Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
File: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft (raw, json)
Hash identifier: 4dPvMuIlxuWLJz/8VmKQ1Bg0jmuhyTwMBLHSX8Hqw6k=
Subject key identifier: C6:A0:B7:22:2F:90:30:F7:27:DD:7E:8B:8E:54:98:00:64:3C:5D:01
Authority key identifier: E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
Certificate issuer: /CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Certificate serial: 019F9135B1F691335EA2BD2DAC01DE0D90D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
Manifest number: 02F6
Signing time: Thu 23 Jul 2026 23:00:42 +0000
Manifest this update: Thu 23 Jul 2026 23:00:42 +0000
Manifest next update: Fri 24 Jul 2026 23:00:42 +0000
Files and hashes: 1: 4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl (hash: OsF5s4ANTc1UylnAFvL6i1FshKVA1QuTGUcThQt4zGs=)
2: 4ypktVvAzfNV9xVobcyFTIbQDTY.roa (hash: gbFNuHiI6Q6GwECOCQ38Wty+z3M8uTYhivyQMeIFbAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:b1:f6:91:33:5e:a2:bd:2d:ac:01:de:0d:90:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3106ac3ea760b2d0242a9efba2c2116b626f824
Validity
Not Before: Jul 23 23:00:42 2026 GMT
Not After : Jul 24 23:00:42 2026 GMT
Subject: CN=c6a0b7222f9030f727dd7e8b8e549800643c5d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:58:d3:58:58:e3:ad:b3:6c:00:d2:63:37:
bf:d5:ec:2a:88:c3:ef:c2:a4:b7:0a:c2:b3:c2:c0:
d7:30:6f:e6:f9:c9:d8:e1:53:1e:4d:e6:15:ec:8c:
9e:4c:6e:62:ba:a9:04:91:4b:b8:98:a9:08:3d:b9:
f7:99:e5:56:e6:28:6a:89:c0:c9:d1:b6:98:33:2a:
52:e1:61:4d:88:96:58:ff:5a:0d:bc:31:0e:eb:dc:
b2:b5:64:91:c9:19:82:e9:5c:66:ac:9c:2d:f7:d9:
30:69:42:2d:6b:32:95:35:38:eb:bf:0e:91:94:99:
5b:27:32:77:11:33:d1:7a:f4:ae:e8:ca:73:ec:c1:
a1:72:12:82:93:62:6e:ba:61:ad:99:58:b1:0d:4a:
30:ed:f9:41:1a:6f:f6:40:6f:bd:30:a3:71:33:ba:
cc:61:14:73:dd:3f:c7:b0:46:46:54:b6:26:e2:10:
c3:6e:dc:bd:cb:a9:19:9c:41:87:b2:49:9f:bf:45:
45:c9:b9:dd:02:37:cf:61:b3:32:6a:3b:44:e1:ab:
5f:96:93:7e:ed:90:31:3a:27:a1:33:19:d3:c6:61:
1a:33:37:52:7c:09:8a:94:a7:d6:45:a6:7a:32:8b:
24:43:25:b1:b4:fe:d2:4f:c0:df:ff:94:6c:da:b9:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A0:B7:22:2F:90:30:F7:27:DD:7E:8B:8E:54:98:00:64:3C:5D:01
X509v3 Authority Key Identifier:
keyid:E3:10:6A:C3:EA:76:0B:2D:02:42:A9:EF:BA:2C:21:16:B6:26:F8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f91a85-e93c-4a49-8215-8497717a4f61/1/4xBqw-p2Cy0CQqnvuiwhFrYm-CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:91:fa:26:45:af:d8:56:ac:6b:b6:0e:8a:90:a6:c3:f7:bc:
