Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: clFJVXLg5KPvg4AMFduQwcyO+e30jCqpaIThIfbDj1w=
Subject key identifier: 56:1E:EC:36:C9:2F:57:84:A9:22:60:8A:2F:7E:3B:4E:AB:44:8A:25
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 019F90C7E1EA4A1BE26D60978267337D69FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 21:00:46 +0000
Manifest this update: Thu 23 Jul 2026 21:00:46 +0000
Manifest next update: Fri 24 Jul 2026 21:00:46 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: thSBoOPcvmxF6vI4muVWCKP9z4ZGnfZEPPexp3tTHjo=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:e1:ea:4a:1b:e2:6d:60:97:82:67:33:7d:69:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Jul 23 21:00:46 2026 GMT
Not After : Jul 24 21:00:46 2026 GMT
Subject: CN=561eec36c92f5784a922608a2f7e3b4eab448a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:32:c9:08:9f:b4:a8:c4:b5:04:9c:4b:47:
45:91:16:c2:7e:53:e3:53:91:8c:19:68:17:63:6b:
9b:6a:b0:5c:db:da:45:52:e6:81:9d:bd:98:c9:bb:
c3:38:eb:02:0b:af:ad:7f:1f:78:48:1e:3a:63:ef:
27:98:75:e7:88:5b:92:30:af:2a:85:e4:54:75:3e:
99:11:7f:b6:2b:b4:ea:47:6d:61:3d:36:fb:f1:7d:
27:ea:92:67:ad:f0:c4:0f:e5:2f:ea:91:09:45:1f:
2a:f7:e0:f2:49:bd:93:eb:1c:b2:e6:a7:ca:2f:df:
66:ce:62:71:ee:1d:ca:c6:d1:a6:61:9e:6b:0c:07:
33:97:a7:20:7c:5c:ca:21:91:7f:f3:a8:b9:af:40:
2b:64:ad:44:7a:7a:ce:05:a7:4f:73:05:48:29:6d:
a7:bd:2d:9a:a6:df:d4:70:eb:0d:3f:4f:9d:dc:d8:
04:6f:30:79:57:31:8f:44:0a:53:fe:ab:0e:8f:b0:
98:36:2e:16:23:33:2e:ca:ed:38:44:5f:80:86:56:
79:9e:74:a4:15:2a:19:c7:c0:58:54:91:dd:45:ff:
a8:3b:26:38:d3:49:0a:39:f1:c5:2c:b9:e5:8e:f1:
f6:b1:1b:fc:e9:ce:be:dd:c2:d2:da:7d:f3:d4:82:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1E:EC:36:C9:2F:57:84:A9:22:60:8A:2F:7E:3B:4E:AB:44:8A:25
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ce:2c:fd:25:83:bd:95:16:b2:64:d0:14:30:b1:05:5c:eb:
0c:9b:01:94:bb:89:77:59:3a:40:f7:33:f3:ce:91:bd:82:37:
9f:a8:a5:d2:f0:e9:56:2c:22:0b:ea:99:11:05:cf:0c:e8:70:
50:47:e7:2f:20:63:08:6f:d7:95:3d:e5:6c:e0:30:4e:55:6c:
c3:a9:07:d5:2a:67:ef:36:46:7c:50:46:ac:ca:a2:0f:33:18:
00:50:55:ae:ec:33:73:bf:5e:59:a1:93:ae:12:41:c6:38:8a:
e1:44:bb:4e:70:39:a1:1a:6a:1f:4f:93:f2:a5:e4:e6:65:37:
34:61:b2:e5:48:f2:62:b9:72:8c:32:49:fb:b8:d6:d6:3f:d0:
46:8e:06:8c:c8:a2:38:fa:40:7a:a8:95:b1:f5:3c:c4:eb:d1:
05:aa:72:ff:01:f0:72:88:77:ee:07:e1:75:d4:c6:c6:2a:dc:
77:50:3a:4e:a4:2f:a4:96:fc:b5:df:df:b9:f8:e3:0e:9f:42:
10:e7:46:b4:d8:aa:8d:01:64:ee:04:7f:51:72:61:04:44:64:
b7:44:fd:23:7b:e8:bc:03:6d:ac:15:fa:87:a0:ba:ae:79:e8:
76:7e:fc:61:be:83:57:fe:86:29:fd:3a:31:31:e5:43:72:d5:
a6:e3:cb:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx+HqShvibWCXgmczfWn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx
YjljZmQwHhcNMjYwNzIzMjEwMDQ2WhcNMjYwNzI0MjEwMDQ2WjAzMTEwLwYDVQQD
Eyg1NjFlZWMzNmM5MmY1Nzg0YTkyMjYwOGEyZjdlM2I0ZWFiNDQ4YTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl0yyQiftKjEtQScS0dFkRbCflPj
U5GMGWgXY2ubarBc29pFUuaBnb2YybvDOOsCC6+tfx94SB46Y+8nmHXniFuSMK8q
heRUdT6ZEX+2K7TqR21hPTb78X0n6pJnrfDED+Uv6pEJRR8q9+DySb2T6xyy5qfK
L99mzmJx7h3KxtGmYZ5rDAczl6cgfFzKIZF/86i5r0ArZK1EenrOBadPcwVIKW2n
vS2apt/UcOsNP0+d3NgEbzB5VzGPRApT/qsOj7CYNi4WIzMuyu04RF+AhlZ5nnSk
FSoZx8BYVJHdRf+oOyY400kKOfHFLLnljvH2sRv86c6+3cLS2n3z1ILO4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYe7DbJL1eEqSJgii9+O06rRIolMB8GA1UdIwQY
MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt
OGZhNTUxZTZhZTc1LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1
LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlM4s/SWD
vZUWsmTQFDCxBVzrDJsBlLuJd1k6QPcz886RvYI3n6il0vDpViwiC+qZEQXPDOhw
UEfnLyBjCG/XlT3lbOAwTlVsw6kH1Spn7zZGfFBGrMqiDzMYAFBVruwzc79eWaGT
rhJBxjiK4US7TnA5oRpqH0+T8qXk5mU3NGGy5UjyYrlyjDJJ+7jW1j/QRo4GjMii
OPpAeqiVsfU8xOvRBapy/wHwcoh37gfhddTGxircd1A6TqQvpJb8td/fufjjDp9C
EOdGtNiqjQFk7gR/UXJhBERkt0T9I3vovANtrBX6h6C6rnnodn78Yb6DV/6GKf06
MTHlQ3LVpuPLQQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:30:26 2026 by rpki-client