Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: mi1aUeMY2iDaV5ERlrRNj8K932Xt6IUSKbFrKgek7Yo=
Subject key identifier: 79:81:A4:E9:C8:86:44:9A:A1:89:BC:69:15:39:C1:74:D0:31:0F:1F
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019F935B2CE5C75A615A8986AA2AAC9CF5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 09:00:53 +0000
Manifest this update: Fri 24 Jul 2026 09:00:53 +0000
Manifest next update: Sat 25 Jul 2026 09:00:53 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: ni/OD+2fjL4J0b8HRZ3x6fMLMjHA52YpSy2NvzNw2DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:2c:e5:c7:5a:61:5a:89:86:aa:2a:ac:9c:f5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Jul 24 09:00:53 2026 GMT
Not After : Jul 25 09:00:53 2026 GMT
Subject: CN=7981a4e9c886449aa189bc691539c174d0310f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:54:50:18:ca:91:38:83:f7:96:4b:17:f3:
c7:df:57:a7:da:73:51:46:e3:fe:5c:e8:12:92:b5:
b4:7e:c5:63:6b:a5:b3:dc:35:a6:7a:04:8f:d6:6f:
b0:67:5d:59:0d:7b:d1:c8:8e:64:82:f3:b7:0e:9d:
e4:06:dd:5c:18:ae:3b:4c:e5:81:a0:ab:6e:0b:32:
4b:50:e4:0e:99:3c:7a:60:2b:7b:7c:ac:a2:f7:e6:
94:3f:85:b3:c0:62:e7:d8:a9:93:92:2e:60:b1:97:
20:6d:58:ff:72:c2:7c:ae:82:e6:3b:05:86:69:f6:
8b:a1:e2:06:a5:55:2c:23:5d:fe:57:b6:35:2f:e5:
71:6d:ed:4c:40:a8:ce:f3:cc:85:a2:1b:16:59:93:
94:c7:83:fb:68:70:85:d0:e6:61:c6:e2:a1:eb:a6:
3c:4a:a2:e4:7d:91:4b:4d:f1:2a:c6:ae:53:2f:aa:
8c:e5:53:1f:f0:2e:db:61:43:51:28:f9:18:1d:db:
50:c5:b2:b1:96:63:dc:9e:57:4e:31:07:53:7f:35:
80:b4:ee:19:d8:64:86:29:10:b4:b4:0f:c9:40:b6:
f7:0f:15:f8:fd:bd:a6:0b:29:ae:23:5b:6f:32:ff:
ca:20:6c:3f:3f:1e:21:79:c2:d5:3f:0e:24:8a:47:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:A4:E9:C8:86:44:9A:A1:89:BC:69:15:39:C1:74:D0:31:0F:1F
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:88:18:5c:ed:59:5e:fc:dd:ef:61:a2:ae:29:b7:29:69:f9:
a0:35:ba:f3:eb:76:62:dc:61:90:07:8b:16:f3:97:ed:7f:63:
5c:24:b0:89:d3:69:e6:75:63:0e:4a:51:11:1b:a4:eb:d1:75:
0e:56:cc:7f:41:d1:a0:c0:32:bd:77:4e:6a:28:af:6f:19:21:
9c:da:fb:8a:c6:dc:c4:d5:cb:1b:95:0e:d5:d3:22:18:7f:68:
b0:0b:de:f6:68:a6:0a:8b:69:20:43:40:6b:53:bf:fe:28:e6:
19:92:7c:9b:66:11:16:aa:4d:ff:3b:bb:71:00:0d:bb:50:4c:
a6:e9:a4:38:1c:8d:2a:ff:96:f9:1a:ff:c3:ce:60:fe:91:87:
b5:df:f0:36:8a:83:0b:5c:52:ce:09:80:50:e9:ed:0e:7e:66:
5c:06:97:38:a8:cf:28:7e:02:b2:77:c3:6e:82:b5:20:26:7b:
9a:38:20:8c:2d:1b:d1:fc:aa:f1:85:38:d5:4c:b4:15:2b:e1:
f7:99:bd:5c:c9:b9:73:24:d1:31:d7:2e:69:0f:d6:75:5e:01:
f0:8a:33:0b:d1:0e:53:ad:9c:10:4b:95:5d:9a:b7:84:05:7b:
99:61:5f:44:d1:b5:93:ef:f0:24:71:14:12:0e:df:17:8e:0a:
50:81:e8:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWyzlx1phWomGqiqsnPXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOGE3ODg2NjYyMjU0YmUzOWVhMWFkZDcyNzI4ZTAwMGVi
MmMyNWEwHhcNMjYwNzI0MDkwMDUzWhcNMjYwNzI1MDkwMDUzWjAzMTEwLwYDVQQD
Eyg3OTgxYTRlOWM4ODY0NDlhYTE4OWJjNjkxNTM5YzE3NGQwMzEwZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT9UUBjKkTiD95ZLF/PH31en2nNR
RuP+XOgSkrW0fsVja6Wz3DWmegSP1m+wZ11ZDXvRyI5kgvO3Dp3kBt1cGK47TOWB
oKtuCzJLUOQOmTx6YCt7fKyi9+aUP4WzwGLn2KmTki5gsZcgbVj/csJ8roLmOwWG
afaLoeIGpVUsI13+V7Y1L+Vxbe1MQKjO88yFohsWWZOUx4P7aHCF0OZhxuKh66Y8
SqLkfZFLTfEqxq5TL6qM5VMf8C7bYUNRKPkYHdtQxbKxlmPcnldOMQdTfzWAtO4Z
2GSGKRC0tA/JQLb3DxX4/b2mCymuI1tvMv/KIGw/Px4hecLVPw4kikfj/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmBpOnIhkSaoYm8aRU5wXTQMQ8fMB8GA1UdIwQY
MBaAFEyKeIZmIlS+Oeoa3XJyjgAOssJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2Mt
ZWMwM2ViZDE5MDAwLzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81Njg3YzEtZGY5Zi00YWU1LWE0Y2MtZWMwM2ViZDE5MDAw
LzEvVElwNGhtWWlWTDQ1NmhyZGNuS09BQTZ5d2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIgYXO1Z
Xvzd72Girim3KWn5oDW68+t2YtxhkAeLFvOX7X9jXCSwidNp5nVjDkpRERuk69F1
DlbMf0HRoMAyvXdOaiivbxkhnNr7isbcxNXLG5UO1dMiGH9osAve9mimCotpIENA
a1O//ijmGZJ8m2YRFqpN/zu7cQANu1BMpumkOByNKv+W+Rr/w85g/pGHtd/wNoqD
C1xSzgmAUOntDn5mXAaXOKjPKH4CsnfDboK1ICZ7mjggjC0b0fyq8YU41Uy0FSvh
95m9XMm5cyTRMdcuaQ/WdV4B8IozC9EOU62cEEuVXZq3hAV7mWFfRNG1k+/wJHEU
Eg7fF44KUIHozQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:20 2026 by rpki-client