Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: H/PWXc2fM+rB33LCZg/2LrY2njbeGNxR+tShh3e6Qbs=
Subject key identifier: 71:23:C7:AD:BA:DE:93:CA:E2:5F:98:3E:3B:A9:00:4C:F1:0A:B6:31
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019F8EA27AAD6EF720B4044F50141C623214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0D3D
Signing time: Thu 23 Jul 2026 11:00:40 +0000
Manifest this update: Thu 23 Jul 2026 11:00:40 +0000
Manifest next update: Fri 24 Jul 2026 11:00:40 +0000
Files and hashes: 1: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: iBGPyDtr1S+LLy5kxFxSb0Ru0tttkDmqTXQ1PZgQ7a0=)
2: Lb4QYGzxLdlZHywuLvkaZr8MbV8.asa (hash: djJmDLE7dgkUswvUuZUlXxmQuuCob6by6G/MEdD7z7s=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:7a:ad:6e:f7:20:b4:04:4f:50:14:1c:62:32:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Jul 23 11:00:40 2026 GMT
Not After : Jul 24 11:00:40 2026 GMT
Subject: CN=7123c7adbade93cae25f983e3ba9004cf10ab631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:a9:d8:3c:7f:f2:aa:13:f1:13:61:6f:9f:
3f:86:74:d9:e0:46:84:20:56:96:50:cf:41:3a:0b:
ba:c7:e7:19:bd:7f:c5:5b:ec:b3:c4:89:b8:79:2f:
57:0e:d0:cb:d5:fe:03:25:50:b7:7d:5b:2e:39:ad:
68:82:b1:3a:48:78:f9:9d:b2:35:c3:19:b9:05:22:
93:94:2d:0a:35:e8:27:70:68:b1:2b:8e:bd:af:4b:
22:50:0a:7a:2f:18:31:b2:d7:3a:74:96:66:75:a6:
da:54:57:89:55:a0:18:ee:f2:e3:83:4f:b8:a0:d1:
2e:5f:73:f5:2c:20:e1:cf:65:40:40:fd:8a:b6:02:
4b:36:72:e2:c3:ed:39:f5:ef:b0:46:10:88:c1:34:
7d:91:26:72:d9:47:89:2e:8a:6f:09:24:22:54:67:
ee:ee:e1:67:f3:31:e7:9a:4c:c7:6b:e1:9c:79:01:
29:a1:de:23:60:34:a6:9c:d6:ae:6c:fb:c3:5e:72:
57:83:88:46:2a:25:71:ce:ee:5b:4f:1d:4a:34:ff:
6d:91:5e:f1:7b:cf:3b:9e:5f:98:70:c0:ba:56:3e:
12:c6:ea:ca:b4:83:ed:e1:03:6c:8a:60:79:75:81:
b7:ab:2a:20:0a:d9:ac:28:07:b1:cf:a8:31:88:0d:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:23:C7:AD:BA:DE:93:CA:E2:5F:98:3E:3B:A9:00:4C:F1:0A:B6:31
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6a:38:91:25:c4:16:ce:e1:04:d2:7e:28:93:15:a2:49:49:
54:da:95:a8:4b:78:11:3d:81:5e:f2:8f:1e:49:5f:2f:f2:b8:
f6:a9:4b:7d:e7:9f:f7:51:65:7c:4f:5d:31:71:88:d4:b1:b5:
50:33:9d:34:6c:1d:27:13:30:e3:ab:96:da:60:98:68:d1:65:
70:98:6e:56:9d:53:8c:de:75:e6:41:d5:55:ab:f2:a4:c2:00:
59:0a:20:73:0c:9c:e8:e4:64:eb:27:74:35:07:d1:25:2a:8e:
cc:ee:a6:b8:4b:be:42:42:3f:e9:ee:03:bc:1d:30:c7:fd:8e:
fe:8d:6e:68:de:3d:ff:41:04:21:8f:fb:2e:91:00:87:fe:99:
93:7c:11:cd:c1:70:bf:be:99:57:5a:25:a3:6b:80:16:e6:1e:
3d:4b:7c:98:5c:df:8f:b3:a2:fb:fd:cb:01:e7:7a:44:50:30:
74:71:68:e9:9f:cd:ff:3e:f3:5f:16:17:af:80:41:c6:86:fa:
4f:3c:65:83:42:b6:23:f9:3a:7d:cb:51:d8:a8:50:a6:77:1e:
67:40:a1:ca:0a:94:7b:29:c3:72:0e:0a:4c:70:76:57:a3:43:
e1:1e:21:3b:1f:da:6c:33:5e:7c:8f:40:2b:89:14:20:68:2d:
3e:c7:22:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OonqtbvcgtARPUBQcYjIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTZjMDNjZmFmZmUxMzRjN2JlZGE0ODg2YWI4YjA5Y2Y0
NWZiYzQwHhcNMjYwNzIzMTEwMDQwWhcNMjYwNzI0MTEwMDQwWjAzMTEwLwYDVQQD
Eyg3MTIzYzdhZGJhZGU5M2NhZTI1Zjk4M2UzYmE5MDA0Y2YxMGFiNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJqp2Dx/8qoT8RNhb58/hnTZ4EaE
IFaWUM9BOgu6x+cZvX/FW+yzxIm4eS9XDtDL1f4DJVC3fVsuOa1ogrE6SHj5nbI1
wxm5BSKTlC0KNegncGixK469r0siUAp6Lxgxstc6dJZmdabaVFeJVaAY7vLjg0+4
oNEuX3P1LCDhz2VAQP2KtgJLNnLiw+059e+wRhCIwTR9kSZy2UeJLopvCSQiVGfu
7uFn8zHnmkzHa+GceQEpod4jYDSmnNaubPvDXnJXg4hGKiVxzu5bTx1KNP9tkV7x
e887nl+YcMC6Vj4SxurKtIPt4QNsimB5dYG3qyogCtmsKAexz6gxiA1VoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEjx6263pPK4l+YPjupAEzxCrYxMB8GA1UdIwQY
MBaAFOMWwDz6/+E0x77aSIariwnPRfvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MTQwMmUtZWQyOC00YTIxLTg0ZTIt
ZTRkNjRkY2E2N2FjLzEvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85MTQwMmUtZWQyOC00YTIxLTg0ZTItZTRkNjRkY2E2N2Fj
LzEvNHhiQVBQcl80VFRIdnRwSWhxdUxDYzlGLThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGo4kSXE
Fs7hBNJ+KJMVoklJVNqVqEt4ET2BXvKPHklfL/K49qlLfeef91FlfE9dMXGI1LG1
UDOdNGwdJxMw46uW2mCYaNFlcJhuVp1TjN515kHVVavypMIAWQogcwyc6ORk6yd0
NQfRJSqOzO6muEu+QkI/6e4DvB0wx/2O/o1uaN49/0EEIY/7LpEAh/6Zk3wRzcFw
v76ZV1olo2uAFuYePUt8mFzfj7Oi+/3LAed6RFAwdHFo6Z/N/z7zXxYXr4BBxob6
Tzxlg0K2I/k6fctR2KhQpnceZ0ChygqUeynDcg4KTHB2V6ND4R4hOx/abDNefI9A
K4kUIGgtPscirw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:26 2026 by rpki-client