Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier: MtBSoJ3myJDOAxk6Ofr/SpuYL6P1moAepPPcZAAxOnw=
Subject key identifier: E2:A3:9E:E9:D0:AE:3F:DD:57:A2:47:DA:00:B0:51:EE:9F:89:10:38
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 019F81FA8A6D40C4090F9848FBFE5B2E2B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number: 128D
Signing time: Tue 21 Jul 2026 00:01:48 +0000
Manifest this update: Tue 21 Jul 2026 00:01:48 +0000
Manifest next update: Wed 22 Jul 2026 00:01:48 +0000
Files and hashes: 1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: 9UptTH+KQGtYSMOVQpSmnG/wsziM/KNTH4wXTsVe1mI=)
2: DN7ZfyoDKyJXUkj1EC6pJ1I4DkQ.roa (hash: bY5wbQ98GBM8x3W74YxZg+qztKUip/POgTeTbjHHMZI=)
3: p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa (hash: 9OCWuqN8cdwaFpWbH6S/GLnMMyvjYjVk46dDsDdpR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:fa:8a:6d:40:c4:09:0f:98:48:fb:fe:5b:2e:2b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Jul 21 00:01:48 2026 GMT
Not After : Jul 22 00:01:48 2026 GMT
Subject: CN=e2a39ee9d0ae3fdd57a247da00b051ee9f891038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:7a:d8:e7:60:be:29:c1:6f:f9:ce:f7:eb:
3a:e2:9f:90:c8:c3:ac:a8:ec:4a:0f:40:dd:c2:1b:
79:22:f6:5f:0c:81:6e:ee:1c:62:f1:1d:9b:3a:95:
4d:c3:d1:30:77:79:78:97:ff:93:87:17:6f:42:ca:
1c:4a:18:6a:b0:80:b9:f1:14:bc:62:82:8e:6d:ea:
8d:5c:b5:81:3f:23:04:bb:ed:cd:05:d5:9a:5e:25:
64:37:3b:d0:6f:94:7a:35:10:74:85:d6:a8:5f:66:
de:67:f2:80:fe:21:6a:8e:d1:f9:22:cb:ce:25:c7:
12:48:45:16:cf:24:9f:43:d6:69:8a:bd:93:76:89:
85:a6:65:f6:62:a6:8f:d7:8c:ba:41:96:d3:5c:3c:
3b:d1:8e:1d:d6:65:c5:9e:4b:43:cc:73:08:db:00:
20:20:c5:4f:fd:5a:c9:e8:47:aa:a2:9d:22:b8:3c:
c6:21:93:cf:9b:a6:1a:1b:80:57:69:7e:c2:f2:c1:
91:c9:db:35:02:8c:0e:bf:83:b3:51:b2:6d:6d:bf:
83:38:25:79:3b:64:e3:27:6a:9e:c8:1f:75:80:18:
3b:46:fa:5c:ed:92:9d:f9:91:1c:c9:e9:a0:bf:4b:
cf:43:27:aa:3c:c3:90:dd:c9:59:59:50:02:3a:2c:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:9E:E9:D0:AE:3F:DD:57:A2:47:DA:00:B0:51:EE:9F:89:10:38
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:0e:01:cb:0d:18:df:23:16:15:e4:a3:5e:b5:11:7e:14:86:
77:5a:d5:89:d8:6f:47:9a:bb:70:a9:cd:c2:77:17:0c:da:3d:
32:00:5c:31:2c:6c:44:83:ad:ce:66:9c:64:4f:c6:fb:8b:57:
4d:c9:72:d2:7e:da:c8:85:f2:8f:34:d4:f5:44:7b:09:04:5e:
68:4c:d3:2a:fc:cd:28:e9:3c:63:6b:07:75:b6:f8:d6:67:21:
d6:7c:21:5c:be:86:37:c7:e9:09:5f:20:0f:d2:e4:30:20:7d:
58:d7:05:6a:63:50:2d:f6:84:90:ea:e2:7c:b8:72:db:0f:21:
b2:0c:22:ec:0e:84:54:c2:e6:a4:5a:92:01:e2:9e:4c:89:4b:
1d:6c:12:c7:93:a9:39:fc:f0:7a:dc:f0:96:31:3d:71:73:28:
d8:49:eb:94:4e:26:4a:24:d2:25:7e:52:12:27:09:f3:bc:3d:
02:77:a1:cc:94:ec:ba:18:0a:06:e3:64:dd:ce:45:48:c7:84:
90:32:4d:27:08:7e:37:e2:a6:51:c8:fb:8a:ae:c3:c8:37:fe:
a1:02:b6:b7:ef:92:b7:0c:b9:d5:61:43:f4:6e:95:c8:bd:63:
e1:6e:44:03:4b:90:fd:6e:32:b3:43:4c:41:55:ea:be:a5:20:
69:b9:51:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+B+optQMQJD5hI+/5bLiuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTcyMmQ3OWJmZjQzODRhNTk3Y2I1NDRkOWU3OTc0NDkw
ZDg3MzQwHhcNMjYwNzIxMDAwMTQ4WhcNMjYwNzIyMDAwMTQ4WjAzMTEwLwYDVQQD
EyhlMmEzOWVlOWQwYWUzZmRkNTdhMjQ3ZGEwMGIwNTFlZTlmODkxMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKx62OdgvinBb/nO9+s64p+QyMOs
qOxKD0Ddwht5IvZfDIFu7hxi8R2bOpVNw9Ewd3l4l/+ThxdvQsocShhqsIC58RS8
YoKObeqNXLWBPyMEu+3NBdWaXiVkNzvQb5R6NRB0hdaoX2beZ/KA/iFqjtH5IsvO
JccSSEUWzySfQ9Zpir2TdomFpmX2YqaP14y6QZbTXDw70Y4d1mXFnktDzHMI2wAg
IMVP/VrJ6Eeqop0iuDzGIZPPm6YaG4BXaX7C8sGRyds1AowOv4OzUbJtbb+DOCV5
O2TjJ2qeyB91gBg7Rvpc7ZKd+ZEcyemgv0vPQyeqPMOQ3clZWVACOiyhmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKjnunQrj/dV6JH2gCwUe6fiRA4MB8GA1UdIwQY
MBaAFOMXIteb/0OEpZfLVE2eeXRJDYc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iNTU1OWUtOTUwYi00OGY0LWEyYWIt
YjI2ZjFhNzBhZjBkLzEvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iNTU1OWUtOTUwYi00OGY0LWEyYWItYjI2ZjFhNzBhZjBk
LzEvNHhjaTE1dl9RNFNsbDh0VVRaNTVkRWtOaHpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2A4Byw0Y
3yMWFeSjXrURfhSGd1rVidhvR5q7cKnNwncXDNo9MgBcMSxsRIOtzmacZE/G+4tX
Tcly0n7ayIXyjzTU9UR7CQReaEzTKvzNKOk8Y2sHdbb41mch1nwhXL6GN8fpCV8g
D9LkMCB9WNcFamNQLfaEkOrifLhy2w8hsgwi7A6EVMLmpFqSAeKeTIlLHWwSx5Op
OfzwetzwljE9cXMo2EnrlE4mSiTSJX5SEicJ87w9AnehzJTsuhgKBuNk3c5FSMeE
kDJNJwh+N+KmUcj7iq7DyDf+oQK2t++Stwy51WFD9G6VyL1j4W5EA0uQ/W4ys0NM
QVXqvqUgablRWw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:50 2026 by rpki-client