
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: gM7sg53JfDUodW3vxKn0/QIrATfaR4H/3xP0gX+OSjU=
Subject key identifier: FF:A1:3F:9D:0F:AC:E9:70:F6:75:EE:32:E9:12:02:F8:54:0F:E7:5E
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 019F916CA980287CEFF481DA1F8686474CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0ACF
Signing time: Fri 24 Jul 2026 00:00:45 +0000
Manifest this update: Fri 24 Jul 2026 00:00:45 +0000
Manifest next update: Sat 25 Jul 2026 00:00:45 +0000
Files and hashes: 1: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: c/xAP+2oUwHbg+kLCNPL/Z12AbU4sQE6CC/VAzMP5Zo=)
2: u7z3f5MyS6Pn44Y8ceWPcFJRqYE.roa (hash: wWTcWByT+kygfV9+kd/6R30QexArvjCPKfIUysPXkgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:a9:80:28:7c:ef:f4:81:da:1f:86:86:47:4c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Jul 24 00:00:45 2026 GMT
Not After : Jul 25 00:00:45 2026 GMT
Subject: CN=ffa13f9d0face970f675ee32e91202f8540fe75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:4e:c6:f4:97:69:e0:0b:45:45:1e:24:bc:
69:d1:55:7d:78:26:e3:ab:b8:42:4c:00:c8:28:6c:
ae:18:8a:bb:9f:48:75:9d:49:6e:51:d8:df:ef:fc:
45:70:4f:80:a4:ab:de:93:29:ed:bb:00:4d:69:0c:
80:91:99:ed:7a:ee:2b:6c:0b:2a:51:72:39:18:dd:
a8:bb:c2:8d:74:01:e8:19:5e:56:52:02:fe:14:64:
ad:75:bc:c3:fa:b9:54:82:cc:df:c6:75:5a:e4:0a:
28:40:98:09:c4:6e:2e:99:46:4f:88:38:80:66:f7:
32:b1:68:5b:e2:ef:76:66:f9:4b:ab:17:2b:43:9f:
38:ef:e5:24:fc:4c:3c:b9:f5:7d:e5:39:0d:22:3b:
e7:e6:26:5c:63:4c:bf:8c:28:51:d8:8b:5f:92:80:
db:76:80:97:77:d1:b5:c8:1d:53:cd:28:63:78:64:
b1:14:9e:67:23:d8:3f:fe:83:66:d1:1b:db:96:f8:
90:cb:76:a6:6e:cc:88:69:08:3c:7b:a4:f9:32:fb:
b3:ec:78:08:5b:a4:cd:0d:a2:2b:64:8c:b3:85:c9:
82:3b:ce:92:8f:53:87:a1:01:e6:4a:6a:48:eb:ad:
96:7e:e2:5a:17:15:84:8f:8e:2f:ce:62:8c:33:e2:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A1:3F:9D:0F:AC:E9:70:F6:75:EE:32:E9:12:02:F8:54:0F:E7:5E
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5d:4c:0d:08:d5:0f:45:70:fd:ea:cd:bb:37:e4:12:24:a1:
df:e2:f6:b0:93:8d:69:89:4a:96:9e:fb:da:b2:93:8e:11:7a:
dd:d7:6b:d2:a1:73:86:82:95:10:41:b5:77:c8:5c:1c:08:37:
be:87:ee:e9:c4:fb:04:4f:f3:68:6c:8e:a2:00:f7:4d:fc:99:
b5:dd:97:61:e3:6f:02:2d:c0:87:38:81:7f:fd:a0:18:b0:8d:
87:13:2a:94:e6:06:b4:c3:5d:ff:8d:5e:b6:f8:5c:ca:76:44:
3e:ab:48:63:37:39:6b:f0:84:b9:8a:9a:f9:32:7c:9d:4a:d2:
ac:ec:39:ac:12:b2:7b:80:bb:af:5d:45:fd:29:6a:af:58:9c:
61:9c:16:61:ed:29:bb:73:8a:33:64:49:4b:68:b5:54:a2:fc:
ed:2b:90:07:b8:d3:2c:d9:61:8a:79:65:54:52:37:a8:50:c2:
8d:74:99:1e:13:6b:4d:87:9f:a8:fd:55:9b:46:01:b5:9b:89:
57:8c:f7:9d:9b:54:11:56:82:65:38:73:8e:5e:1d:98:2d:35:
9d:95:25:60:9b:1f:a0:30:54:ee:d1:08:8c:e2:a6:f4:10:aa:
a9:91:a8:18:e4:60:5a:bd:64:6e:da:2d:b3:a5:fe:5a:17:19:
58:bd:bc:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbKmAKHzv9IHaH4aGR0y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1
NWQxNGYwHhcNMjYwNzI0MDAwMDQ1WhcNMjYwNzI1MDAwMDQ1WjAzMTEwLwYDVQQD
EyhmZmExM2Y5ZDBmYWNlOTcwZjY3NWVlMzJlOTEyMDJmODU0MGZlNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUpOxvSXaeALRUUeJLxp0VV9eCbj
q7hCTADIKGyuGIq7n0h1nUluUdjf7/xFcE+ApKvekyntuwBNaQyAkZnteu4rbAsq
UXI5GN2ou8KNdAHoGV5WUgL+FGStdbzD+rlUgszfxnVa5AooQJgJxG4umUZPiDiA
ZvcysWhb4u92ZvlLqxcrQ5847+Uk/Ew8ufV95TkNIjvn5iZcY0y/jChR2ItfkoDb
doCXd9G1yB1TzShjeGSxFJ5nI9g//oNm0RvblviQy3ambsyIaQg8e6T5Mvuz7HgI
W6TNDaIrZIyzhcmCO86Sj1OHoQHmSmpI662WfuJaFxWEj44vzmKMM+KZrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+hP50PrOlw9nXuMukSAvhUD+deMB8GA1UdIwQY
MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt
MmIyYThiYTYxMmZkLzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk
LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm11MDQjV
D0Vw/erNuzfkEiSh3+L2sJONaYlKlp772rKTjhF63ddr0qFzhoKVEEG1d8hcHAg3
vofu6cT7BE/zaGyOogD3TfyZtd2XYeNvAi3AhziBf/2gGLCNhxMqlOYGtMNd/41e
tvhcynZEPqtIYzc5a/CEuYqa+TJ8nUrSrOw5rBKye4C7r11F/Slqr1icYZwWYe0p
u3OKM2RJS2i1VKL87SuQB7jTLNlhinllVFI3qFDCjXSZHhNrTYefqP1Vm0YBtZuJ
V4z3nZtUEVaCZThzjl4dmC01nZUlYJsfoDBU7tEIjOKm9BCqqZGoGORgWr1kbtot
s6X+WhcZWL28ag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:40 2026 by rpki-client