Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: sy6Y+eY2gHUedRSCmUCK16yKGADvUIS2qBGminQYAw4=
Subject key identifier: B5:99:DC:C2:09:76:DC:4B:16:23:B5:CA:D1:DD:42:46:0F:1E:90:24
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019F92B63455EB9EFCA4C1D9BBD80E676A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 06:00:42 +0000
Manifest this update: Fri 24 Jul 2026 06:00:42 +0000
Manifest next update: Sat 25 Jul 2026 06:00:42 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: MiZxD4qHLUeC6WKsDrDWdI7UezAWO7ngTG1BIzMnmB0=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:34:55:eb:9e:fc:a4:c1:d9:bb:d8:0e:67:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Jul 24 06:00:42 2026 GMT
Not After : Jul 25 06:00:42 2026 GMT
Subject: CN=b599dcc20976dc4b1623b5cad1dd42460f1e9024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:78:a0:e8:07:cc:f6:97:9e:f7:36:4f:08:
62:94:00:e2:5c:7c:d6:c8:e3:fe:ff:6f:55:54:43:
7d:df:51:5b:08:94:e5:5c:34:31:55:98:5f:e7:c3:
75:f0:c6:26:36:55:2d:d0:e5:4d:18:d8:82:82:b0:
7b:18:b4:39:0f:cf:f7:56:1e:99:f2:96:03:bc:fa:
67:3b:6a:ba:59:9d:02:f3:db:2f:a2:01:1d:c1:60:
fa:cf:31:6d:0c:c1:60:c9:6a:8d:3c:06:39:3f:0f:
e0:03:d3:af:94:a2:ec:0f:89:fe:be:b5:e7:7f:bd:
4f:93:c0:cc:54:c0:86:c0:73:b9:db:f0:cf:93:99:
78:04:44:1f:5d:02:51:b6:35:42:5a:1f:22:d1:93:
c0:97:f6:f3:c7:a4:e7:7a:09:44:22:82:66:6a:6d:
32:fc:65:bf:b2:72:57:39:c9:88:cb:da:76:c5:33:
12:3b:bb:ea:78:8e:bb:79:19:ea:48:f8:47:b7:23:
dc:74:f8:7e:7d:03:ce:be:e6:3d:37:39:41:d3:0b:
ec:ff:5e:6a:f7:99:b6:a4:41:01:70:1f:f0:9d:ef:
71:45:64:d1:a1:20:7c:d5:db:04:1d:93:4e:88:23:
1f:60:a4:0b:7a:62:71:16:f0:86:7a:08:4c:91:1b:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:DC:C2:09:76:DC:4B:16:23:B5:CA:D1:DD:42:46:0F:1E:90:24
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:cf:26:0b:0d:4d:db:d0:64:67:2f:94:74:b9:b5:8e:0e:
5b:ea:5c:f9:87:e6:b6:6a:b7:fb:c2:0d:5d:47:e4:a5:b8:b8:
e9:21:cd:d3:3e:21:38:08:cb:57:cd:25:d2:76:33:05:3b:55:
f4:84:42:4d:65:bb:33:53:74:13:ac:9a:41:13:5a:68:64:ce:
f6:2c:a6:8d:9f:b8:e6:bf:5b:71:fc:51:be:2f:fb:cd:ff:0d:
3c:35:27:bb:41:e3:81:2c:ae:f2:70:c2:ff:7c:47:ad:5c:e1:
8d:e7:2e:a6:cc:e3:02:ed:fb:e2:f0:11:e1:de:c8:c2:22:ec:
11:d1:d8:c1:47:ac:ba:7e:6a:d3:5b:70:28:3a:c2:00:c2:88:
24:37:2e:ae:69:15:67:9b:90:20:d2:a9:30:23:98:7a:fb:0f:
76:ed:d7:e5:76:30:af:36:04:da:b0:eb:a7:d3:53:80:e5:9a:
44:d0:dc:ee:a6:d6:04:93:be:86:26:5c:d0:04:29:eb:90:29:
e5:94:f6:b9:dd:ee:25:ec:03:2e:0d:5e:c9:c6:cf:41:85:38:
db:0f:e2:9b:07:11:b7:5d:b9:aa:db:75:95:62:d5:64:16:07:
13:b1:eb:7d:a1:61:e0:8a:c7:74:44:9d:d8:55:92:9d:ad:d3:
fa:11:fd:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StjRV6578pMHZu9gOZ2pgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjRlNDUwZWFmZWQ0YzI1OWI2ZGMwYTM0ZTMwNmYxYWQy
ODRiYzQwHhcNMjYwNzI0MDYwMDQyWhcNMjYwNzI1MDYwMDQyWjAzMTEwLwYDVQQD
EyhiNTk5ZGNjMjA5NzZkYzRiMTYyM2I1Y2FkMWRkNDI0NjBmMWU5MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukl4oOgHzPaXnvc2TwhilADiXHzW
yOP+/29VVEN931FbCJTlXDQxVZhf58N18MYmNlUt0OVNGNiCgrB7GLQ5D8/3Vh6Z
8pYDvPpnO2q6WZ0C89svogEdwWD6zzFtDMFgyWqNPAY5Pw/gA9OvlKLsD4n+vrXn
f71Pk8DMVMCGwHO52/DPk5l4BEQfXQJRtjVCWh8i0ZPAl/bzx6TneglEIoJmam0y
/GW/snJXOcmIy9p2xTMSO7vqeI67eRnqSPhHtyPcdPh+fQPOvuY9NzlB0wvs/15q
95m2pEEBcB/wne9xRWTRoSB81dsEHZNOiCMfYKQLemJxFvCGeghMkRvpXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWZ3MIJdtxLFiO1ytHdQkYPHpAkMB8GA1UdIwQY
MBaAFOIk5FDq/tTCWbbcCjTjBvGtKEvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUt
NmFjZDIxZDRiYWY4LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iOTE3OGItYzdiYS00ZDRlLWFmOWUtNmFjZDIxZDRiYWY4
LzEvNGlUa1VPci0xTUpadHR3S05PTUc4YTBvUzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQDPJgsN
TdvQZGcvlHS5tY4OW+pc+Yfmtmq3+8INXUfkpbi46SHN0z4hOAjLV80l0nYzBTtV
9IRCTWW7M1N0E6yaQRNaaGTO9iymjZ+45r9bcfxRvi/7zf8NPDUnu0HjgSyu8nDC
/3xHrVzhjecupszjAu374vAR4d7IwiLsEdHYwUesun5q01twKDrCAMKIJDcurmkV
Z5uQINKpMCOYevsPdu3X5XYwrzYE2rDrp9NTgOWaRNDc7qbWBJO+hiZc0AQp65Ap
5ZT2ud3uJewDLg1eycbPQYU42w/imwcRt125qtt1lWLVZBYHE7HrfaFh4IrHdESd
2FWSna3T+hH9wQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:58 2026 by rpki-client