Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: p9Zx1XGmkxuthi5o7LfCdTHy+/QsdNiUO5C30XLSNvA=
Subject key identifier: A0:B4:44:20:1D:24:09:4E:EA:DD:FB:32:2C:7F:6C:3E:10:E9:EB:F7
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 019F93C8DA40F9E271BCAE572DA3497B3A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:00:41 +0000
Manifest this update: Fri 24 Jul 2026 11:00:41 +0000
Manifest next update: Sat 25 Jul 2026 11:00:41 +0000
Files and hashes: 1: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: 3Y9sFTEYB2ob77JMQ6IraYD0PmW3ZQkW6IdSx/6dfkk=)
2: TglFPGNOO08n6CcIWPtZA1IiMQ4.roa (hash: /q1UZrCdKL66jU2/r5RlUBwTKqwDKZiHeHHzwJ0UJjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:da:40:f9:e2:71:bc:ae:57:2d:a3:49:7b:3a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Jul 24 11:00:41 2026 GMT
Not After : Jul 25 11:00:41 2026 GMT
Subject: CN=a0b444201d24094eeaddfb322c7f6c3e10e9ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:70:ac:98:1e:15:17:d5:e2:b9:e9:dc:c9:
0b:7b:56:d2:be:e4:6c:fc:b6:ce:6a:6d:97:71:e9:
ee:d8:ef:aa:55:08:73:ca:ff:ad:dd:3e:dc:5e:dd:
17:9a:dd:23:c6:58:1c:7c:8f:4c:30:7e:21:4c:37:
73:c3:5c:82:00:3d:77:30:14:80:bd:59:b1:e5:14:
aa:99:28:c8:9e:1a:6a:c6:09:a1:cc:d7:e9:63:77:
a7:00:82:48:f7:cd:40:58:53:90:8d:bc:2c:ab:92:
e4:09:fc:dd:56:8c:9c:c9:52:df:54:33:87:4a:ba:
0c:0a:d5:5f:20:35:74:59:ed:31:17:11:98:4c:c6:
c3:73:f3:ff:9c:8e:04:91:5f:1e:c1:ec:f8:4c:32:
a1:9f:43:d7:6f:2b:15:ac:38:1c:c6:61:59:35:a2:
3f:bd:04:b2:48:22:71:0b:ca:7c:51:80:1b:3e:55:
45:5e:5e:d6:c9:ba:68:30:e6:84:2c:79:95:c9:70:
61:fc:33:38:b9:a2:64:5d:b3:c4:ef:bf:05:c6:d5:
24:89:f6:89:87:30:97:8a:93:8e:4d:df:25:5a:4e:
e6:3e:05:b8:f1:98:eb:88:7e:3c:2c:da:99:1b:0e:
c8:d7:db:7c:91:19:6f:1f:db:09:38:87:c4:43:33:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B4:44:20:1D:24:09:4E:EA:DD:FB:32:2C:7F:6C:3E:10:E9:EB:F7
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:75:4c:b4:d1:a1:cc:b3:04:7e:42:3b:59:68:c9:81:b3:a9:
42:b0:ce:c3:81:b1:ed:14:4f:2a:fe:32:78:c7:c3:39:ea:25:
74:c3:51:ad:04:1d:fd:e8:49:e7:62:d7:63:2e:7a:13:49:d3:
68:cc:c3:b2:68:a6:8b:fb:62:52:9d:5d:81:4e:08:24:6f:03:
a9:23:9e:b9:df:a0:64:f9:ad:f6:3e:5f:58:5b:be:f5:61:28:
51:dd:03:1e:e7:52:a0:49:87:6c:1b:df:a7:6e:7b:5c:ee:32:
c6:a5:eb:63:f7:91:11:3c:d4:38:88:1b:94:cd:55:5b:19:16:
3a:f5:01:79:76:93:26:a7:ae:71:19:91:a0:8b:ab:6f:6d:55:
bc:67:30:40:94:92:d7:06:3e:5c:85:05:65:0a:9a:b6:70:7b:
62:84:3c:35:d2:00:50:c5:0b:80:5c:e3:19:14:e9:3a:61:24:
d7:9f:67:0f:89:10:19:50:3a:35:69:7a:34:7b:57:64:09:c6:
ca:41:4f:9d:1a:28:30:29:25:a0:3e:a6:07:0f:ea:84:c2:5f:
24:8f:2b:2e:6d:71:18:3b:07:97:5e:c6:fe:6c:69:04:96:36:
02:8e:49:b1:1a:04:1b:87:6e:fd:33:29:fd:a4:bd:2b:d1:2c:
b9:81:94:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyNpA+eJxvK5XLaNJezoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOTZjNDMzNjQwMDNlYzNmN2Y3YzZlYTgxNTdiOGE1MGY0
NDBlY2MwHhcNMjYwNzI0MTEwMDQxWhcNMjYwNzI1MTEwMDQxWjAzMTEwLwYDVQQD
EyhhMGI0NDQyMDFkMjQwOTRlZWFkZGZiMzIyYzdmNmMzZTEwZTllYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BhwrJgeFRfV4rnp3MkLe1bSvuRs
/LbOam2Xcenu2O+qVQhzyv+t3T7cXt0Xmt0jxlgcfI9MMH4hTDdzw1yCAD13MBSA
vVmx5RSqmSjInhpqxgmhzNfpY3enAIJI981AWFOQjbwsq5LkCfzdVoycyVLfVDOH
SroMCtVfIDV0We0xFxGYTMbDc/P/nI4EkV8ewez4TDKhn0PXbysVrDgcxmFZNaI/
vQSySCJxC8p8UYAbPlVFXl7WybpoMOaELHmVyXBh/DM4uaJkXbPE778FxtUkifaJ
hzCXipOOTd8lWk7mPgW48ZjriH48LNqZGw7I19t8kRlvH9sJOIfEQzNB3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC0RCAdJAlO6t37Mix/bD4Q6ev3MB8GA1UdIwQY
MBaAFOCWxDNkAD7D9/fG6oFXuKUPRA7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2Ut
M2E4NWVlNGM4OWJjLzEvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jM2JjZTYtNThmYi00ODc0LThiM2UtM2E4NWVlNGM4OWJj
LzEvNEpiRU0yUUFQc1AzOThicWdWZTRwUTlFRHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHVMtNGh
zLMEfkI7WWjJgbOpQrDOw4Gx7RRPKv4yeMfDOeoldMNRrQQd/ehJ52LXYy56E0nT
aMzDsmimi/tiUp1dgU4IJG8DqSOeud+gZPmt9j5fWFu+9WEoUd0DHudSoEmHbBvf
p257XO4yxqXrY/eRETzUOIgblM1VWxkWOvUBeXaTJqeucRmRoIurb21VvGcwQJSS
1wY+XIUFZQqatnB7YoQ8NdIAUMULgFzjGRTpOmEk159nD4kQGVA6NWl6NHtXZAnG
ykFPnRooMCkloD6mBw/qhMJfJI8rLm1xGDsHl17G/mxpBJY2Ao5JsRoEG4du/TMp
/aS9K9EsuYGUdA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:05 2026 by rpki-client