Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File: l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier: EIZmd1iTdLXPR/8qCc3YW0AF8sTfom1E5Ro/Et0vYuE=
Subject key identifier: E3:82:7E:BD:55:18:3A:74:AF:49:B7:87:F6:F5:F2:6F:10:1A:08:47
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer: /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial: 019F90FEAC6549F638D72D3E78D17D3A75E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number: 08A1
Signing time: Thu 23 Jul 2026 22:00:37 +0000
Manifest this update: Thu 23 Jul 2026 22:00:37 +0000
Manifest next update: Fri 24 Jul 2026 22:00:37 +0000
Files and hashes: 1: Ul6xnaloPJqarA71Lp8dEgaZCiY.roa (hash: TaAyvUHi9RSjwAuHu0afyte32UNxt8tXqYjbQRr7Gpg=)
2: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: Svc3ExFm3lNEqftbVdhJOrlz6FwX1HchtL9WDjwBC8g=)
3: o07AL4hoPWhIQ_PilCKmUZTA81o.roa (hash: dz2qz7xDuDCVAKsXdQvYhNbSC2RVScmT9UhnlSmU23E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:ac:65:49:f6:38:d7:2d:3e:78:d1:7d:3a:75:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Validity
Not Before: Jul 23 22:00:37 2026 GMT
Not After : Jul 24 22:00:37 2026 GMT
Subject: CN=e3827ebd55183a74af49b787f6f5f26f101a0847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:90:f8:eb:01:ab:71:67:cf:f7:c1:8a:b8:
34:c8:cc:14:24:eb:1e:10:46:78:d5:46:80:00:ea:
cc:44:a7:85:8f:c7:31:97:15:55:64:a8:d8:f0:35:
bb:f1:d7:a6:6a:b6:41:48:50:e8:17:5c:6c:03:26:
a7:8b:50:a8:03:8d:35:c6:93:ed:11:4a:64:b2:83:
23:fb:16:23:5c:2e:ab:6d:57:5b:f4:7e:7a:75:cb:
8a:08:c4:b1:04:11:70:15:46:90:55:1e:4a:11:5e:
d6:0c:d6:b0:4f:0f:59:91:9e:f3:19:3c:0e:b4:ab:
6b:d2:b2:a9:cc:61:52:90:33:0b:3d:36:98:20:4f:
eb:e1:9b:42:64:14:e4:d8:7b:09:6e:b8:f2:30:41:
ca:b1:e8:90:fa:c2:fc:ee:97:42:96:2d:6c:e8:33:
c8:5c:09:5e:cb:60:bd:6c:db:60:27:ff:7f:50:a4:
56:42:24:88:38:aa:8a:24:d6:fc:7c:a6:9f:66:88:
6b:50:57:08:e3:4d:87:5c:bf:df:d4:90:35:09:a8:
8d:2b:90:13:42:40:0b:76:b8:05:7b:9c:81:3d:69:
10:3b:aa:74:b5:b3:f6:f3:56:08:04:d9:59:4f:d6:
d1:72:14:05:b5:9a:b9:50:d6:30:53:f7:2f:d1:26:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:7E:BD:55:18:3A:74:AF:49:B7:87:F6:F5:F2:6F:10:1A:08:47
X509v3 Authority Key Identifier:
keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e7:1a:9b:60:71:6e:7e:ad:45:d4:50:64:87:5b:a5:d5:f9:
bb:bb:0f:e6:70:72:5f:43:02:5c:cf:a7:de:64:2e:f1:96:81:
33:c9:be:fe:31:c0:28:7f:8b:d0:97:33:f2:08:6a:56:57:1b:
57:aa:3b:ec:4d:65:c0:96:93:5a:2a:b5:c8:94:90:bc:c1:f5:
12:3c:ee:74:0f:56:13:ad:b6:28:b3:55:4e:3b:26:d1:80:7f:
13:e8:99:15:b3:c6:f6:78:95:1e:79:00:55:1c:d0:e9:2c:0c:
51:76:92:ee:af:59:9a:47:d8:97:37:54:fc:4a:ab:26:6b:3a:
a5:24:0d:27:a3:2e:c3:10:28:b7:ea:0e:5e:f1:8d:cf:1d:69:
d8:f9:55:20:36:d2:67:b0:51:b4:d2:60:80:79:88:86:9e:83:
bf:82:4c:48:05:6e:31:61:65:ba:4e:90:13:99:2e:4d:c8:72:
6d:53:17:b1:30:ae:a1:9a:04:b9:7a:45:32:70:35:f9:a3:86:
85:ef:1e:d0:5b:b3:c0:85:df:31:fc:df:81:bf:fb:89:fd:fe:
eb:1a:d1:f2:1d:f8:1e:d3:1b:eb:8a:3b:3b:bc:90:19:36:41:
a0:97:1c:24:ca:c3:7f:d1:f6:c1:0d:50:9a:59:22:a8:15:06:
c7:7b:00:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/qxlSfY41y0+eNF9OnXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODhkZTFiNzU3ZWFhYWI1ZTc2YjE5NmUxNzhiNjBiNWU2
YzI0MGMwHhcNMjYwNzIzMjIwMDM3WhcNMjYwNzI0MjIwMDM3WjAzMTEwLwYDVQQD
EyhlMzgyN2ViZDU1MTgzYTc0YWY0OWI3ODdmNmY1ZjI2ZjEwMWEwODQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T2Q+OsBq3Fnz/fBirg0yMwUJOse
EEZ41UaAAOrMRKeFj8cxlxVVZKjY8DW78demarZBSFDoF1xsAyani1CoA401xpPt
EUpksoMj+xYjXC6rbVdb9H56dcuKCMSxBBFwFUaQVR5KEV7WDNawTw9ZkZ7zGTwO
tKtr0rKpzGFSkDMLPTaYIE/r4ZtCZBTk2HsJbrjyMEHKseiQ+sL87pdCli1s6DPI
XAley2C9bNtgJ/9/UKRWQiSIOKqKJNb8fKafZohrUFcI402HXL/f1JA1CaiNK5AT
QkALdrgFe5yBPWkQO6p0tbP281YIBNlZT9bRchQFtZq5UNYwU/cv0SZ6JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOCfr1VGDp0r0m3h/b18m8QGghHMB8GA1UdIwQY
MBaAFJeI3ht1fqqrXnaxluF4tgtebCQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEt
ODE3OTBmNjFlNzk0LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy83M2NhNTctNGVlZS00YzI5LTgxNGEtODE3OTBmNjFlNzk0
LzEvbDRqZUczVi1xcXRlZHJHVzRYaTJDMTVzSkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+cam2Bx
bn6tRdRQZIdbpdX5u7sP5nByX0MCXM+n3mQu8ZaBM8m+/jHAKH+L0Jcz8ghqVlcb
V6o77E1lwJaTWiq1yJSQvMH1EjzudA9WE622KLNVTjsm0YB/E+iZFbPG9niVHnkA
VRzQ6SwMUXaS7q9ZmkfYlzdU/EqrJms6pSQNJ6MuwxAot+oOXvGNzx1p2PlVIDbS
Z7BRtNJggHmIhp6Dv4JMSAVuMWFluk6QE5kuTchybVMXsTCuoZoEuXpFMnA1+aOG
he8e0FuzwIXfMfzfgb/7if3+6xrR8h34HtMb64o7O7yQGTZBoJccJMrDf9H2wQ1Q
mlkiqBUGx3sA6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:18 2026 by rpki-client