Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: olBqfmbiSQWmr9UdlzCGG5hhbKdTBI00WahB9mEt6Lo=
Subject key identifier: 63:EC:2E:99:52:53:61:45:5E:D7:4B:3F:F1:68:CE:28:CC:99:02:01
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019F91A39BF72BD7D86099BAEA2557D0ECAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 01:00:46 +0000
Manifest this update: Fri 24 Jul 2026 01:00:46 +0000
Manifest next update: Sat 25 Jul 2026 01:00:46 +0000
Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: thk69W+uGmYw/s+03TC1srnZc6iJHIIi+VYMZu5PvZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:9b:f7:2b:d7:d8:60:99:ba:ea:25:57:d0:ec:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jul 24 01:00:46 2026 GMT
Not After : Jul 25 01:00:46 2026 GMT
Subject: CN=63ec2e99525361455ed74b3ff168ce28cc990201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:b5:13:de:c5:b7:ef:0b:eb:b8:78:81:ec:
2e:36:86:c1:27:1c:12:ee:1c:68:96:78:97:a7:ab:
a4:87:0c:c7:58:d8:96:95:0f:40:ee:99:86:5f:63:
5c:25:d9:dc:5b:d2:a2:00:21:d6:55:51:7f:9e:b0:
eb:b9:db:36:e6:09:65:83:7a:e2:5f:d5:45:14:2d:
36:9b:50:67:2b:e2:08:f4:ad:c4:1b:6d:16:aa:44:
3f:59:7c:77:4b:3e:b4:86:a7:8a:82:30:1c:f7:b0:
91:c4:47:59:b8:ab:52:4d:09:d5:b4:ee:9a:77:5e:
0c:f6:b9:7a:62:7c:93:6c:49:68:2f:7b:b2:4d:44:
85:7b:f1:9a:61:3d:e0:14:dc:e4:ef:08:a8:bb:ec:
30:42:58:d7:a1:ea:22:a9:f1:95:f7:a2:ff:59:47:
53:d2:78:82:e9:b7:7b:95:3c:df:4c:ac:66:f4:46:
f2:5d:93:23:74:1a:b2:81:93:53:ce:ec:a4:64:bb:
64:21:5d:11:39:e4:8a:1e:74:9e:71:b2:5b:16:4b:
f8:f8:f9:75:68:47:6f:d1:14:54:7c:73:f6:00:05:
12:83:29:8a:24:d1:84:4e:60:b5:41:02:36:76:30:
3f:20:54:83:30:c6:e0:69:5d:1a:fa:10:79:94:5b:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:2E:99:52:53:61:45:5E:D7:4B:3F:F1:68:CE:28:CC:99:02:01
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f0:7d:34:36:3b:9c:5e:20:55:f0:f7:30:b2:63:18:c7:10:
df:8a:3f:99:bc:7e:8a:38:d4:be:3f:1b:17:5d:c6:32:5d:22:
bc:1d:5d:17:b4:5b:4c:5f:49:c1:4a:c9:6a:ac:1f:37:97:60:
2f:48:05:61:c3:6e:9a:67:e1:ce:51:1e:14:5b:41:14:fd:51:
e8:66:15:ab:45:dc:a7:6e:c5:72:40:13:5a:f0:c5:fe:9e:3d:
da:17:e0:02:b0:c5:f7:6f:40:91:b4:1e:ae:61:33:d9:18:f7:
47:7c:7b:9d:40:3d:f1:5e:d1:63:45:12:13:5b:99:45:83:b1:
b6:95:96:a1:2d:08:67:43:4b:fe:92:a8:e8:ce:5c:58:75:49:
c1:10:ff:d9:7d:44:b0:ab:07:3b:19:63:01:93:10:bb:07:dc:
b1:5e:4a:e1:24:c5:0c:75:e8:a7:39:3c:7c:ca:0a:73:98:54:
c3:ba:c6:e4:f1:a1:b5:47:c6:85:f0:7d:2b:0a:ed:2f:54:00:
d4:ce:da:6a:9f:5f:c7:7a:80:b1:d5:b8:ae:54:89:ea:59:a7:
c2:30:93:53:31:62:f5:c2:0c:a5:50:53:68:90:0e:f6:d5:07:
29:48:24:c4:bf:4c:93:93:26:3d:68:50:38:42:99:fd:f7:37:
8f:07:da:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro5v3K9fYYJm66iVX0OyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2UzNzE2MTM5NDY1ZTZhOGNmOWY2YmQ4YjViOGY3NjMz
YWYyMjgwHhcNMjYwNzI0MDEwMDQ2WhcNMjYwNzI1MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg2M2VjMmU5OTUyNTM2MTQ1NWVkNzRiM2ZmMTY4Y2UyOGNjOTkwMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6m1E97Ft+8L67h4gewuNobBJxwS
7hxolniXp6ukhwzHWNiWlQ9A7pmGX2NcJdncW9KiACHWVVF/nrDruds25gllg3ri
X9VFFC02m1BnK+II9K3EG20WqkQ/WXx3Sz60hqeKgjAc97CRxEdZuKtSTQnVtO6a
d14M9rl6YnyTbEloL3uyTUSFe/GaYT3gFNzk7wiou+wwQljXoeoiqfGV96L/WUdT
0niC6bd7lTzfTKxm9EbyXZMjdBqygZNTzuykZLtkIV0ROeSKHnSecbJbFkv4+Pl1
aEdv0RRUfHP2AAUSgymKJNGETmC1QQI2djA/IFSDMMbgaV0a+hB5lFueXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPsLplSU2FFXtdLP/FozijMmQIBMB8GA1UdIwQY
MBaAFOE+NxYTlGXmqM+fa9i1uPdjOvIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDct
ZWYxNTcwYzcyNTk5LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDctZWYxNTcwYzcyNTk5
LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/B9NDY7
nF4gVfD3MLJjGMcQ34o/mbx+ijjUvj8bF13GMl0ivB1dF7RbTF9JwUrJaqwfN5dg
L0gFYcNummfhzlEeFFtBFP1R6GYVq0Xcp27FckATWvDF/p492hfgArDF929AkbQe
rmEz2Rj3R3x7nUA98V7RY0USE1uZRYOxtpWWoS0IZ0NL/pKo6M5cWHVJwRD/2X1E
sKsHOxljAZMQuwfcsV5K4STFDHXopzk8fMoKc5hUw7rG5PGhtUfGhfB9KwrtL1QA
1M7aap9fx3qAsdW4rlSJ6lmnwjCTUzFi9cIMpVBTaJAO9tUHKUgkxL9Mk5MmPWhQ
OEKZ/fc3jwfayQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:38:03 2026 by rpki-client