Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: 6TXT65Sviohay6W7F55ZGPvJHmuq7LbJnmt0L11H4Vw=
Subject key identifier: 70:91:55:4D:EB:9D:B9:F1:11:A2:D6:02:C1:0B:A8:13:B9:05:31:72
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019F8F7DFD9BE8A8E86FBD1FA0758CD7F92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 0511
Signing time: Thu 23 Jul 2026 15:00:26 +0000
Manifest this update: Thu 23 Jul 2026 15:00:26 +0000
Manifest next update: Fri 24 Jul 2026 15:00:26 +0000
Files and hashes: 1: 69-gm5sAHUb2zlkusSsJwnhPOtw.asa (hash: w8dP42z3PzlgsL7213s07oZP842qzAir4wVoWzTTHUs=)
2: 9CS7xyErSCJY_wQFDW0wV1rIDq0.roa (hash: e2yWbh2yduLvhGO9ZZhdKHXEB8OOHqP7OQbj14TpHIU=)
3: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: kTulSyqGthCFDm+L4nSnh9jsBRdP9tz8HADGHI8kmEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:fd:9b:e8:a8:e8:6f:bd:1f:a0:75:8c:d7:f9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Jul 23 15:00:26 2026 GMT
Not After : Jul 24 15:00:26 2026 GMT
Subject: CN=7091554deb9db9f111a2d602c10ba813b9053172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:f8:f0:fd:5a:b6:83:8f:b6:24:37:c7:82:
64:2e:54:25:64:53:05:b0:5b:1f:ed:2f:cf:29:50:
14:b5:69:f0:cb:76:da:6a:2d:07:f5:9b:ae:ae:d9:
f7:31:15:3c:bd:33:2c:36:ab:07:67:1f:39:99:1c:
d6:84:d5:8a:9c:e8:52:5c:18:85:22:26:12:b1:bf:
77:c6:6d:0d:7f:c1:da:64:67:42:a6:13:ff:fe:73:
47:5a:bb:85:d3:17:fb:c3:2b:8e:4e:5d:59:7f:3d:
67:10:73:80:e0:53:2a:f3:fb:c8:9d:81:21:5a:4a:
03:09:f1:16:de:03:e9:e9:87:fd:67:67:91:6b:2b:
e5:33:6c:4d:5d:26:63:df:a4:bb:06:67:a4:27:ed:
0e:fd:a1:f9:45:e4:98:55:00:e1:e3:18:47:c5:82:
d2:6e:b9:d0:e4:d5:14:70:b1:47:7f:35:9b:22:86:
d0:75:91:21:aa:ab:1a:94:f9:10:c9:cb:01:86:bb:
62:8e:33:3f:cb:7c:34:b9:ad:f7:29:88:e7:62:4a:
e1:8b:ea:b0:8b:3d:7a:37:43:2e:69:e3:aa:15:4e:
d7:37:72:65:10:57:dc:53:4e:b7:6f:1b:ba:5d:b4:
1e:92:29:fd:f7:07:99:16:02:7d:e0:96:3a:7c:5b:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:55:4D:EB:9D:B9:F1:11:A2:D6:02:C1:0B:A8:13:B9:05:31:72
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f3:fa:d3:2a:09:30:0e:de:9c:bc:7f:b2:48:2e:3d:44:e1:
77:23:df:2e:71:6f:2c:a0:6a:80:97:7d:f3:03:1b:e8:d2:c3:
e7:76:4c:31:98:da:23:e5:41:99:c0:d6:db:3f:c9:b2:13:37:
47:e9:af:65:95:67:3f:a5:fd:af:fa:d5:b2:da:2c:93:79:14:
49:90:67:c6:90:8e:65:b7:e9:f2:8b:2d:07:29:61:cd:90:f2:
c5:6b:b5:bb:4d:4a:0e:85:09:9d:2b:06:94:b2:e2:48:53:6e:
5d:3a:d8:f0:58:80:66:d6:7c:be:6f:7e:db:10:80:05:8a:91:
7e:e9:a8:c0:1e:6b:0b:35:05:b5:bb:38:b3:17:38:82:a1:bd:
a5:ab:16:e9:7d:bf:8f:a5:14:12:17:32:77:60:c2:d4:1a:9f:
33:fc:84:39:0d:d1:0e:26:3f:a9:09:a5:3d:bc:7e:a7:9f:53:
5a:9c:22:eb:2e:7f:4f:93:0f:6a:69:ed:0d:11:04:bd:35:67:
40:a0:1e:52:cc:63:d9:a4:15:db:c8:72:ed:2f:86:25:32:4b:
0f:81:d7:be:b7:9c:1f:49:66:54:2d:73:c3:26:cc:27:50:8a:
9a:33:0f:9d:e1:86:55:f5:e4:6f:8f:2d:0d:35:90:31:6b:cd:
1a:c1:81:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pff2b6Kjob70foHWM1/kuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODQ2NzRlYTAwN2ExMjAzMGFjOGQyYmU1NjBkYjIxZjRm
YzBiOTkwHhcNMjYwNzIzMTUwMDI2WhcNMjYwNzI0MTUwMDI2WjAzMTEwLwYDVQQD
Eyg3MDkxNTU0ZGViOWRiOWYxMTFhMmQ2MDJjMTBiYTgxM2I5MDUzMTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstX48P1atoOPtiQ3x4JkLlQlZFMF
sFsf7S/PKVAUtWnwy3baai0H9Zuurtn3MRU8vTMsNqsHZx85mRzWhNWKnOhSXBiF
IiYSsb93xm0Nf8HaZGdCphP//nNHWruF0xf7wyuOTl1Zfz1nEHOA4FMq8/vInYEh
WkoDCfEW3gPp6Yf9Z2eRayvlM2xNXSZj36S7BmekJ+0O/aH5ReSYVQDh4xhHxYLS
brnQ5NUUcLFHfzWbIobQdZEhqqsalPkQycsBhrtijjM/y3w0ua33KYjnYkrhi+qw
iz16N0MuaeOqFU7XN3JlEFfcU063bxu6XbQekin99weZFgJ94JY6fFudFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCRVU3rnbnxEaLWAsELqBO5BTFyMB8GA1UdIwQY
MBaAFCOEZ06gB6EgMKyNK+Vg2yH0/AuZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUt
YzhmNTZjMTIyZmVjLzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YjlhNGMtODAyZC00YjFlLTk0ZmUtYzhmNTZjMTIyZmVj
LzEvSTRSblRxQUhvU0F3ckkwcjVXRGJJZlQ4QzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPP60yoJ
MA7enLx/skguPUThdyPfLnFvLKBqgJd98wMb6NLD53ZMMZjaI+VBmcDW2z/JshM3
R+mvZZVnP6X9r/rVstosk3kUSZBnxpCOZbfp8ostBylhzZDyxWu1u01KDoUJnSsG
lLLiSFNuXTrY8FiAZtZ8vm9+2xCABYqRfumowB5rCzUFtbs4sxc4gqG9pasW6X2/
j6UUEhcyd2DC1BqfM/yEOQ3RDiY/qQmlPbx+p59TWpwi6y5/T5MPamntDREEvTVn
QKAeUsxj2aQV28hy7S+GJTJLD4HXvrecH0lmVC1zwybMJ1CKmjMPneGGVfXkb48t
DTWQMWvNGsGBkQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:53 2026 by rpki-client