Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
File: I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft (raw, json)
Hash identifier: xLaxWGqa2DWyf1io8Qwb5xVBJqK9jjvhuPI4WpndhqE=
Subject key identifier: 29:4D:0F:52:84:41:20:A3:0A:88:8B:B7:6E:E6:C7:46:B8:4A:4D:25
Authority key identifier: 23:8A:C2:B0:77:BB:72:AE:95:50:6F:1B:7D:D7:92:2C:86:93:28:49
Certificate issuer: /CN=238ac2b077bb72ae95506f1b7dd7922c86932849
Certificate serial: 019F954916F05FEDDFEF954640064D193DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:22 +0000
Manifest this update: Fri 24 Jul 2026 18:00:22 +0000
Manifest next update: Sat 25 Jul 2026 18:00:22 +0000
Files and hashes: 1: I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl (hash: 43GAVkQgpQMNmL/aHMM0ZzMl4BztwiaDc+3kX/C1utg=)
2: ZLiU1atI_HJAqv1dEuEca2LiYK4.roa (hash: wnwFkyBm5yBNEm5NFKbYxok77hCkil5I8o3VMhwKHG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:16:f0:5f:ed:df:ef:95:46:40:06:4d:19:3d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238ac2b077bb72ae95506f1b7dd7922c86932849
Validity
Not Before: Jul 24 18:00:22 2026 GMT
Not After : Jul 25 18:00:22 2026 GMT
Subject: CN=294d0f52844120a30a888bb76ee6c746b84a4d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:7f:8d:fe:b9:b3:50:70:a5:c4:34:f3:ab:
08:04:a6:5e:32:8f:ad:ce:c7:21:f3:35:f8:01:34:
2c:41:29:05:0f:08:4e:dc:e1:72:01:75:7f:62:63:
c7:2b:6d:f0:2e:7f:93:15:eb:66:11:12:1e:3c:db:
d4:33:f6:d7:51:07:cd:e1:e4:d7:b3:76:de:11:77:
0b:0a:25:f7:3b:26:26:b3:9e:b7:a0:d1:57:fb:07:
77:da:79:82:4e:54:42:19:ea:da:f8:88:e8:3f:fb:
4b:5c:07:a2:ba:91:94:c6:10:59:2b:3c:8b:1e:b0:
69:5b:fb:26:5d:f4:16:18:0c:3c:61:0b:da:6c:0c:
04:8c:28:95:d9:78:42:fe:db:ad:62:dd:f1:94:8e:
c3:b0:e3:3a:85:d5:9f:d2:c5:bd:40:f3:e3:3b:07:
93:b6:ee:2a:98:e6:fa:66:42:91:c2:ab:61:ad:59:
a6:4c:4b:b7:58:4f:5b:1f:01:3f:b9:c1:12:2f:e2:
2c:ab:b2:bc:ab:48:d0:f7:83:a1:6f:33:d3:0b:16:
73:8c:ec:45:4a:e3:5c:6f:48:d4:21:8d:92:9e:cc:
a1:a8:9c:a8:5a:1f:46:c2:dc:f7:03:1a:16:1c:de:
0e:46:eb:a5:56:54:5d:e9:bd:ca:31:92:69:fb:1a:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4D:0F:52:84:41:20:A3:0A:88:8B:B7:6E:E6:C7:46:B8:4A:4D:25
X509v3 Authority Key Identifier:
keyid:23:8A:C2:B0:77:BB:72:AE:95:50:6F:1B:7D:D7:92:2C:86:93:28:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4rCsHe7cq6VUG8bfdeSLIaTKEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/I4rCsHe7cq6VUG8bfdeSLIaTKEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f2:cd:63:c8:12:4d:3d:49:1b:68:a4:ec:82:c7:7e:62:3b:
