Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
File: 4XxkApvUiWrwp2rY2jPWtDTRDvs.mft (raw, json)
Hash identifier: /hu9A0MOR3ggK3iRbq2+H2gqMZexMthCPVOJvKqy+yU=
Subject key identifier: FD:F0:96:71:CC:E1:F3:4F:B9:01:38:BE:44:80:D7:C0:83:7A:9C:E3
Authority key identifier: E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB
Certificate issuer: /CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
Certificate serial: 019F90FEF97296DCE5DE890301F7A290DDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
Manifest number: 40
Signing time: Thu 23 Jul 2026 22:00:56 +0000
Manifest this update: Thu 23 Jul 2026 22:00:56 +0000
Manifest next update: Fri 24 Jul 2026 22:00:56 +0000
Files and hashes: 1: 4XxkApvUiWrwp2rY2jPWtDTRDvs.crl (hash: 4Kr3XjeWxVO1dTGsIEJsheILbcmeWW/mBhecOxh+/nI=)
2: FSSe1tEDCP5eij1O2L6qukAQDhc.roa (hash: xQCqNXwk7J8ALgUJnGIQA4t2bApXYtk3W+6tyFVQHYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:f9:72:96:dc:e5:de:89:03:01:f7:a2:90:dd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
Validity
Not Before: Jul 23 22:00:56 2026 GMT
Not After : Jul 24 22:00:56 2026 GMT
Subject: CN=fdf09671cce1f34fb90138be4480d7c0837a9ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:da:2b:e0:fb:e5:6b:91:97:fc:e9:08:19:90:
ad:21:70:d3:80:d7:b2:c8:33:e5:c8:3e:a1:7b:af:
6f:fd:0e:85:1f:f8:74:44:ec:75:d0:1e:7f:20:26:
65:52:98:35:50:8c:8b:58:53:7e:20:52:3b:15:73:
b9:76:de:40:88:b1:5b:da:01:0d:f1:98:d1:74:f0:
28:36:21:ab:2f:7e:cf:e8:33:54:ed:f4:4b:ab:b0:
a3:ec:58:20:95:ec:88:48:37:de:a4:1c:83:71:3a:
74:0e:de:9e:db:96:84:0f:13:27:79:36:59:fb:ac:
6d:31:18:4e:ac:8d:49:90:e8:40:c4:f3:32:6f:e3:
c5:da:90:b2:58:57:29:d6:12:e6:fc:5e:18:68:54:
3d:d0:80:92:79:86:de:8c:aa:b2:1c:a5:2c:c1:05:
a2:e6:fd:d0:32:3c:e3:50:ac:d4:84:28:b0:5c:d4:
4b:1a:99:d3:12:2b:9e:a9:34:75:e5:f8:9c:4e:be:
d9:f8:37:be:64:8a:ee:94:31:bf:39:7a:d6:69:47:
1f:82:ef:f8:e0:b8:40:b5:e2:df:f5:52:72:69:65:
80:b3:12:68:8e:7b:b5:84:c1:f3:96:69:e3:3c:1e:
03:f1:2b:f2:0f:35:78:95:50:6e:e6:dc:2f:5b:a7:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:96:71:CC:E1:F3:4F:B9:01:38:BE:44:80:D7:C0:83:7A:9C:E3
X509v3 Authority Key Identifier:
keyid:E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:27:7d:ae:66:41:86:14:bd:84:22:41:da:6d:12:1a:9c:e7:
db:14:f8:32:f4:f8:1c:77:e2:ca:0f:e2:1f:f8:46:4d:b1:63:
