Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: hYYcWZtYpq/WEWpVuIyv0avIqkhLxnqlm0KZ5ArTXjA=
Subject key identifier: 55:73:F7:32:36:09:07:91:1A:AA:00:D2:B4:F9:56:5E:5D:CA:3C:D0
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019F8F7FB99166C8B99C32E922BB7A4575D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1959
Signing time: Thu 23 Jul 2026 15:02:19 +0000
Manifest this update: Thu 23 Jul 2026 15:02:19 +0000
Manifest next update: Fri 24 Jul 2026 15:02:19 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: eeFhbdr3z0k5P6C+y429NklDxCve4aiDNk4uJ+3Ndak=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:b9:91:66:c8:b9:9c:32:e9:22:bb:7a:45:75:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jul 23 15:02:19 2026 GMT
Not After : Jul 24 15:02:19 2026 GMT
Subject: CN=5573f732360907911aaa00d2b4f9565e5dca3cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ca:14:93:f0:a8:13:c4:17:7e:85:ca:ab:e1:
0e:af:ed:f9:48:98:6a:01:a3:07:44:35:90:eb:ae:
f2:94:db:f3:1c:0d:e7:00:cb:10:a8:28:77:d0:6d:
42:46:62:b3:fa:16:05:6b:9b:46:15:9b:91:76:d3:
9c:39:26:15:21:2b:c2:fa:20:c3:e2:2f:8b:71:c6:
d1:8c:f1:9d:7f:78:3e:02:d2:b1:38:bd:6f:ae:e5:
98:11:ea:f9:05:91:18:4b:bb:d4:7f:c7:f4:8e:11:
3f:a8:f9:aa:d9:d8:94:e7:d4:2f:2b:4d:84:d7:f7:
ee:9e:8e:ae:34:d5:4d:df:31:1a:26:92:ae:00:4e:
5a:0b:ef:04:a0:9b:e8:e1:9c:bc:19:c5:0d:6d:ce:
4f:0c:c2:79:bc:e7:92:24:e0:5f:50:91:0e:10:e6:
32:ff:ea:e3:4e:c0:d7:ed:4a:2a:06:c5:74:be:b8:
be:c5:5f:32:d6:0f:b3:e9:c0:c8:02:fa:11:ef:11:
f8:8e:d0:39:e4:a3:95:c5:58:cf:7b:7d:a3:f4:17:
9e:6b:2e:95:a2:67:8f:26:29:70:15:f3:6f:c4:f7:
d0:41:5e:8b:2b:ff:c8:fa:f6:c8:13:85:1c:a3:68:
5a:e3:3b:2f:49:9d:23:a7:53:be:25:63:60:02:0a:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:73:F7:32:36:09:07:91:1A:AA:00:D2:B4:F9:56:5E:5D:CA:3C:D0
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:df:96:1c:88:3e:88:18:40:15:8e:e4:c6:d2:e7:77:24:1f:
cb:80:81:55:b5:23:60:cf:ce:09:ff:42:9f:b9:2b:71:70:52:
c7:f2:aa:83:bd:18:c1:f9:9e:9d:7d:bf:99:a6:83:c8:f9:0a:
a1:6f:f3:02:77:e7:70:25:25:8d:19:05:c7:bb:6b:79:18:5b:
ad:ec:64:57:90:c4:5e:e8:bd:34:2d:fa:c5:17:9e:bf:99:61:
2e:a1:4c:a4:66:00:db:09:ca:2e:f1:67:52:3e:65:42:54:73:
52:99:df:fa:69:99:aa:60:4c:ae:3b:fb:84:cf:a4:b0:ce:ae:
53:cb:26:f4:55:ec:32:39:d7:d4:fd:03:23:50:36:f5:9c:8a:
73:e2:94:03:1e:f0:60:37:c0:d7:6f:26:f2:c5:c8:68:e6:7d:
b3:aa:4d:e7:b3:f0:97:c8:56:9d:aa:c4:18:dc:92:4d:b4:97:
e9:9e:23:e4:d1:63:0d:25:d9:a0:49:ec:44:71:f5:36:1a:d2:
6b:70:05:a1:ab:0b:d6:d4:bd:4a:07:e7:31:20:77:74:17:4f:
e6:e2:eb:86:14:ab:35:57:66:73:33:b7:9a:15:87:61:6d:25:
bf:68:68:bc:00:87:b2:cb:cf:3c:b0:ff:1e:84:a7:fa:2f:97:
36:56:c9:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf7mRZsi5nDLpIrt6RXXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4
MTEwNTcwHhcNMjYwNzIzMTUwMjE5WhcNMjYwNzI0MTUwMjE5WjAzMTEwLwYDVQQD
Eyg1NTczZjczMjM2MDkwNzkxMWFhYTAwZDJiNGY5NTY1ZTVkY2EzY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68oUk/CoE8QXfoXKq+EOr+35SJhq
AaMHRDWQ667ylNvzHA3nAMsQqCh30G1CRmKz+hYFa5tGFZuRdtOcOSYVISvC+iDD
4i+LccbRjPGdf3g+AtKxOL1vruWYEer5BZEYS7vUf8f0jhE/qPmq2diU59QvK02E
1/funo6uNNVN3zEaJpKuAE5aC+8EoJvo4Zy8GcUNbc5PDMJ5vOeSJOBfUJEOEOYy
/+rjTsDX7UoqBsV0vri+xV8y1g+z6cDIAvoR7xH4jtA55KOVxVjPe32j9Beeay6V
omePJilwFfNvxPfQQV6LK//I+vbIE4Uco2ha4zsvSZ0jp1O+JWNgAgp7xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVz9zI2CQeRGqoA0rT5Vl5dyjzQMB8GA1UdIwQY
MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt
NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1
LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZt+WHIg+
iBhAFY7kxtLndyQfy4CBVbUjYM/OCf9Cn7krcXBSx/Kqg70YwfmenX2/maaDyPkK
oW/zAnfncCUljRkFx7treRhbrexkV5DEXui9NC36xReev5lhLqFMpGYA2wnKLvFn
Uj5lQlRzUpnf+mmZqmBMrjv7hM+ksM6uU8sm9FXsMjnX1P0DI1A29ZyKc+KUAx7w
YDfA128m8sXIaOZ9s6pN57Pwl8hWnarEGNySTbSX6Z4j5NFjDSXZoEnsRHH1NhrS
a3AFoasL1tS9SgfnMSB3dBdP5uLrhhSrNVdmczO3mhWHYW0lv2hovACHssvPPLD/
HoSn+i+XNlbJdQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:10 2026 by rpki-client