3a:0a:69:be:94:65:f7:4e:cf:31:21:9d:85:72:63:bb:2d:10:
e2:0f:da:59:3a:87:82:55:34:ea:fe:f6:20:b2:70:63:14:97:
d0:42:95:94:ba:57:a1:e7:63:2e:a6:f3:1f:85:29:f2:b7:fb:
bb:92:2a:4d:40:c7:e4:be:d2:02:5b:25:f9:9f:86:14:a7:bc:
62:6b:eb:c1:74:e8:bf:4a:60:c7:40:0b:62:a8:cd:22:5f:28:
47:84:cd:66:04:7a:9c:ea:e4:fb:51:da:ea:65:3f:26:3a:57:
8d:05:45:27:84:2c:48:ca:19:66:ba:71:18:ce:af:23:62:de:
08:d7:72:d1:b7:8b:dc:e1:47:07:eb:55:d6:23:d4:3a:4e:c8:
a1:ef:4c:c5:b4:11:4a:14:d6:ee:de:c3:0c:02:63:3d:0a:23:
57:00:ea:bc:4d:dc:52:aa:0c:60:3b:90:9a:21:4b:57:23:75:
ed:bc:0a:c6:f0:13:86:23:6c:63:ca:69:80:51:d3:9d:8c:bf:
88:a2:1d:9e:ee:b5:5a:19:41:2a:e0:bf:34:56:60:f1:1a:3d:
ec:b1:f6:6d:37:47:ce:c7:03:fc:4e:8f:28:67:6f:2c:9b:a6:
81:39:fb:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSRbwX+3f75VGQAZNGT3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOGFjMmIwNzdiYjcyYWU5NTUwNmYxYjdkZDc5MjJjODY5
MzI4NDkwHhcNMjYwNzI0MTgwMDIyWhcNMjYwNzI1MTgwMDIyWjAzMTEwLwYDVQQD
EygyOTRkMGY1Mjg0NDEyMGEzMGE4ODhiYjc2ZWU2Yzc0NmI4NGE0ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq59/jf65s1BwpcQ086sIBKZeMo+t
zsch8zX4ATQsQSkFDwhO3OFyAXV/YmPHK23wLn+TFetmERIePNvUM/bXUQfN4eTX
s3beEXcLCiX3OyYms563oNFX+wd32nmCTlRCGera+IjoP/tLXAeiupGUxhBZKzyL
HrBpW/smXfQWGAw8YQvabAwEjCiV2XhC/tutYt3xlI7DsOM6hdWf0sW9QPPjOweT
tu4qmOb6ZkKRwqthrVmmTEu3WE9bHwE/ucESL+Isq7K8q0jQ94OhbzPTCxZzjOxF
SuNcb0jUIY2SnsyhqJyoWh9Gwtz3AxoWHN4ORuulVlRd6b3KMZJp+xovqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClND1KEQSCjCoiLt27mx0a4Sk0lMB8GA1UdIwQY
MBaAFCOKwrB3u3KulVBvG33XkiyGkyhJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRyQ3NIZTdjcTZWVUc4YmZkZVNMSWFUS0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84NzMxMmMtNjljNC00ODEzLWI3NDAt
MWM5NjY3NzMwNTM0LzEvSTRyQ3NIZTdjcTZWVUc4YmZkZVNMSWFUS0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS84NzMxMmMtNjljNC00ODEzLWI3NDAtMWM5NjY3NzMwNTM0
LzEvSTRyQ3NIZTdjcTZWVUc4YmZkZVNMSWFUS0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfLNY8gS
TT1JG2ik7ILHfmI7OgppvpRl907PMSGdhXJjuy0Q4g/aWTqHglU06v72ILJwYxSX
0EKVlLpXoedjLqbzH4Up8rf7u5IqTUDH5L7SAlsl+Z+GFKe8YmvrwXTov0pgx0AL
YqjNIl8oR4TNZgR6nOrk+1Ha6mU/JjpXjQVFJ4QsSMoZZrpxGM6vI2LeCNdy0beL
3OFHB+tV1iPUOk7Ioe9MxbQRShTW7t7DDAJjPQojVwDqvE3cUqoMYDuQmiFLVyN1
7bwKxvAThiNsY8ppgFHTnYy/iKIdnu61WhlBKuC/NFZg8Ro97LH2bTdHzscD/E6P
KGdvLJumgTn7tg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:53:02 2026 by rpki-client