Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: SesAef5Z2ZCx1SYzShQz/2zrNuAAAIgW55R+8k8YwLA=
Subject key identifier: 42:6C:E0:41:59:05:C4:1F:D9:34:21:AF:8B:C0:0D:FB:26:DB:6C:20
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019F91DAB9709AA82C5CB90F10DEF2B01BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0F7B
Signing time: Fri 24 Jul 2026 02:00:58 +0000
Manifest this update: Fri 24 Jul 2026 02:00:58 +0000
Manifest next update: Sat 25 Jul 2026 02:00:58 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: +AZC6U9bIbeOzSuCzp0KqnmZqfZ6Q024WKOefgX9wZg=)
2: NStJJ9e183cFfxVciTY49OglbNU.roa (hash: yb2BwVREODItjweWlbnW4dYNiNyWxIQNgI0RjZN1nJI=)
3: s_-LqLAwoVzNq7MMJZajpyC4Khk.roa (hash: ClKhGIdEbTXNOQjYUKo8kUllH20eM7IYqgOaHPxfrg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:b9:70:9a:a8:2c:5c:b9:0f:10:de:f2:b0:1b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Jul 24 02:00:58 2026 GMT
Not After : Jul 25 02:00:58 2026 GMT
Subject: CN=426ce0415905c41fd93421af8bc00dfb26db6c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:c5:2f:ac:c1:72:fb:f4:59:0b:50:18:f0:
8e:ce:4f:b7:90:23:7d:3e:4a:64:d5:2b:17:8e:6a:
9a:d7:cc:3e:30:b3:d8:e9:64:cc:40:b6:c2:20:ca:
b5:06:f8:5c:18:a8:2a:13:e6:60:43:c3:19:12:98:
aa:7b:18:b9:6f:ff:7a:9c:29:8d:ad:1a:00:38:74:
68:37:3c:fb:90:be:29:5d:85:31:03:44:47:d4:16:
8b:fb:7b:74:7b:49:76:6c:54:3f:35:21:d5:37:b4:
6c:40:ca:6b:e7:53:2c:99:c4:e6:e2:5a:8b:b3:2f:
56:af:40:bd:62:5f:5a:bc:ac:59:fb:15:01:d2:bc:
d7:f8:f8:ac:80:c2:ea:37:e2:06:0d:35:1b:9c:35:
9e:ce:43:69:ab:87:0d:69:f4:45:82:1b:95:a8:19:
36:eb:4e:6c:5b:10:1f:9b:16:da:58:ff:cb:fe:cc:
2e:f3:19:1a:8d:f1:e7:c7:ec:02:42:d3:c7:04:7b:
16:90:bb:81:cf:cb:c7:a4:c3:c0:bf:c4:c9:d4:ee:
19:be:3e:9c:31:17:fe:ec:29:a5:fd:1b:e3:d4:ba:
5a:fd:b8:3e:4c:4f:1c:49:ff:01:11:67:0d:b2:8a:
66:51:08:65:fd:37:74:79:82:14:ea:7e:45:3b:b9:
6c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6C:E0:41:59:05:C4:1F:D9:34:21:AF:8B:C0:0D:FB:26:DB:6C:20
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:48:f1:6a:81:dd:f0:d2:6d:f6:db:a5:f9:6e:85:7c:64:11:
97:c0:81:ef:d1:24:66:55:df:20:04:07:38:9c:77:cc:52:4a:
e1:e3:42:8d:de:94:c5:78:06:1a:9b:dc:e6:e0:a5:21:7d:4e:
12:cf:00:1a:5b:16:5d:cd:40:c1:3a:28:c2:e5:d9:91:10:43:
62:d3:bf:69:87:ff:df:1a:db:8b:2f:e9:a4:c2:ec:1b:07:60:
a5:28:ea:91:b8:4f:89:40:2c:73:af:46:3a:d0:97:0a:f4:7b:
e4:6d:fb:fe:8e:b2:21:45:5d:cd:32:dd:c2:5e:51:17:a9:39:
70:bf:c2:3e:cf:2d:e0:ad:80:a4:ce:46:12:1c:14:a5:08:29:
7e:71:6d:a0:25:9b:89:4c:f0:eb:47:1f:71:c1:62:42:44:ed:
db:e5:13:b9:c2:ea:43:53:88:fb:09:85:07:67:22:cf:75:dc:
e8:cd:b8:1a:df:71:d4:4a:f8:23:ce:86:d8:eb:7c:bb:a7:76:
8e:c7:2d:95:a3:24:5d:2b:92:9a:85:99:65:d6:f5:31:13:66:
7b:b3:16:d8:f1:50:9b:d7:02:b0:60:94:8b:a7:f4:e2:04:fc:
2f:da:84:eb:56:d1:16:ec:3f:4f:0f:a7:cb:c4:bb:0b:28:04:
6c:7a:74:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2rlwmqgsXLkPEN7ysBvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWQyOGYxNDk3OTNhM2Q3MmU4ZWYwNDFlOWM5ZTBkOWE2
NmIyMWUwHhcNMjYwNzI0MDIwMDU4WhcNMjYwNzI1MDIwMDU4WjAzMTEwLwYDVQQD
Eyg0MjZjZTA0MTU5MDVjNDFmZDkzNDIxYWY4YmMwMGRmYjI2ZGI2YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtPFL6zBcvv0WQtQGPCOzk+3kCN9
Pkpk1SsXjmqa18w+MLPY6WTMQLbCIMq1BvhcGKgqE+ZgQ8MZEpiqexi5b/96nCmN
rRoAOHRoNzz7kL4pXYUxA0RH1BaL+3t0e0l2bFQ/NSHVN7RsQMpr51MsmcTm4lqL
sy9Wr0C9Yl9avKxZ+xUB0rzX+PisgMLqN+IGDTUbnDWezkNpq4cNafRFghuVqBk2
605sWxAfmxbaWP/L/swu8xkajfHnx+wCQtPHBHsWkLuBz8vHpMPAv8TJ1O4Zvj6c
MRf+7Cml/Rvj1Lpa/bg+TE8cSf8BEWcNsopmUQhl/Td0eYIU6n5FO7lscwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJs4EFZBcQf2TQhr4vADfsm22wgMB8GA1UdIwQY
MBaAFOBdKPFJeTo9cujvBB6cng2aZrIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUt
ODA5MWViY2UzYmJmLzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUtODA5MWViY2UzYmJm
LzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0jxaoHd
8NJt9tul+W6FfGQRl8CB79EkZlXfIAQHOJx3zFJK4eNCjd6UxXgGGpvc5uClIX1O
Es8AGlsWXc1AwToowuXZkRBDYtO/aYf/3xrbiy/ppMLsGwdgpSjqkbhPiUAsc69G
OtCXCvR75G37/o6yIUVdzTLdwl5RF6k5cL/CPs8t4K2ApM5GEhwUpQgpfnFtoCWb
iUzw60cfccFiQkTt2+UTucLqQ1OI+wmFB2ciz3Xc6M24Gt9x1Er4I86G2Ot8u6d2
jsctlaMkXSuSmoWZZdb1MRNme7MW2PFQm9cCsGCUi6f04gT8L9qE61bRFuw/Tw+n
y8S7CygEbHp0gg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:30 2026 by rpki-client