Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: etrStECIHWVLiY/mkpWLMx0sxds/U1O2ZA8JZ2a3ffs=
Subject key identifier: 7A:5F:FA:4E:34:AC:C1:AD:BC:12:AA:50:4A:4A:FA:8D:E0:86:42:82
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019F90915CD83A1C96E7EA26F1BA37DDB813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 20:01:13 +0000
Manifest this update: Thu 23 Jul 2026 20:01:13 +0000
Manifest next update: Fri 24 Jul 2026 20:01:13 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: FxXl1Wh3rSScKl2LjCME5TAG3n7cJnY5tZH0ms4JhLA=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:5c:d8:3a:1c:96:e7:ea:26:f1:ba:37:dd:b8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Jul 23 20:01:13 2026 GMT
Not After : Jul 24 20:01:13 2026 GMT
Subject: CN=7a5ffa4e34acc1adbc12aa504a4afa8de0864282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:fc:f5:c2:5c:ae:29:57:0e:52:ee:81:f1:
31:77:a4:cc:4d:f8:76:ee:2b:7b:ba:72:ce:2e:85:
c5:97:df:02:ff:84:b6:4c:95:03:b1:93:82:9d:93:
76:13:b7:1d:42:5a:4f:c4:40:a9:82:45:44:d6:38:
5d:36:24:9d:fa:82:a2:49:9a:9a:9e:8f:97:01:39:
61:32:7f:6b:1a:6a:c2:4d:9f:47:45:b5:da:ea:35:
e3:85:a9:b4:b2:92:3d:10:5e:e7:0f:66:a0:b1:b4:
3b:4d:64:b4:02:48:e5:bf:08:6a:59:12:35:4d:70:
23:24:de:57:11:c6:33:16:ca:05:b4:70:75:19:5e:
8d:c8:96:38:a8:55:b8:73:02:11:8f:3f:33:25:7d:
23:b5:fc:26:fa:2c:33:67:23:79:af:dc:2a:ae:ac:
f5:70:1c:42:1f:93:83:c1:60:08:1d:e4:af:5e:a7:
cc:44:c5:ec:ce:4c:2c:56:85:ab:2f:e3:be:0c:a9:
5c:37:6a:ed:88:77:bd:dc:32:0d:35:94:04:43:b9:
7d:9b:3a:17:5d:90:17:5c:a1:6a:81:1c:1e:bd:ec:
51:af:0e:17:80:a2:99:cf:48:19:3f:dd:5f:fc:f2:
8c:0a:a3:1d:34:10:b8:61:26:3a:d4:25:f7:c8:ed:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5F:FA:4E:34:AC:C1:AD:BC:12:AA:50:4A:4A:FA:8D:E0:86:42:82
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:66:d5:3a:bd:7c:c6:a0:18:b9:61:38:95:a5:03:7f:e5:4e:
d3:5f:19:79:d0:9d:0f:bb:cc:25:cb:f1:07:26:97:e7:ff:c6:
73:64:ca:77:0a:4a:4f:ee:7d:17:b2:f5:33:85:f1:2a:20:bd:
63:3c:21:3b:62:a8:a1:14:db:73:bd:7a:da:aa:9f:0b:99:54:
e9:6d:bf:86:62:7f:bc:a1:86:5b:11:f9:7d:64:64:fe:d3:21:
94:e9:98:67:68:ca:9c:0c:3f:2c:96:64:15:66:c1:bb:e3:b9:
96:42:db:e7:8f:f7:98:0b:3f:37:f9:4f:ae:d7:06:71:e4:19:
91:12:5a:5f:32:65:9e:36:d4:9c:ba:76:6f:e8:33:58:0a:db:
ae:80:07:aa:de:df:1e:91:7d:e6:8d:79:69:1a:c6:d3:26:f4:
00:05:c2:1f:cd:87:95:7b:bc:ed:21:ba:a5:f8:38:71:9d:10:
8b:2c:1c:89:20:3d:bb:62:7d:3d:9f:2b:aa:9d:94:8e:9b:56:
39:94:80:c8:2a:21:24:f7:71:b9:5a:27:7c:b2:54:82:00:8d:
72:91:6a:51:50:f1:d0:51:2f:80:4a:d0:d8:72:95:1e:6f:6b:
67:8b:97:76:97:56:1e:32:f7:30:ea:9e:ab:d0:d7:07:02:8a:
54:f8:9b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkVzYOhyW5+om8bo33bgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYmFmOTBlZDEzZDE3NTQ1MmNmNWU1YTE2MzJhNzk0YmYx
ZjRjOWEwHhcNMjYwNzIzMjAwMTEzWhcNMjYwNzI0MjAwMTEzWjAzMTEwLwYDVQQD
Eyg3YTVmZmE0ZTM0YWNjMWFkYmMxMmFhNTA0YTRhZmE4ZGUwODY0MjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvf89cJcrilXDlLugfExd6TMTfh2
7it7unLOLoXFl98C/4S2TJUDsZOCnZN2E7cdQlpPxECpgkVE1jhdNiSd+oKiSZqa
no+XATlhMn9rGmrCTZ9HRbXa6jXjham0spI9EF7nD2agsbQ7TWS0AkjlvwhqWRI1
TXAjJN5XEcYzFsoFtHB1GV6NyJY4qFW4cwIRjz8zJX0jtfwm+iwzZyN5r9wqrqz1
cBxCH5ODwWAIHeSvXqfMRMXszkwsVoWrL+O+DKlcN2rtiHe93DINNZQEQ7l9mzoX
XZAXXKFqgRwevexRrw4XgKKZz0gZP91f/PKMCqMdNBC4YSY61CX3yO0zbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpf+k40rMGtvBKqUEpK+o3ghkKCMB8GA1UdIwQY
MBaAFOG6+Q7RPRdUUs9eWhYyp5S/H0yaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYt
ZDUyZmRjOWU4Mjg3LzEvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lNmVmY2YtZTVkOS00OWYwLWIxMWYtZDUyZmRjOWU4Mjg3
LzEvNGJyNUR0RTlGMVJTejE1YUZqS25sTDhmVEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGbVOr18
xqAYuWE4laUDf+VO018ZedCdD7vMJcvxByaX5//Gc2TKdwpKT+59F7L1M4XxKiC9
YzwhO2KooRTbc7162qqfC5lU6W2/hmJ/vKGGWxH5fWRk/tMhlOmYZ2jKnAw/LJZk
FWbBu+O5lkLb54/3mAs/N/lPrtcGceQZkRJaXzJlnjbUnLp2b+gzWArbroAHqt7f
HpF95o15aRrG0yb0AAXCH82HlXu87SG6pfg4cZ0QiywciSA9u2J9PZ8rqp2UjptW
OZSAyCohJPdxuVonfLJUggCNcpFqUVDx0FEvgErQ2HKVHm9rZ4uXdpdWHjL3MOqe
q9DXBwKKVPibug==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:04:01 2026 by rpki-client