91:49:49:a4:e3:5d:1d:11:71:8e:39:c2:6e:c0:16:9a:7c:49:
d6:3f:77:dc:e8:e7:c8:e0:b6:bf:ca:37:75:95:bb:9b:3e:98:
7f:91:68:cf:31:7a:bf:69:13:e9:73:aa:fc:03:3d:ef:84:a9:
b7:4f:69:64:11:30:a0:65:13:11:9c:96:cf:2a:55:67:cb:da:
05:f3:67:27:06:60:d5:f1:ca:82:85:c0:98:a3:53:f9:35:7b:
20:8e:b4:4a:70:44:39:3e:db:9a:38:3c:38:8f:dc:3b:88:af:
23:6c:c0:22:93:fd:1a:6a:36:ea:a6:5e:23:c7:6c:fe:20:1a:
4b:f6:b4:87:e7:14:b3:c6:0e:94:0e:45:86:c3:d7:c1:bb:27:
ad:d5:53:22:8c:7e:b2:de:84:9b:6c:51:c3:8e:58:8f:34:90:
2a:3f:74:cf:f1:2e:1a:14:f0:23:8d:f5:48:d7:27:65:58:7c:
0e:a2:ff:0a:5f:f8:05:69:07:b6:a6:f7:6a:95:69:4b:0c:a5:
24:3a:7b:fd:c1:4a:90:1d:73:85:25:a7:fd:83:52:64:dc:24:
a6:cd:58:88:0e:e4:ed:2c:f6:e6:2b:d4:8a:ed:8d:a2:23:42:
a5:ee:73:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNbH2kTNeor0trAHeDZDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTA2YWMzZWE3NjBiMmQwMjQyYTllZmJhMmMyMTE2YjYy
NmY4MjQwHhcNMjYwNzIzMjMwMDQyWhcNMjYwNzI0MjMwMDQyWjAzMTEwLwYDVQQD
EyhjNmEwYjcyMjJmOTAzMGY3MjdkZDdlOGI4ZTU0OTgwMDY0M2M1ZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxZY01hY462zbADSYze/1ewqiMPv
wqS3CsKzwsDXMG/m+cnY4VMeTeYV7IyeTG5iuqkEkUu4mKkIPbn3meVW5ihqicDJ
0baYMypS4WFNiJZY/1oNvDEO69yytWSRyRmC6VxmrJwt99kwaUItazKVNTjrvw6R
lJlbJzJ3ETPRevSu6Mpz7MGhchKCk2JuumGtmVixDUow7flBGm/2QG+9MKNxM7rM
YRRz3T/HsEZGVLYm4hDDbty9y6kZnEGHskmfv0VFybndAjfPYbMyajtE4atflpN+
7ZAxOiehMxnTxmEaMzdSfAmKlKfWRaZ6MoskQyWxtP7ST8Df/5Rs2rlZ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMagtyIvkDD3J91+i45UmABkPF0BMB8GA1UdIwQY
MBaAFOMQasPqdgstAkKp77osIRa2JvgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mOTFhODUtZTkzYy00YTQ5LTgyMTUt
ODQ5NzcxN2E0ZjYxLzEvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mOTFhODUtZTkzYy00YTQ5LTgyMTUtODQ5NzcxN2E0ZjYx
LzEvNHhCcXctcDJDeTBDUXFudnVpd2hGclltLUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5H6JkWv
2Fasa7YOipCmw/e8kUlJpONdHRFxjjnCbsAWmnxJ1j933OjnyOC2v8o3dZW7mz6Y
f5FozzF6v2kT6XOq/AM974Spt09pZBEwoGUTEZyWzypVZ8vaBfNnJwZg1fHKgoXA
mKNT+TV7II60SnBEOT7bmjg8OI/cO4ivI2zAIpP9Gmo26qZeI8ds/iAaS/a0h+cU
s8YOlA5FhsPXwbsnrdVTIox+st6Em2xRw45YjzSQKj90z/EuGhTwI431SNcnZVh8
DqL/Cl/4BWkHtqb3apVpSwylJDp7/cFKkB1zhSWn/YNSZNwkps1YiA7k7Sz25ivU
iu2NoiNCpe5zJQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:05 2026 by rpki-client