Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier: HfSbKagC2cwLWKUdfru3nvCCQks1mj3Ga5VVGvrdN1A=
Subject key identifier: EB:3D:50:67:EB:1C:B4:B9:E7:8E:4F:49:20:AB:3C:81:A5:96:90:B6
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 019F93C8F93AE8AC1CD2A1B956D5A1645539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 11:00:49 +0000
Manifest this update: Fri 24 Jul 2026 11:00:49 +0000
Manifest next update: Sat 25 Jul 2026 11:00:49 +0000
Files and hashes: 1: 1OhU1ba4r4lAxG-v3HBo5kpowjY.roa (hash: uhi47WtmC1HtS+uzfaoWnsMLVST1oI2GfXGXB1P0CWo=)
2: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: 3okRYndglZ3WG6RnFDgdgS3pu0Fz1BdvFF6ND4Fau7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:f9:3a:e8:ac:1c:d2:a1:b9:56:d5:a1:64:55:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Jul 24 11:00:49 2026 GMT
Not After : Jul 25 11:00:49 2026 GMT
Subject: CN=eb3d5067eb1cb4b9e78e4f4920ab3c81a59690b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:5b:a3:ce:d5:fe:75:e4:e8:83:a5:c0:a7:
ff:5f:3a:36:bb:8c:92:03:a9:f4:a4:79:df:cf:39:
96:cf:73:22:7a:c8:c8:95:70:50:a5:5d:81:53:b4:
06:c0:97:62:e9:43:18:ef:f3:f6:ce:91:d0:e4:24:
7d:b8:42:b7:f8:00:e2:9c:f4:12:db:55:be:65:10:
3d:6a:95:8a:eb:a6:95:9e:03:93:71:16:c5:92:09:
c9:4c:55:cd:22:d6:e8:17:e6:c9:3f:5a:aa:3f:49:
a7:9c:5d:8d:56:5a:5c:6b:ee:72:a5:68:b2:7c:16:
8f:19:a9:77:12:78:5a:bc:09:e4:09:5d:9b:00:69:
8c:b8:e4:c4:61:87:43:5b:cb:8f:6e:57:2d:bc:c8:
85:de:f4:b2:f3:52:73:17:8f:25:0e:b6:23:86:a5:
ef:2a:08:7b:c3:77:36:28:48:d5:39:06:85:e4:98:
0c:24:b1:5e:3a:17:4f:da:84:9c:1c:24:32:ae:ee:
2d:4a:78:34:3e:e1:67:28:b1:38:d4:ab:2b:d6:de:
23:ed:ea:50:63:f4:7e:4a:d1:60:e9:ec:46:48:ef:
08:35:d5:24:d0:90:61:d0:65:b3:1a:48:79:17:65:
ea:f5:02:78:81:6f:a8:ac:69:2c:88:20:04:92:65:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3D:50:67:EB:1C:B4:B9:E7:8E:4F:49:20:AB:3C:81:A5:96:90:B6
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:56:46:5b:05:f0:a5:82:cd:dd:37:b2:b8:0c:1d:4c:60:51:
0f:0a:ef:73:b0:20:b6:bc:3c:71:fd:63:7e:7e:89:a8:90:a8:
97:1b:20:0b:51:21:46:d1:4f:7c:7f:42:f1:ce:25:a0:63:38:
ca:62:8e:de:4b:6e:92:7e:5c:79:2e:99:d5:6d:25:28:57:c9:
ca:0c:bb:a1:9f:8d:7d:26:21:b5:87:b2:26:c3:42:7f:03:00:
c9:46:ad:91:76:f9:cd:60:8e:bb:b7:92:84:93:05:79:81:4c:
76:c5:66:f3:b2:f7:29:94:31:f8:d6:92:34:b3:d2:fd:b7:66:
6a:a5:1c:d7:94:f3:40:78:33:4c:d9:b4:20:5b:3a:62:c8:7a:
3c:1a:93:f8:7f:31:82:9e:3d:c6:b8:7c:c1:a1:fc:b6:6a:45:
3c:5a:ce:7f:a5:3f:b9:26:01:b9:d9:68:9f:23:36:4e:45:6f:
ac:44:c1:df:fd:37:31:4a:5a:d6:0e:05:92:b9:7c:9e:55:3e:
f3:14:19:90:60:5c:6f:a0:b4:a4:f4:02:e2:86:47:69:e5:00:
48:3e:89:6c:db:0c:98:e0:f0:e1:89:aa:05:b1:4d:9b:e9:ed:
04:10:6f:fe:7f:d2:9c:0d:da:7b:8e:34:07:34:64:eb:76:32:
49:01:90:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyPk66Kwc0qG5VtWhZFU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWFiYTNjMmY1NjI4M2NlNWM3NGJjZTQwNTg0NGMxNTkx
YmFiZmMwHhcNMjYwNzI0MTEwMDQ5WhcNMjYwNzI1MTEwMDQ5WjAzMTEwLwYDVQQD
EyhlYjNkNTA2N2ViMWNiNGI5ZTc4ZTRmNDkyMGFiM2M4MWE1OTY5MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVlbo87V/nXk6IOlwKf/Xzo2u4yS
A6n0pHnfzzmWz3MiesjIlXBQpV2BU7QGwJdi6UMY7/P2zpHQ5CR9uEK3+ADinPQS
21W+ZRA9apWK66aVngOTcRbFkgnJTFXNItboF+bJP1qqP0mnnF2NVlpca+5ypWiy
fBaPGal3EnhavAnkCV2bAGmMuOTEYYdDW8uPblctvMiF3vSy81JzF48lDrYjhqXv
Kgh7w3c2KEjVOQaF5JgMJLFeOhdP2oScHCQyru4tSng0PuFnKLE41Ksr1t4j7epQ
Y/R+StFg6exGSO8INdUk0JBh0GWzGkh5F2Xq9QJ4gW+orGksiCAEkmXDzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs9UGfrHLS5545PSSCrPIGllpC2MB8GA1UdIwQY
MBaAFOMaujwvVig85cdLzkBYRMFZG6v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgt
NWYyODEzN2E3NjU4LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mODMwNzMtOWU4MC00MmYyLWIwYTgtNWYyODEzN2E3NjU4
LzEvNHhxNlBDOVdLRHpseDB2T1FGaEV3VmticV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFZGWwXw
pYLN3TeyuAwdTGBRDwrvc7Agtrw8cf1jfn6JqJColxsgC1EhRtFPfH9C8c4loGM4
ymKO3ktukn5ceS6Z1W0lKFfJygy7oZ+NfSYhtYeyJsNCfwMAyUatkXb5zWCOu7eS
hJMFeYFMdsVm87L3KZQx+NaSNLPS/bdmaqUc15TzQHgzTNm0IFs6Ysh6PBqT+H8x
gp49xrh8waH8tmpFPFrOf6U/uSYBudlonyM2TkVvrETB3/03MUpa1g4Fkrl8nlU+
8xQZkGBcb6C0pPQC4oZHaeUASD6JbNsMmODw4YmqBbFNm+ntBBBv/n/SnA3ae440
BzRk63YySQGQbA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:42 2026 by rpki-client