
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: l9LZ+dnz+4zpPyEAtcrTVfmSPs7CJKatft/k/JaKefA=
Subject key identifier: D8:37:CB:21:9C:C5:56:67:7F:83:18:B8:DA:D4:7A:17:CC:5C:1B:41
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 019F916D48081EFDCE8F8CA3F331BB6388A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 00:01:25 +0000
Manifest this update: Fri 24 Jul 2026 00:01:25 +0000
Manifest next update: Sat 25 Jul 2026 00:01:25 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: MVPZ8GZOzO3C3HeqacHYrbv4X7AqcMfOq++a6rIsJrw=)
2: GD22NDKlkAh5bp67GRvvW84yHsU.roa (hash: LtP9pMPZerVqZeqzrIl5QfQhM+bLwsaU/FGis7xu4Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:48:08:1e:fd:ce:8f:8c:a3:f3:31:bb:63:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Jul 24 00:01:25 2026 GMT
Not After : Jul 25 00:01:25 2026 GMT
Subject: CN=d837cb219cc556677f8318b8dad47a17cc5c1b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:c3:78:72:b9:cf:36:30:f2:7a:ba:aa:75:
f0:f5:0f:13:43:9d:96:19:79:d5:15:f5:e1:c1:e8:
58:a2:8e:6f:0e:27:56:f4:ca:93:49:af:9d:ff:c9:
a6:aa:82:37:85:d8:a0:34:0b:cd:05:a0:8e:30:94:
fb:4d:0d:2a:bc:0d:4f:4e:20:fc:cc:c8:c7:0c:81:
78:77:85:2c:5a:25:77:81:c8:00:f1:81:fa:fa:cc:
96:67:a5:ef:fd:c6:9d:a8:1a:57:90:0a:1d:82:88:
f4:c1:19:54:11:4b:dd:ab:de:04:fc:49:1c:be:3f:
21:08:a3:bf:79:94:f8:ec:cb:7d:31:00:97:27:1d:
24:c6:dd:85:0b:c1:16:ff:f7:67:5b:04:55:6d:26:
ba:a3:75:f1:fe:e9:2d:43:55:83:8d:06:91:a4:38:
64:ce:7f:92:a5:92:4e:ca:19:3f:6a:bd:5e:fa:96:
87:87:d5:70:df:43:21:32:fd:cd:0e:62:1e:da:51:
ef:d3:bf:af:a8:ff:23:55:0b:76:ca:a1:6a:d6:d2:
fd:d5:5b:31:60:f4:86:72:f6:88:6e:07:46:56:5e:
1f:6d:fc:a5:f4:07:d4:95:16:3b:62:6c:11:cd:3f:
96:44:8c:6d:8a:2f:8d:d0:2c:9d:d4:c3:7d:81:54:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:37:CB:21:9C:C5:56:67:7F:83:18:B8:DA:D4:7A:17:CC:5C:1B:41
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2b:65:5d:87:bd:f1:75:da:df:d5:53:e1:01:a0:cd:a9:5e:
8a:08:b9:20:d1:17:88:92:a6:af:74:fd:40:dc:d6:b7:b6:0d:
0b:bb:cd:07:8c:e5:9b:81:21:3f:05:ff:d8:41:3c:87:44:4f:
89:d7:59:ed:5d:58:7d:6f:a4:e9:1c:fb:c7:42:ec:93:03:3a:
35:c6:fa:53:a0:11:6b:65:25:d3:d0:8f:31:28:b6:f5:9e:06:
4a:89:b2:86:5d:2e:59:7d:80:35:15:da:14:12:95:c8:45:35:
ee:a1:86:1f:34:9c:dd:63:b4:6e:8a:ca:2b:c8:be:ab:e3:3e:
fa:7c:a6:93:95:00:d2:60:ee:c7:4d:60:4c:96:27:6b:17:24:
f3:c3:3a:2f:f7:69:37:8f:62:9e:c1:7f:11:25:7a:d1:44:e4:
aa:55:55:46:4a:f7:17:3e:cf:43:2a:db:e6:ae:b7:0e:95:ae:
cc:b2:14:94:7b:68:6b:b2:08:04:00:46:27:d0:1e:e8:a0:46:
c6:39:01:f9:8d:eb:2c:04:9b:90:a9:d0:a2:8f:1f:ed:74:ea:
9e:30:15:42:dd:b7:1d:34:bd:76:a6:78:d0:7e:51:f8:31:05:
c1:4e:18:63:b0:91:76:1c:95:25:a5:d8:14:b4:c9:df:7c:0a:
c4:29:b6:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbUgIHv3Oj4yj8zG7Y4ikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwN2UwMDhkNmVkMjM4OGFkMzFiNzQyMjQyMzE1MmE5MmE1
NGRlNzEwHhcNMjYwNzI0MDAwMTI1WhcNMjYwNzI1MDAwMTI1WjAzMTEwLwYDVQQD
EyhkODM3Y2IyMTljYzU1NjY3N2Y4MzE4YjhkYWQ0N2ExN2NjNWMxYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpTDeHK5zzYw8nq6qnXw9Q8TQ52W
GXnVFfXhwehYoo5vDidW9MqTSa+d/8mmqoI3hdigNAvNBaCOMJT7TQ0qvA1PTiD8
zMjHDIF4d4UsWiV3gcgA8YH6+syWZ6Xv/cadqBpXkAodgoj0wRlUEUvdq94E/Ekc
vj8hCKO/eZT47Mt9MQCXJx0kxt2FC8EW//dnWwRVbSa6o3Xx/uktQ1WDjQaRpDhk
zn+SpZJOyhk/ar1e+paHh9Vw30MhMv3NDmIe2lHv07+vqP8jVQt2yqFq1tL91Vsx
YPSGcvaIbgdGVl4fbfyl9AfUlRY7YmwRzT+WRIxtii+N0Cyd1MN9gVTpEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg3yyGcxVZnf4MYuNrUehfMXBtBMB8GA1UdIwQY
MBaAFOB+AI1u0jiK0xt0IkIxUqkqVN5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQt
MjcyNzI0N2FmMjEwLzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQtMjcyNzI0N2FmMjEw
LzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCtlXYe9
8XXa39VT4QGgzaleigi5INEXiJKmr3T9QNzWt7YNC7vNB4zlm4EhPwX/2EE8h0RP
iddZ7V1YfW+k6Rz7x0LskwM6Ncb6U6ARa2Ul09CPMSi29Z4GSomyhl0uWX2ANRXa
FBKVyEU17qGGHzSc3WO0borKK8i+q+M++nymk5UA0mDux01gTJYnaxck88M6L/dp
N49insF/ESV60UTkqlVVRkr3Fz7PQyrb5q63DpWuzLIUlHtoa7IIBABGJ9Ae6KBG
xjkB+Y3rLASbkKnQoo8f7XTqnjAVQt23HTS9dqZ40H5R+DEFwU4YY7CRdhyVJaXY
FLTJ33wKxCm2og==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:57 2026 by rpki-client