Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: osO/DP8kGRwNKZjZMnay2BCk6uyWSN/enUxAG2b1puE=
Subject key identifier: DF:09:97:7B:16:8B:EE:45:39:32:38:EF:05:85:1D:98:DE:61:FB:C2
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019F94A4DFB1B222A9D26A385AE785CFB798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 12D7
Signing time: Fri 24 Jul 2026 15:01:00 +0000
Manifest this update: Fri 24 Jul 2026 15:01:00 +0000
Manifest next update: Sat 25 Jul 2026 15:01:00 +0000
Files and hashes: 1: GSWx0hsgl2HZ3hZKjw9zmZ1zR0c.roa (hash: 5iJBSAVI32wYt0M+SbccAMVEuoqi4ABnZUSN/2LAKP4=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: p7WzGiRdaZibeQWzvx0ZUCrv2QpPiQlw1sR95amzq3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:df:b1:b2:22:a9:d2:6a:38:5a:e7:85:cf:b7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Jul 24 15:01:00 2026 GMT
Not After : Jul 25 15:01:00 2026 GMT
Subject: CN=df09977b168bee45393238ef05851d98de61fbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:70:dd:df:ba:b8:6a:6b:a7:4a:de:0c:71:
57:22:58:81:ba:f7:5d:68:03:a3:78:1d:e8:05:47:
78:82:bd:b6:80:fa:b4:ff:a8:80:65:88:b4:ae:bf:
13:59:9c:59:e7:50:a8:3e:eb:e8:54:58:ed:e9:71:
f1:f6:7a:bf:25:74:27:ad:8d:e8:38:88:98:07:3d:
d6:28:0e:02:46:73:73:cf:ea:f3:a0:be:65:5c:0f:
43:d1:00:e3:22:60:a7:ee:6e:a4:d8:0a:3f:f6:21:
50:9d:d7:83:a0:d4:45:c9:75:6f:0b:b8:2e:72:25:
bb:be:76:94:c9:ed:2b:c1:99:52:3a:70:77:54:35:
40:9e:b2:5d:14:a3:57:5c:06:62:9c:28:d8:57:da:
12:f9:d2:6f:74:5e:da:ca:d6:3a:c8:9f:a1:5c:c9:
25:f6:43:ee:10:ec:b8:68:3d:f4:f7:c7:13:92:7e:
35:c7:e6:05:9f:9b:65:d7:6c:d3:eb:9b:51:cc:59:
fe:4f:e1:7d:1b:de:1f:08:26:77:d0:ba:47:92:88:
35:b2:79:7b:55:54:02:c3:f2:8f:34:fe:b0:c9:ba:
c9:41:3c:18:5b:33:ef:eb:a3:f1:98:5b:de:43:a6:
ae:bd:38:71:e1:25:3d:e1:c3:c2:56:aa:47:f8:4a:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:09:97:7B:16:8B:EE:45:39:32:38:EF:05:85:1D:98:DE:61:FB:C2
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:47:20:62:1f:75:01:79:9b:e6:d4:e5:e1:fa:e1:08:5b:ae:
c7:2c:01:7f:b0:af:db:37:d2:a4:fc:47:09:5d:b5:44:42:8b:
df:11:29:84:07:a9:14:e3:b9:a3:90:aa:b9:ea:e0:85:be:c0:
32:a8:fb:de:91:9d:71:53:61:55:8a:65:02:49:15:57:c3:c3:
ad:bb:cf:10:66:ec:4b:42:c2:52:16:7a:75:3a:13:84:ca:aa:
2f:87:df:b9:3c:87:97:fa:6b:4e:f5:cb:c5:10:b3:dd:9e:33:
bc:a3:ee:04:26:c4:db:15:d9:a8:c7:91:66:c9:c6:87:37:d3:
e2:b0:63:f6:14:83:18:4b:2c:0c:fb:38:17:37:ee:74:34:66:
65:ad:37:58:38:d1:fc:7e:ac:09:56:48:65:26:13:65:64:e2:
15:8c:c9:8f:d0:db:e5:98:21:6e:16:f2:60:35:e5:ec:8f:92:
df:d9:71:65:79:be:60:14:1e:09:c0:9a:27:d8:8e:7b:0f:0c:
36:ab:d1:b8:52:36:54:6e:6e:9e:96:0d:d5:0d:23:c1:cf:48:
24:53:ec:1b:ba:d7:fd:8e:53:89:6e:aa:d7:a3:6f:fc:1a:af:
11:6a:63:58:93:f2:96:9d:e5:44:7c:71:9e:9e:28:8a:1e:7a:
29:43:8c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpN+xsiKp0mo4WueFz7eYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIwOGIxMjljNTNlODdjM2YwZDBlZDFiY2E4NTczMDE0
MGYzOTAwHhcNMjYwNzI0MTUwMTAwWhcNMjYwNzI1MTUwMTAwWjAzMTEwLwYDVQQD
EyhkZjA5OTc3YjE2OGJlZTQ1MzkzMjM4ZWYwNTg1MWQ5OGRlNjFmYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqBw3d+6uGprp0reDHFXIliBuvdd
aAOjeB3oBUd4gr22gPq0/6iAZYi0rr8TWZxZ51CoPuvoVFjt6XHx9nq/JXQnrY3o
OIiYBz3WKA4CRnNzz+rzoL5lXA9D0QDjImCn7m6k2Ao/9iFQndeDoNRFyXVvC7gu
ciW7vnaUye0rwZlSOnB3VDVAnrJdFKNXXAZinCjYV9oS+dJvdF7aytY6yJ+hXMkl
9kPuEOy4aD3098cTkn41x+YFn5tl12zT65tRzFn+T+F9G94fCCZ30LpHkog1snl7
VVQCw/KPNP6wybrJQTwYWzPv66PxmFveQ6auvThx4SU94cPCVqpH+EqRWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8Jl3sWi+5FOTI47wWFHZjeYfvCMB8GA1UdIwQY
MBaAFP+CCLEpxT6Hw/DQ7RvKhXMBQPOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMt
NDAxNTNjNWQwYTQ3LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMtNDAxNTNjNWQwYTQ3
LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0cgYh91
AXmb5tTl4frhCFuuxywBf7Cv2zfSpPxHCV21REKL3xEphAepFOO5o5Cquerghb7A
Mqj73pGdcVNhVYplAkkVV8PDrbvPEGbsS0LCUhZ6dToThMqqL4ffuTyHl/prTvXL
xRCz3Z4zvKPuBCbE2xXZqMeRZsnGhzfT4rBj9hSDGEssDPs4FzfudDRmZa03WDjR
/H6sCVZIZSYTZWTiFYzJj9Db5ZghbhbyYDXl7I+S39lxZXm+YBQeCcCaJ9iOew8M
NqvRuFI2VG5unpYN1Q0jwc9IJFPsG7rX/Y5TiW6q16Nv/BqvEWpjWJPylp3lRHxx
np4oih56KUOMWQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:24 2026 by rpki-client