
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
File: f4_zrPyu0gPpbekasIxu-2QDGmM.mft (raw, json)
Hash identifier: FsJMiV915QUTZYOuduXY/AArZh0u8sTznJ8SSg2TYAo=
Subject key identifier: 4E:4A:59:85:6B:A8:9E:89:28:E2:4B:76:45:D6:65:9B:AC:C0:D8:2B
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 019F8E6B75D10FD7004D2F73157AA3D0F804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
Manifest number: 7D
Signing time: Thu 23 Jul 2026 10:00:34 +0000
Manifest this update: Thu 23 Jul 2026 10:00:34 +0000
Manifest next update: Fri 24 Jul 2026 10:00:34 +0000
Files and hashes: 1: f4_zrPyu0gPpbekasIxu-2QDGmM.crl (hash: lfnlvFj0exl/I2/D/cEUbLauV3vJLlcmIDBvBsaQYuI=)
2: lf4UXwwCiStKMPFSMPyNM0g2zZ8.roa (hash: QmN5YcqljhCgdP2JOMV6nb5xM3S3y5gCkyo63tNhBUQ=)
3: yLl9hut5-79pC7adyuGSTuX_5sU.asa (hash: 61Xj0gQa/Th7F++DmhWcMRLvfxIvqCNmmXnO1BzHxpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:75:d1:0f:d7:00:4d:2f:73:15:7a:a3:d0:f8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Jul 23 10:00:34 2026 GMT
Not After : Jul 24 10:00:34 2026 GMT
Subject: CN=4e4a59856ba89e8928e24b7645d6659bacc0d82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:17:37:76:81:3a:76:8e:4d:0d:91:3a:ee:
e8:a0:80:a9:f9:ef:6a:6e:c6:b4:4b:61:cc:0f:55:
c0:f0:8f:45:a3:1e:e1:4c:b6:dc:d3:6f:c2:d0:69:
f7:e7:5e:d7:d6:9f:8b:72:bd:69:e5:2c:16:46:6a:
27:11:1f:36:bf:d1:e7:4e:75:0c:9f:5d:90:66:5e:
99:ea:4d:37:15:a0:68:52:ff:ee:7e:ed:9b:fe:07:
2b:30:b3:9c:7e:98:43:06:cf:75:75:ca:b5:f0:f3:
bf:ee:74:b2:fe:4c:20:43:c6:23:d9:d1:2a:b3:7d:
d2:50:4a:ed:5c:0b:2e:1a:d6:bc:f6:62:f7:f8:84:
d0:d2:eb:b2:52:5a:a7:6f:e8:ee:9b:3a:47:63:67:
9e:58:52:18:22:7a:67:3b:34:7e:75:6c:4b:66:7e:
73:3c:d5:00:a0:09:07:3a:21:eb:dc:bc:fe:4c:2b:
0d:64:b7:cb:25:41:dc:95:08:95:33:87:0c:4d:e7:
f3:12:3e:c6:4e:1d:44:f0:bb:bd:73:2d:79:e7:a5:
8c:d7:48:61:52:3f:ea:0f:cc:6f:18:6b:25:a9:a8:
40:c4:d5:25:ad:95:e6:db:51:a4:5a:c7:bd:86:2e:
cc:26:87:6b:7d:48:a2:05:e4:c4:f0:ac:f2:be:d9:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4A:59:85:6B:A8:9E:89:28:E2:4B:76:45:D6:65:9B:AC:C0:D8:2B
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c0:56:fb:f8:91:90:d7:6a:ce:5f:6b:29:9c:90:1d:cf:a5:
ec:43:f6:fc:a5:56:8e:c1:3e:94:5e:a3:36:b7:39:77:34:c2:
2e:2f:10:20:7d:a6:6d:5f:e6:06:1b:30:c3:9f:37:f0:3d:3c:
