4S0vd4mjhjx8r3D5Y6ON0RcbuJ4xXab0ZJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHD5DsCu0j9W/o5ONFCgUu17PX0CMB8GA1UdIwQY
MBaAFOAux02lSTa+9C/iYFl91tIdzO38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTIt
MDFiOGIwZjRiMDE5LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi83NGUwMTMtNWExYy00MDAzLWJmOTItMDFiOGIwZjRiMDE5
LzEvNEM3SFRhVkpOcjcwTC1KZ1dYM1cwaDNNN2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoSNoebS
21fnu5Bt4DPrDZvhXqFOqDNvAR9jC7dFq5tLSqudXyfD1l8AwVUj5ItS5LBTofKO
cq33Wbya6cqIvkWV87SRJvPJU7DpnEjCQO2Sijvz7Sh2gullQVNBp6g9WpdOLW2Y
drhKpwSZKZ6HxuMBemBabhmo2PqGif1SRDZs22ZdPZBBy7G0W5vbxKqRpMW/kB0V
WgLLZhr+NKaAm3H25gpmaRen6LCC9wCMnCEoB1ylM0eFPYG2ijVHiSpPdbkZgHbj
/ZMhIVCB0nABGoioNLMKtGFG7VlF6k2HsdNI1U824n0baNQ6xiIrvpOPnOC+IAGo
+mtRpWvrklKinA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:28 2026 by rpki-client