
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: TdcXlDvXxEBgn2Q7Ssp0AgXCpP2o4j5SuEzblxpvqBs=
Subject key identifier: AC:E7:9F:E5:D2:E3:2B:12:76:4F:3A:76:B2:80:35:F1:A5:A9:6C:B7
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019F8F7E3E3A621E1672C68DF93A16F257FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 15:00:42 +0000
Manifest this update: Thu 23 Jul 2026 15:00:42 +0000
Manifest next update: Fri 24 Jul 2026 15:00:42 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: +l2fKigUpaX6+z2Jbql0T9jF2edrieuomNCie6u4XSY=)
2: oeyWMuCksF7xQUnt231_k5Ft4iQ.roa (hash: 3akcDMeEYVFhWF0jBJrON6h7BHKn5EQXutPMsrDghQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:3e:3a:62:1e:16:72:c6:8d:f9:3a:16:f2:57:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jul 23 15:00:42 2026 GMT
Not After : Jul 24 15:00:42 2026 GMT
Subject: CN=ace79fe5d2e32b12764f3a76b28035f1a5a96cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:cf:7e:a5:86:a8:b2:08:b1:60:20:6f:5a:
92:95:6e:29:59:e2:28:87:f6:01:cf:57:d9:2d:30:
8d:a2:36:77:5b:af:47:a9:a7:72:b3:43:be:80:90:
09:ff:57:39:9d:2f:e3:94:af:b4:dd:4a:16:74:0a:
c6:f8:96:5c:f9:6f:35:76:30:13:90:18:75:f0:19:
8e:fe:af:34:46:0f:50:34:6d:37:0a:79:c7:ac:29:
fc:d6:7c:e0:18:3f:2d:d1:72:28:62:4f:7d:9a:b9:
23:cd:2d:07:ce:2c:58:f6:ac:b0:35:f0:39:bc:15:
39:f5:78:d8:62:f8:08:37:e3:58:8c:22:64:20:e0:
b0:57:74:f0:41:8b:4c:60:04:33:f5:d5:3c:1f:f6:
a2:33:32:38:9b:73:19:94:5d:ca:98:07:ba:75:55:
9e:8f:34:02:c7:38:93:c9:ad:82:14:42:6e:06:68:
a8:73:1f:70:ff:49:95:c5:1a:43:ed:55:92:48:a1:
7a:11:49:3d:ab:d2:30:62:d9:d0:47:81:4c:72:48:
1e:01:f5:42:85:20:33:0f:59:7a:32:20:69:43:b3:
a5:80:bb:ba:9b:87:f5:b3:07:4a:17:eb:cd:ca:8f:
20:77:77:69:b5:04:4f:7c:02:d5:ff:dd:0b:c7:58:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:9F:E5:D2:E3:2B:12:76:4F:3A:76:B2:80:35:F1:A5:A9:6C:B7
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ea:c3:ff:f8:a5:e9:04:1d:6a:ca:80:1e:37:08:26:cb:92:
6b:cc:e5:39:01:8c:9c:ab:72:2f:94:8a:f4:b1:7d:06:12:5d:
1e:81:95:ff:3e:46:40:f4:56:25:89:48:9a:50:2b:60:6d:05:
5b:ec:5a:bd:f0:27:9c:a7:8b:5d:3a:4b:73:75:9b:90:96:f5:
5b:c6:dd:04:99:80:6d:b8:26:ab:0c:1e:ad:35:6b:f0:9a:d3:
13:46:58:dc:90:47:82:e4:11:21:98:6a:d4:4f:44:2b:24:d8:
28:dd:92:75:3d:f5:c7:20:6f:1f:6b:56:4d:a0:50:2b:e4:fe:
cd:93:30:67:95:36:86:7c:ce:4f:3a:f8:08:ec:f2:f2:df:34:
32:ba:f8:f7:56:03:82:15:e3:20:9d:5e:9c:43:9a:be:fe:b3:
66:8e:28:9f:a7:82:6d:ab:75:5c:8e:f8:bc:d7:17:4d:05:5a:
26:4c:fa:71:91:ce:57:09:ab:90:3c:ee:5a:75:60:ed:15:53:
71:7f:56:c2:a6:96:09:94:2d:36:0c:6c:2d:2d:24:42:71:62:
27:05:e2:22:7e:2f:3a:c1:30:74:be:f0:7e:85:f4:a6:f2:f5:
4b:49:fa:2e:50:56:be:ee:67:5b:bc:28:ac:c3:21:23:ee:a1:
22:02:ab:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfj46Yh4WcsaN+ToW8lf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWNiYjg4ZDJiMWE4OTY2NTg1MDY3Nzg2NjJlNzVjNzMy
YTY3ZTcwHhcNMjYwNzIzMTUwMDQyWhcNMjYwNzI0MTUwMDQyWjAzMTEwLwYDVQQD
EyhhY2U3OWZlNWQyZTMyYjEyNzY0ZjNhNzZiMjgwMzVmMWE1YTk2Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQrPfqWGqLIIsWAgb1qSlW4pWeIo
h/YBz1fZLTCNojZ3W69Hqadys0O+gJAJ/1c5nS/jlK+03UoWdArG+JZc+W81djAT
kBh18BmO/q80Rg9QNG03CnnHrCn81nzgGD8t0XIoYk99mrkjzS0HzixY9qywNfA5
vBU59XjYYvgIN+NYjCJkIOCwV3TwQYtMYAQz9dU8H/aiMzI4m3MZlF3KmAe6dVWe
jzQCxziTya2CFEJuBmiocx9w/0mVxRpD7VWSSKF6EUk9q9IwYtnQR4FMckgeAfVC
hSAzD1l6MiBpQ7OlgLu6m4f1swdKF+vNyo8gd3dptQRPfALV/90Lx1iXXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKznn+XS4ysSdk86drKANfGlqWy3MB8GA1UdIwQY
MBaAFOGcu4jSsaiWZYUGd4Zi51xzKmfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYt
ZWZlYTYzZDA2ZjgwLzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYtZWZlYTYzZDA2Zjgw
LzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADerD//il
6QQdasqAHjcIJsuSa8zlOQGMnKtyL5SK9LF9BhJdHoGV/z5GQPRWJYlImlArYG0F
W+xavfAnnKeLXTpLc3WbkJb1W8bdBJmAbbgmqwwerTVr8JrTE0ZY3JBHguQRIZhq
1E9EKyTYKN2SdT31xyBvH2tWTaBQK+T+zZMwZ5U2hnzOTzr4COzy8t80Mrr491YD
ghXjIJ1enEOavv6zZo4on6eCbat1XI74vNcXTQVaJkz6cZHOVwmrkDzuWnVg7RVT
cX9WwqaWCZQtNgxsLS0kQnFiJwXiIn4vOsEwdL7wfoX0pvL1S0n6LlBWvu5nW7wo
rMMhI+6hIgKruQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:22 2026 by rpki-client