Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: +T7m8HBNiW4ZxoZT5XSCS+Lg3DPO7q1Pc3FzH2OwwOg=
Subject key identifier: 15:E4:E6:68:4C:8F:79:23:A3:B5:8C:6E:86:DD:ED:A1:CA:3A:58:E2
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 019F946DF98360B1708A63CD0226F51945CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 14:01:03 +0000
Manifest this update: Fri 24 Jul 2026 14:01:03 +0000
Manifest next update: Sat 25 Jul 2026 14:01:03 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: 9B/S/ew86e+Z08LjL9RHFl46p0LwBQbLR7qflVoE0Ew=)
2: QGU4wxB9l82WtX2GlBPNcSFE_oI.roa (hash: lXWG4OK0FlcLIlRlfiL6ejBSOQfloGthHWkReJ7gUs4=)
3: oAirDjtYSawIz9t2W1uTMzbfgmg.roa (hash: hcXXhAATQAv1P0WpVCcSM3rmQFyzufHtTmG7E5Wcw3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:f9:83:60:b1:70:8a:63:cd:02:26:f5:19:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Jul 24 14:01:03 2026 GMT
Not After : Jul 25 14:01:03 2026 GMT
Subject: CN=15e4e6684c8f7923a3b58c6e86ddeda1ca3a58e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:f7:a9:88:40:5b:df:25:af:6a:58:47:4b:
a8:66:c2:a9:43:7d:8b:9d:98:36:6d:07:ff:c6:da:
5e:f1:5b:79:fa:c0:20:9f:ec:8b:71:b6:0a:d2:ad:
51:6d:e0:dd:ea:3f:e5:d3:08:89:9a:78:29:18:93:
5e:10:38:d8:d0:4d:4a:1c:5c:22:e5:9d:38:af:6e:
55:fe:7a:a5:02:bd:04:3e:33:44:ac:2f:30:2e:e0:
5a:d9:7c:ea:62:ce:81:6d:06:ce:7e:3c:ea:6c:b4:
ff:63:fe:f3:8e:be:3f:28:de:93:fb:50:bb:ff:23:
03:f2:11:e7:ad:52:99:c9:50:64:9d:78:a0:24:df:
ba:2c:e3:49:03:d8:9a:7d:43:fb:6e:b7:a1:fe:41:
58:bf:77:66:33:02:29:ef:cd:20:00:10:25:8a:89:
98:61:1d:2b:6b:81:02:3d:b3:7b:cb:c1:7d:00:89:
62:0e:6c:f1:4a:17:55:f8:56:a1:76:73:75:83:d2:
1e:9f:30:36:58:ac:19:18:17:4c:a2:f0:82:3e:22:
3a:55:42:0f:c0:86:2b:4d:0a:7f:9a:1a:a4:48:d9:
8d:4f:61:17:c9:19:01:a7:b0:fa:0e:8d:2f:a1:27:
15:ad:bb:e7:f3:84:a9:7d:3c:d2:ef:e9:83:e5:53:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E4:E6:68:4C:8F:79:23:A3:B5:8C:6E:86:DD:ED:A1:CA:3A:58:E2
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7b:bb:12:3d:c6:a0:6d:28:6d:f0:85:8e:5d:7e:77:b7:2b:
6b:0d:df:c0:ff:a5:71:e9:a4:88:ec:da:96:91:59:ca:53:79:
da:4d:b4:0a:fe:7e:51:40:f5:b1:35:d0:9f:fd:d4:81:4c:ea:
dd:e9:22:2a:57:c0:27:a4:99:4b:85:4a:1d:14:91:f3:1a:fb:
f8:81:af:db:d1:70:ad:90:db:f7:f0:72:4a:82:ed:cb:41:eb:
56:bb:7d:a0:ad:c5:1b:0f:59:2d:f3:71:2d:ab:47:60:94:a6:
d4:d2:0c:aa:61:8c:97:1a:1b:8b:66:ff:25:4a:e2:eb:a9:25:
b6:d1:bf:ac:eb:13:f8:bf:0b:f6:46:8e:32:88:c7:3d:e0:57:
ee:b6:18:da:5f:a3:d7:b1:a0:25:3b:b5:35:c4:0b:ce:38:15:
4e:8a:b3:64:bc:5a:f5:e7:f6:b4:37:c6:9b:85:4e:40:16:b6:
4b:fe:2d:15:44:32:b0:0b:93:5a:9e:0a:0f:d6:7d:9a:a8:b7:
56:72:7e:9f:83:c6:a2:27:5f:f3:42:4a:c3:91:ee:63:82:ed:
06:ac:97:94:12:c7:54:5a:ba:5d:cf:d3:3b:bb:fb:89:05:23:
ba:65:ba:2c:df:8d:94:64:0a:49:c3:4c:9e:55:b0:34:9d:f0:
e7:78:20:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UbfmDYLFwimPNAib1GUXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiOGZiMWRlYjA5ZTcyNDI1YjMwOWExNDE0OTE3ZGFmODkz
YmVmNTkwHhcNMjYwNzI0MTQwMTAzWhcNMjYwNzI1MTQwMTAzWjAzMTEwLwYDVQQD
EygxNWU0ZTY2ODRjOGY3OTIzYTNiNThjNmU4NmRkZWRhMWNhM2E1OGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrP3qYhAW98lr2pYR0uoZsKpQ32L
nZg2bQf/xtpe8Vt5+sAgn+yLcbYK0q1RbeDd6j/l0wiJmngpGJNeEDjY0E1KHFwi
5Z04r25V/nqlAr0EPjNErC8wLuBa2XzqYs6BbQbOfjzqbLT/Y/7zjr4/KN6T+1C7
/yMD8hHnrVKZyVBknXigJN+6LONJA9iafUP7breh/kFYv3dmMwIp780gABAliomY
YR0ra4ECPbN7y8F9AIliDmzxShdV+FahdnN1g9IenzA2WKwZGBdMovCCPiI6VUIP
wIYrTQp/mhqkSNmNT2EXyRkBp7D6Do0voScVrbvn84SpfTzS7+mD5VNoYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXk5mhMj3kjo7WMbobd7aHKOljiMB8GA1UdIwQY
MBaAFAuPsd6wnnJCWzCaFBSRfa+JO+9ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2Et
Zjg3ODVhNTgxMDZjLzEvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mYzc2M2ItODNlNi00YmQxLWI5M2EtZjg3ODVhNTgxMDZj
LzEvQzQteDNyQ2Vja0piTUpvVUZKRjlyNGs3NzFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXu7Ej3G
oG0obfCFjl1+d7craw3fwP+lcemkiOzalpFZylN52k20Cv5+UUD1sTXQn/3UgUzq
3ekiKlfAJ6SZS4VKHRSR8xr7+IGv29FwrZDb9/BySoLty0HrVrt9oK3FGw9ZLfNx
LatHYJSm1NIMqmGMlxobi2b/JUri66klttG/rOsT+L8L9kaOMojHPeBX7rYY2l+j
17GgJTu1NcQLzjgVToqzZLxa9ef2tDfGm4VOQBa2S/4tFUQysAuTWp4KD9Z9mqi3
VnJ+n4PGoidf80JKw5HuY4LtBqyXlBLHVFq6Xc/TO7v7iQUjumW6LN+NlGQKScNM
nlWwNJ3w53ggTQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:41:32 2026 by rpki-client