d3:e9:70:35:49:51:11:71:03:f9:27:7e:f4:e6:95:70:77:c0:
0e:74:64:34:b3:87:89:12:af:17:56:cf:f6:2f:c3:2b:5a:88:
59:74:3f:89:8d:61:92:0c:18:27:97:e5:d5:a8:8f:3f:5a:a6:
2f:c6:e7:8a:13:07:6f:46:3e:a3:8a:cd:c3:05:d6:93:92:42:
8b:d2:3d:b5:5b:10:b1:3e:bc:86:f4:fb:f0:02:29:a0:f1:88:
45:34:7b:c5:14:0b:b9:2d:47:f4:bd:77:f8:9e:d1:6d:73:0c:
04:73:fd:fb:f3:fa:fd:5a:be:5e:c4:70:8c:e4:b4:9e:29:82:
ff:02:e2:94:7f:b4:71:08:56:02:b9:4c:7a:6a:e8:05:13:cc:
b1:c9:dd:3e:b8:ab:b8:8a:d1:c5:01:dc:31:ed:73:89:23:cd:
33:8b:03:47:29:31:04:0b:67:fc:62:64:52:70:b6:e1:de:61:
d5:97:4a:44:ee:4f:18:bf:68:7b:4f:87:7d:7f:b1:9f:0d:9b:
2b:21:60:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oa3XRD9cATS9zFXqj0PgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOGZmM2FjZmNhZWQyMDNlOTZkZTkxYWIwOGM2ZWZiNjQw
MzFhNjMwHhcNMjYwNzIzMTAwMDM0WhcNMjYwNzI0MTAwMDM0WjAzMTEwLwYDVQQD
Eyg0ZTRhNTk4NTZiYTg5ZTg5MjhlMjRiNzY0NWQ2NjU5YmFjYzBkODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JoXN3aBOnaOTQ2ROu7ooICp+e9q
bsa0S2HMD1XA8I9Fox7hTLbc02/C0Gn3517X1p+Lcr1p5SwWRmonER82v9HnTnUM
n12QZl6Z6k03FaBoUv/ufu2b/gcrMLOcfphDBs91dcq18PO/7nSy/kwgQ8Yj2dEq
s33SUErtXAsuGta89mL3+ITQ0uuyUlqnb+jumzpHY2eeWFIYInpnOzR+dWxLZn5z
PNUAoAkHOiHr3Lz+TCsNZLfLJUHclQiVM4cMTefzEj7GTh1E8Lu9cy1556WM10hh
Uj/qD8xvGGslqahAxNUlrZXm21GkWse9hi7MJodrfUiiBeTE8Kzyvtm3EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5KWYVrqJ6JKOJLdkXWZZuswNgrMB8GA1UdIwQY
MBaAFH+P86z8rtID6W3pGrCMbvtkAxpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRfenJQeXUwZ1BwYmVrYXNJeHUtMlFER21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xODhkMWMtZmZlMi00MjNiLTg3ZmIt
OGY5YzY1YWMxNmM2LzEvZjRfenJQeXUwZ1BwYmVrYXNJeHUtMlFER21NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xODhkMWMtZmZlMi00MjNiLTg3ZmItOGY5YzY1YWMxNmM2
LzEvZjRfenJQeXUwZ1BwYmVrYXNJeHUtMlFER21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsBW+/iR
kNdqzl9rKZyQHc+l7EP2/KVWjsE+lF6jNrc5dzTCLi8QIH2mbV/mBhsww5838D08
0+lwNUlREXED+Sd+9OaVcHfADnRkNLOHiRKvF1bP9i/DK1qIWXQ/iY1hkgwYJ5fl
1aiPP1qmL8bnihMHb0Y+o4rNwwXWk5JCi9I9tVsQsT68hvT78AIpoPGIRTR7xRQL
uS1H9L13+J7RbXMMBHP9+/P6/Vq+XsRwjOS0nimC/wLilH+0cQhWArlMemroBRPM
scndPriruIrRxQHcMe1ziSPNM4sDRykxBAtn/GJkUnC24d5h1ZdKRO5PGL9oe0+H
fX+xnw2bKyFgaw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:58 2026 by rpki-client