Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: T2RsuSi7u14nslr3BHt5fDmqWsA6r2D7JtEvybiixFA=
Subject key identifier: A5:D0:A4:B8:42:6C:10:29:AD:1B:C0:1C:84:AC:97:5C:81:72:5D:2B
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 019F90C7F941CD310283F87AA59D344390E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 0604
Signing time: Thu 23 Jul 2026 21:00:52 +0000
Manifest this update: Thu 23 Jul 2026 21:00:52 +0000
Manifest next update: Fri 24 Jul 2026 21:00:52 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: I5zSIt3Y+iJOfqLbeX6BjZ/fdNL4YlgzMKyy+FRxFGo=)
2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:f9:41:cd:31:02:83:f8:7a:a5:9d:34:43:90:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Jul 23 21:00:52 2026 GMT
Not After : Jul 24 21:00:52 2026 GMT
Subject: CN=a5d0a4b8426c1029ad1bc01c84ac975c81725d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7d:ac:d1:03:c6:e8:bf:94:5f:ca:55:8f:89:
1c:96:26:8b:d2:74:bb:6f:1a:8a:df:9d:00:cc:64:
a4:1f:db:cf:86:36:7b:42:74:ae:47:a3:98:b8:23:
3d:34:4f:df:28:14:8b:d4:7b:17:b4:ff:4b:3d:eb:
c5:1a:e1:aa:de:e6:d8:01:0a:89:44:f2:27:bd:be:
fd:92:57:b6:99:cd:f0:37:09:88:f0:69:d8:0e:d2:
d6:24:2b:95:a3:e6:c9:9a:9a:19:d0:95:e0:5b:a2:
6e:98:34:df:df:ee:ba:00:dd:b2:f3:8f:2b:4b:3a:
8a:a8:22:90:54:13:d4:c6:00:ad:7f:a9:99:9c:16:
bd:0e:e5:c6:d4:d3:c3:8d:b7:85:93:d1:10:23:10:
b7:bb:39:cc:bb:35:bb:74:0a:97:2a:e8:75:e5:e8:
88:c3:21:99:c5:77:02:f0:79:10:29:bd:99:51:bd:
d2:ef:cf:b1:d2:77:d5:ff:03:c5:a8:a1:fb:e3:1a:
09:89:ce:07:b9:d6:f7:ce:fe:8a:b5:12:0c:3f:fc:
48:44:93:0e:ff:98:fc:a3:44:06:9f:5c:b6:7b:07:
06:09:02:32:2f:a3:3e:c1:08:aa:74:90:69:a8:2f:
31:9e:2d:46:1a:c2:64:39:a8:40:60:e6:d5:cc:ee:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D0:A4:B8:42:6C:10:29:AD:1B:C0:1C:84:AC:97:5C:81:72:5D:2B
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f0:36:ab:a9:13:44:cc:67:dd:bd:bb:af:dc:38:59:9c:f4:
6f:50:f4:37:b5:65:a7:6c:c4:32:4b:e7:52:b3:1a:d6:a9:c3:
d3:fe:7f:01:ee:50:d7:ba:23:85:72:62:c5:0a:6b:cf:40:be:
77:5c:43:7a:7f:06:0b:46:ef:d5:eb:c9:aa:56:5b:78:1f:cc:
f8:bc:65:e2:7c:52:aa:27:10:d0:bd:64:32:56:90:dd:a9:17:
0c:d0:32:e1:b3:f8:ec:e4:be:63:72:04:1e:e5:42:68:7a:7e:
a6:87:22:fa:38:40:78:b0:7a:39:ac:c5:d2:6d:c1:cd:1c:63:
32:4a:56:37:ec:a5:c1:4b:de:9f:ae:ad:5d:12:8c:f1:e7:58:
7f:81:1b:64:cc:02:e0:12:6d:d5:d0:af:61:06:7c:f3:b2:75:
b6:9d:96:63:eb:39:d3:04:58:b5:59:a6:c9:6d:64:fb:21:fe:
c4:26:54:28:4b:cb:7e:43:aa:5d:9c:b1:00:e7:ac:14:b7:96:
4a:be:b3:01:b1:eb:50:ca:e4:de:98:4f:b7:5c:b9:a1:4e:40:
2d:4a:1d:b2:0a:68:18:30:8c:01:8f:7c:ed:6f:57:38:9a:05:
cd:cf:70:3d:f9:d2:2b:8a:d4:ec:7c:17:74:3f:68:84:c5:ec:
73:fc:d7:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx/lBzTECg/h6pZ00Q5DnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWEzYmFlNDhjOTU1NjYzMTRkNjBlZmE4ODlmM2Q2NWY5
YmRkNDEwHhcNMjYwNzIzMjEwMDUyWhcNMjYwNzI0MjEwMDUyWjAzMTEwLwYDVQQD
EyhhNWQwYTRiODQyNmMxMDI5YWQxYmMwMWM4NGFjOTc1YzgxNzI1ZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X2s0QPG6L+UX8pVj4kcliaL0nS7
bxqK350AzGSkH9vPhjZ7QnSuR6OYuCM9NE/fKBSL1HsXtP9LPevFGuGq3ubYAQqJ
RPInvb79kle2mc3wNwmI8GnYDtLWJCuVo+bJmpoZ0JXgW6JumDTf3+66AN2y848r
SzqKqCKQVBPUxgCtf6mZnBa9DuXG1NPDjbeFk9EQIxC3uznMuzW7dAqXKuh15eiI
wyGZxXcC8HkQKb2ZUb3S78+x0nfV/wPFqKH74xoJic4Hudb3zv6KtRIMP/xIRJMO
/5j8o0QGn1y2ewcGCQIyL6M+wQiqdJBpqC8xni1GGsJkOahAYObVzO4juQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXQpLhCbBAprRvAHISsl1yBcl0rMB8GA1UdIwQY
MBaAFOGaO65IyVVmMU1g76iJ89Zfm91BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDIt
OTE4NGE5MWI4YWUxLzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82MzBkMGEtNDViOC00NmM0LThjMDItOTE4NGE5MWI4YWUx
LzEvNFpvN3JrakpWV1l4VFdEdnFJbnoxbC1iM1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufA2q6kT
RMxn3b27r9w4WZz0b1D0N7Vlp2zEMkvnUrMa1qnD0/5/Ae5Q17ojhXJixQprz0C+
d1xDen8GC0bv1evJqlZbeB/M+Lxl4nxSqicQ0L1kMlaQ3akXDNAy4bP47OS+Y3IE
HuVCaHp+poci+jhAeLB6OazF0m3BzRxjMkpWN+ylwUven66tXRKM8edYf4EbZMwC
4BJt1dCvYQZ887J1tp2WY+s50wRYtVmmyW1k+yH+xCZUKEvLfkOqXZyxAOesFLeW
Sr6zAbHrUMrk3phPt1y5oU5ALUodsgpoGDCMAY987W9XOJoFzc9wPfnSK4rU7HwX
dD9ohMXsc/zXpQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:16 2026 by rpki-client