Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
File: CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft (raw, json)
Hash identifier: pM1PEONixWO8Z2mC0w+flaptrjK3s+6yWHhZZMlyspY=
Subject key identifier: A4:70:29:BF:53:92:5D:C7:B7:8A:77:73:CA:87:9D:E9:6F:12:F2:DF
Authority key identifier: 08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
Certificate issuer: /CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Certificate serial: 019F8F47A222F55BCFD82A9A1BE27C33B74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
Manifest number: 87
Signing time: Thu 23 Jul 2026 14:01:04 +0000
Manifest this update: Thu 23 Jul 2026 14:01:04 +0000
Manifest next update: Fri 24 Jul 2026 14:01:04 +0000
Files and hashes: 1: CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl (hash: 5JPrQ4WQwZ53/elVT/3wojcRyz5LRUaPTUf/q4jE9Ws=)
2: hR2Y21D7bGLkXBKfLZ5CaTvZjkk.roa (hash: YlH5pSNmOHP/rxbn9aW9AqtUI/I4F8K3HIAacFaEpNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:a2:22:f5:5b:cf:d8:2a:9a:1b:e2:7c:33:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Validity
Not Before: Jul 23 14:01:04 2026 GMT
Not After : Jul 24 14:01:04 2026 GMT
Subject: CN=a47029bf53925dc7b78a7773ca879de96f12f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a4:43:3c:6c:bb:f4:b4:5d:2a:be:53:78:2a:
50:25:1d:07:0a:89:95:fe:c7:55:8b:4c:23:4d:51:
e3:db:9e:9b:8d:be:ff:2c:15:97:d9:0a:0b:51:95:
aa:f0:f7:0a:d7:71:20:52:8e:7b:65:50:d3:39:80:
f7:b4:f0:1d:15:54:46:0a:70:90:71:6f:f2:d1:3c:
d4:69:f0:3a:ad:9d:f7:c1:7b:d9:8c:09:6b:7d:03:
7a:22:1c:71:31:97:6c:33:2c:ad:4c:5f:23:8c:9b:
29:2a:fd:32:36:ea:23:21:31:2d:99:bb:a9:72:94:
e7:0e:d7:01:43:f9:0a:c2:59:e1:ba:2f:83:fa:8d:
f9:1e:51:00:dd:d8:de:20:cc:7c:f6:f5:48:1a:64:
d3:b6:8d:33:09:3a:1f:84:3e:51:55:c2:ec:ff:9c:
93:da:09:47:92:ce:37:ec:20:4f:01:1b:f7:d8:04:
cb:47:04:93:f7:d5:d1:70:a4:69:f9:53:4f:f8:81:
5b:7b:9d:b0:1b:a8:a2:10:ad:ac:1d:b2:f0:4a:6f:
9a:97:10:8a:56:c3:56:e2:b3:61:42:c0:1f:3a:4a:
80:12:84:b8:53:54:a8:e9:79:14:87:16:29:1c:1e:
05:d7:dd:e1:2e:1d:ed:4c:d0:61:97:fe:65:84:ca:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:29:BF:53:92:5D:C7:B7:8A:77:73:CA:87:9D:E9:6F:12:F2:DF
X509v3 Authority Key Identifier:
keyid:08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f0:b9:18:04:d0:24:07:5a:ce:74:81:30:a5:da:67:ea:41:
6e:16:eb:17:80:41:eb:9a:ed:2f:3f:0d:96:02:4b:80:f1:e1:
f1:b2:7c:17:b5:d5:a9:8c:a1:c7:5d:20:61:f1:67:fb:a9:aa:
8e:fd:32:df:98:8c:91:32:32:af:23:b1:ae:15:39:93:bb:25:
82:89:c6:48:f8:48:bd:dc:8d:10:b0:45:4f:04:40:82:32:01:
89:e4:a5:23:f4:4c:94:5f:f4:d9:02:53:a7:d8:ad:4d:ee:64:
96:55:4a:cc:1e:5f:3f:3d:ef:30:af:a6:bf:5a:fb:7d:2d:ca:
a3:b7:ca:17:cc:50:74:8a:1d:90:4e:8b:d4:04:17:95:98:88:
f4:62:64:d8:4c:43:2a:01:45:7d:2d:0a:6f:88:bc:53:c4:4d:
b3:d7:d0:c1:df:54:78:f1:02:a1:ad:e1:45:2e:4d:9a:e6:c1:
ea:87:92:6f:dd:d2:86:b3:07:92:7e:c1:da:c9:d0:9a:04:73:
d8:58:b0:7c:9c:8c:6a:1d:73:95:61:e8:d3:9e:fb:62:50:cd:
da:cf:1d:76:e9:74:d5:6f:c4:05:41:e6:77:c2:30:32:c2:ec:
be:98:29:44:2b:e9:48:ea:a4:22:77:87:1a:17:81:fe:43:98:
d1:c4:8e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR6Ii9VvP2CqaG+J8M7dNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWUwYzU0NDI1YmYxODA5YjZjZDljYTkwMzM1NWI2ZjYw
MzcwY2MwHhcNMjYwNzIzMTQwMTA0WhcNMjYwNzI0MTQwMTA0WjAzMTEwLwYDVQQD
EyhhNDcwMjliZjUzOTI1ZGM3Yjc4YTc3NzNjYTg3OWRlOTZmMTJmMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KRDPGy79LRdKr5TeCpQJR0HComV
/sdVi0wjTVHj256bjb7/LBWX2QoLUZWq8PcK13EgUo57ZVDTOYD3tPAdFVRGCnCQ
cW/y0TzUafA6rZ33wXvZjAlrfQN6IhxxMZdsMyytTF8jjJspKv0yNuojITEtmbup
cpTnDtcBQ/kKwlnhui+D+o35HlEA3djeIMx89vVIGmTTto0zCTofhD5RVcLs/5yT
2glHks437CBPARv32ATLRwST99XRcKRp+VNP+IFbe52wG6iiEK2sHbLwSm+alxCK
VsNW4rNhQsAfOkqAEoS4U1So6XkUhxYpHB4F193hLh3tTNBhl/5lhMrJSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRwKb9Tkl3Ht4p3c8qHnelvEvLfMB8GA1UdIwQY
MBaAFAgeDFRCW/GAm2zZypAzVbb2A3DMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0I0TVZFSmI4WUNiYk5uS2tETlZ0dllEY013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOWMzNmQtZTUyNi00MjhjLTllZDct
M2ExNzc1NGM4YmMwLzEvQ0I0TVZFSmI4WUNiYk5uS2tETlZ0dllEY013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOWMzNmQtZTUyNi00MjhjLTllZDctM2ExNzc1NGM4YmMw
LzEvQ0I0TVZFSmI4WUNiYk5uS2tETlZ0dllEY013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfC5GATQ
JAdaznSBMKXaZ+pBbhbrF4BB65rtLz8NlgJLgPHh8bJ8F7XVqYyhx10gYfFn+6mq
jv0y35iMkTIyryOxrhU5k7slgonGSPhIvdyNELBFTwRAgjIBieSlI/RMlF/02QJT
p9itTe5kllVKzB5fPz3vMK+mv1r7fS3Ko7fKF8xQdIodkE6L1AQXlZiI9GJk2ExD
KgFFfS0Kb4i8U8RNs9fQwd9UePECoa3hRS5NmubB6oeSb93ShrMHkn7B2snQmgRz
2FiwfJyMah1zlWHo0577YlDN2s8ddul01W/EBUHmd8IwMsLsvpgpRCvpSOqkIneH
GheB/kOY0cSOZA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:20 2026 by rpki-client