Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: j2aVARGuur3uLcXq5n8bwymKi6OooDNDL7O03S9Gq/8=
Subject key identifier: F8:53:C7:F3:0B:D0:C3:56:00:28:65:14:5B:24:00:CB:EC:3D:40:E2
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 019F8FB4BDE79C8507DDC815F2F80A7E6219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 0C7B
Signing time: Thu 23 Jul 2026 16:00:14 +0000
Manifest this update: Thu 23 Jul 2026 16:00:14 +0000
Manifest next update: Fri 24 Jul 2026 16:00:14 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: hz9aayND71RFOPwZpqSRbz7VDZpSCOXLfiwcZ9wHy/w=)
2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:bd:e7:9c:85:07:dd:c8:15:f2:f8:0a:7e:62:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Jul 23 16:00:14 2026 GMT
Not After : Jul 24 16:00:14 2026 GMT
Subject: CN=f853c7f30bd0c356002865145b2400cbec3d40e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:20:75:e1:b1:07:f8:b6:6b:da:a1:37:08:
fd:f8:65:0d:65:6b:7f:29:1b:eb:54:58:50:cb:47:
6b:65:d5:87:26:55:26:eb:8d:c5:86:ec:bd:24:47:
7b:56:e8:75:78:a8:e2:73:c3:9b:a1:b6:07:18:d1:
84:ba:65:db:ff:b8:10:9d:12:6b:79:50:11:0e:2a:
bb:c5:3b:4d:19:bf:40:4f:98:1f:a2:fb:0e:77:96:
27:7c:a9:ad:dd:75:97:21:00:cd:c1:10:15:ca:97:
dd:c1:01:5d:24:31:bf:4f:04:5d:42:d7:02:9b:24:
ca:f1:26:19:89:52:0f:91:98:8a:57:bd:e2:8f:5d:
35:0c:95:e2:0f:8b:a7:92:e6:6b:dd:91:15:72:aa:
85:01:75:13:2f:86:61:14:53:9c:28:71:9f:a7:b8:
00:04:bc:36:6e:71:77:1c:73:3a:d3:28:a3:85:53:
5f:74:d7:b8:7b:82:fd:ec:09:94:52:27:56:a2:b2:
02:95:03:27:70:0d:c6:75:20:39:e9:f3:d7:32:a8:
78:ed:da:59:7b:3e:6e:56:a9:73:64:a9:f2:d3:c0:
c3:f4:a3:47:13:0b:0d:2e:b1:24:01:ff:99:cd:03:
7b:80:db:6b:64:77:e6:57:9f:c4:c3:59:69:3e:f3:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:C7:F3:0B:D0:C3:56:00:28:65:14:5B:24:00:CB:EC:3D:40:E2
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:75:f6:e7:2f:e1:96:28:5e:a0:80:cc:0f:b3:b4:db:35:2a:
50:12:d9:63:39:61:87:c2:9d:c9:b1:6b:ee:94:f3:f6:88:df:
8e:b5:2f:04:d4:7f:52:8d:ad:93:0b:24:37:cf:89:64:06:6d:
e1:0b:70:fa:82:9d:d3:02:82:fa:ac:34:f4:49:1e:12:d9:0b:
e3:40:af:d1:1c:74:73:9f:d3:b2:58:df:ac:1a:e9:82:17:54:
84:0c:2b:dd:81:ec:2d:e6:05:ce:18:1a:05:8a:54:c3:e0:0a:
e9:cf:7a:24:3a:b7:bc:a9:3c:85:92:a0:98:8b:99:da:23:c0:
6f:44:c2:fc:b1:37:6b:b5:eb:d6:67:21:c4:e9:e2:f9:10:17:
e4:8f:be:41:00:0e:3f:7a:a5:9e:f3:80:5b:b2:40:aa:1e:9f:
62:51:3a:3c:44:f0:b5:2e:37:fb:79:4a:3b:b2:56:39:92:b3:
76:c2:d6:d6:ed:49:61:b2:d4:8f:8a:ca:8f:45:2e:ae:aa:76:
ae:3e:58:21:66:6d:37:be:d9:c6:7d:d6:d2:61:5b:a3:50:3d:
92:02:22:08:33:06:72:44:9b:c5:0f:14:71:a4:b1:7e:44:52:
44:8a:fb:c1:ca:0e:ee:3d:c3:1b:7f:f0:65:f0:5b:00:8f:5f:
94:87:78:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtL3nnIUH3cgV8vgKfmIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy
YjQ4NWEwHhcNMjYwNzIzMTYwMDE0WhcNMjYwNzI0MTYwMDE0WjAzMTEwLwYDVQQD
EyhmODUzYzdmMzBiZDBjMzU2MDAyODY1MTQ1YjI0MDBjYmVjM2Q0MGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJUgdeGxB/i2a9qhNwj9+GUNZWt/
KRvrVFhQy0drZdWHJlUm643Fhuy9JEd7Vuh1eKjic8ObobYHGNGEumXb/7gQnRJr
eVARDiq7xTtNGb9AT5gfovsOd5YnfKmt3XWXIQDNwRAVypfdwQFdJDG/TwRdQtcC
myTK8SYZiVIPkZiKV73ij101DJXiD4unkuZr3ZEVcqqFAXUTL4ZhFFOcKHGfp7gA
BLw2bnF3HHM60yijhVNfdNe4e4L97AmUUidWorIClQMncA3GdSA56fPXMqh47dpZ
ez5uVqlzZKny08DD9KNHEwsNLrEkAf+ZzQN7gNtrZHfmV5/Ew1lpPvMeZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhTx/ML0MNWAChlFFskAMvsPUDiMB8GA1UdIwQY
MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt
MjI3NDBiZjJkNWVhLzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh
LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHX25y/h
liheoIDMD7O02zUqUBLZYzlhh8KdybFr7pTz9ojfjrUvBNR/Uo2tkwskN8+JZAZt
4Qtw+oKd0wKC+qw09EkeEtkL40Cv0Rx0c5/TsljfrBrpghdUhAwr3YHsLeYFzhga
BYpUw+AK6c96JDq3vKk8hZKgmIuZ2iPAb0TC/LE3a7Xr1mchxOni+RAX5I++QQAO
P3qlnvOAW7JAqh6fYlE6PETwtS43+3lKO7JWOZKzdsLW1u1JYbLUj4rKj0Uurqp2
rj5YIWZtN77Zxn3W0mFbo1A9kgIiCDMGckSbxQ8UcaSxfkRSRIr7wcoO7j3DG3/w
ZfBbAI9flId4Uw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:07 2026 by rpki-client