5d:a8:94:71:d0:63:95:5f:d4:89:b8:e7:ed:1c:0f:80:4e:2f:
11:80:3c:ac:e0:0c:54:7c:60:e5:cb:12:72:d2:55:56:9f:cb:
0a:cd:d3:a5:6c:3f:9a:03:b9:1c:c5:bb:64:8e:66:9d:6f:2b:
72:42:fb:27:57:65:15:2c:e8:10:da:e5:3f:21:2c:09:a6:7b:
b9:f1:bf:96:2d:48:f1:00:dc:9b:2b:c3:68:c8:af:3f:0a:b3:
a1:53:c4:39:91:96:9c:1f:c9:4c:6d:27:7f:b2:e3:1d:8d:f5:
8e:14:ca:aa:be:85:3b:3c:03:4d:35:e0:c3:69:b4:f6:7a:8d:
64:66:be:73:15:21:69:c5:dd:f2:3b:14:7e:a0:bf:a6:c6:22:
0c:ad:b8:9f:b0:b3:a4:7c:ef:7e:ed:8a:aa:eb:f3:16:e4:f0:
59:14:cf:42:5e:9a:d2:16:cc:9b:24:56:6b:6c:b2:53:02:47:
16:36:2e:75:34:0b:24:89:86:21:75:c8:d8:36:54:4d:7a:c7:
c3:e8:41:cc:d4:5b:99:08:ae:e3:28:e4:e3:f0:b9:ee:dc:08:
76:7c:73:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/vlyltzl3okDAfeikN3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxN2M2NDAyOWJkNDg5NmFmMGE3NmFkOGRhMzNkNmI0MzRk
MTBlZmIwHhcNMjYwNzIzMjIwMDU2WhcNMjYwNzI0MjIwMDU2WjAzMTEwLwYDVQQD
EyhmZGYwOTY3MWNjZTFmMzRmYjkwMTM4YmU0NDgwZDdjMDgzN2E5Y2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69or4Pvla5GX/OkIGZCtIXDTgNey
yDPlyD6he69v/Q6FH/h0ROx10B5/ICZlUpg1UIyLWFN+IFI7FXO5dt5AiLFb2gEN
8ZjRdPAoNiGrL37P6DNU7fRLq7Cj7FggleyISDfepByDcTp0Dt6e25aEDxMneTZZ
+6xtMRhOrI1JkOhAxPMyb+PF2pCyWFcp1hLm/F4YaFQ90ICSeYbejKqyHKUswQWi
5v3QMjzjUKzUhCiwXNRLGpnTEiueqTR15ficTr7Z+De+ZIrulDG/OXrWaUcfgu/4
4LhAteLf9VJyaWWAsxJojnu1hMHzlmnjPB4D8SvyDzV4lVBu5twvW6dwqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3wlnHM4fNPuQE4vkSA18CDepzjMB8GA1UdIwQY
MBaAFOF8ZAKb1Ilq8Kdq2Noz1rQ00Q77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFh4a0FwdlVpV3J3cDJyWTJqUFd0RFRSRHZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yNTIzOGMtOGVlZS00NDAzLTkxMDQt
OWNhOTQ3YWE2NjVhLzEvNFh4a0FwdlVpV3J3cDJyWTJqUFd0RFRSRHZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yNTIzOGMtOGVlZS00NDAzLTkxMDQtOWNhOTQ3YWE2NjVh
LzEvNFh4a0FwdlVpV3J3cDJyWTJqUFd0RFRSRHZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSd9rmZB
hhS9hCJB2m0SGpzn2xT4MvT4HHfiyg/iH/hGTbFjXaiUcdBjlV/Uibjn7RwPgE4v
EYA8rOAMVHxg5csSctJVVp/LCs3TpWw/mgO5HMW7ZI5mnW8rckL7J1dlFSzoENrl
PyEsCaZ7ufG/li1I8QDcmyvDaMivPwqzoVPEOZGWnB/JTG0nf7LjHY31jhTKqr6F
OzwDTTXgw2m09nqNZGa+cxUhacXd8jsUfqC/psYiDK24n7CzpHzvfu2KquvzFuTw
WRTPQl6a0hbMmyRWa2yyUwJHFjYudTQLJImGIXXI2DZUTXrHw+hBzNRbmQiu4yjk
4/C57twIdnxzbg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:56 2026 by rpki-client