Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: WZm1gmvj6u8pSnjWfJS604FSQ8nAcQjMVEmW+Jjj0QM=
Subject key identifier: DA:86:4D:96:9D:B2:58:7C:0F:1C:6F:A9:9C:79:FD:03:18:EF:0C:9C
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 01A0005CD235B59B299F1F4F217F0D51DFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0F12
Signing time: Fri 14 Aug 2026 13:01:18 +0000
Manifest this update: Fri 14 Aug 2026 13:01:18 +0000
Manifest next update: Sat 15 Aug 2026 13:01:18 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: bsWxCy4CNJiNqaEUUhUewG6JYWcF4WEPunh84iaS/9w=)
2: 9WoXYCC1VJqnbGFNUpMF4rAgukA.asa (hash: 4Zq19YZTaukYMmJEdYX0CF4BWbwlExA/FZSk3vxkg/k=)
3: C9aXP0xnVks0GG--bUI7lSn9Og4.roa (hash: 7iquRG4sj7MdDkAUl6cu4d537zzGxzoS3U6EkDKWErY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:d2:35:b5:9b:29:9f:1f:4f:21:7f:0d:51:df:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Aug 14 13:01:18 2026 GMT
Not After : Aug 15 13:01:18 2026 GMT
Subject: CN=da864d969db2587c0f1c6fa99c79fd0318ef0c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:cc:01:25:b3:fa:8a:bd:9e:56:08:dc:d4:
c6:29:2a:c4:b6:26:59:d9:2b:6f:52:f2:a7:f1:51:
12:73:e5:f9:ff:42:04:a6:ea:d9:27:a1:4a:a7:5b:
17:c6:5a:30:28:6f:39:f0:f6:e0:3c:ab:4e:e2:b6:
69:07:79:04:bc:bc:58:48:83:8b:8a:09:23:5c:dc:
00:3f:cf:99:3b:df:f1:23:0c:36:24:16:2a:c0:d5:
62:7a:a8:35:4c:bb:bf:cd:96:9e:a2:b3:bf:db:66:
05:27:55:66:86:d4:99:00:c4:c0:46:5a:fa:95:e3:
f9:93:87:72:07:8a:6a:6d:1f:3d:03:ce:2e:9b:16:
4b:0b:64:79:0a:50:00:d0:4f:ee:b7:27:15:46:29:
c5:60:7a:3a:86:af:76:c3:af:ad:9d:df:8f:0f:41:
02:d9:c4:e9:1e:f2:f4:0f:15:08:c0:f0:7b:2d:44:
63:4c:33:3f:b1:bc:a1:df:0a:47:d4:ca:e1:b8:36:
0d:3b:87:05:5a:6c:5f:25:b3:97:cf:7d:05:03:15:
87:12:e2:bf:d9:a8:d2:76:b9:c6:ae:1f:a9:6b:87:
b5:b9:15:88:76:d6:6e:02:ea:84:67:e5:6b:eb:9c:
86:ac:c7:bd:c7:2c:84:e3:af:38:ed:28:d5:3d:f9:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:4D:96:9D:B2:58:7C:0F:1C:6F:A9:9C:79:FD:03:18:EF:0C:9C
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:92:c0:71:29:28:16:b1:a2:43:d3:b5:f3:bf:dc:57:34:63:
30:34:72:f6:98:5b:a9:eb:2d:72:0d:3e:77:66:a9:2c:1d:21:
6b:85:6a:cf:b6:b9:7c:6c:63:2e:d3:b8:a4:f1:b1:66:e8:f2:
06:77:99:9d:1c:92:cb:4a:4c:bf:7b:e7:60:1b:16:25:79:45:
3d:4e:86:e4:f5:83:a1:24:f5:6e:7f:e8:ae:05:eb:9d:2e:4d:
ca:e7:69:ae:ae:04:a1:bb:85:4f:f4:a5:04:14:e6:80:da:70:
b4:67:e6:66:cf:26:cb:6e:b1:24:fc:aa:48:6f:95:aa:42:8e:
41:f2:9d:69:14:83:b9:11:04:da:0f:de:08:1f:ce:45:a2:d1:
28:17:2f:b0:ad:80:8b:7e:cb:d9:14:58:6d:00:97:7e:e1:81:
c5:10:f9:14:68:92:ca:5f:e5:f6:fb:1c:37:d0:de:31:f9:e6:
10:ee:3f:7e:58:9d:dc:55:96:e9:6d:69:79:25:a7:91:42:a6:
b1:fb:3e:11:10:b1:bd:2a:3c:17:5e:11:9c:38:24:a9:ee:83:
d1:65:00:43:ae:f5:07:f0:a9:12:e6:5e:de:7f:b8:5f:02:f3:
2e:76:60:7d:bb:e0:19:d6:2a:ba:a1:82:ec:c7:38:01:7d:6e:
5d:d8:95:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXNI1tZspnx9PIX8NUd/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjliMzdlYjYzMDY4NmIxMzI4MzM4NDcxYjUyZGE5NWQy
MDQ5MTEwHhcNMjYwODE0MTMwMTE4WhcNMjYwODE1MTMwMTE4WjAzMTEwLwYDVQQD
EyhkYTg2NGQ5NjlkYjI1ODdjMGYxYzZmYTk5Yzc5ZmQwMzE4ZWYwYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2PMASWz+oq9nlYI3NTGKSrEtiZZ
2StvUvKn8VESc+X5/0IEpurZJ6FKp1sXxlowKG858PbgPKtO4rZpB3kEvLxYSIOL
igkjXNwAP8+ZO9/xIww2JBYqwNVieqg1TLu/zZaeorO/22YFJ1VmhtSZAMTARlr6
leP5k4dyB4pqbR89A84umxZLC2R5ClAA0E/utycVRinFYHo6hq92w6+tnd+PD0EC
2cTpHvL0DxUIwPB7LURjTDM/sbyh3wpH1MrhuDYNO4cFWmxfJbOXz30FAxWHEuK/
2ajSdrnGrh+pa4e1uRWIdtZuAuqEZ+Vr65yGrMe9xyyE46847SjVPfl+pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqGTZadslh8DxxvqZx5/QMY7wycMB8GA1UdIwQY
MBaAFOIps362MGhrEygzhHG1LaldIEkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMt
N2RlOGQ4YzJlOTMwLzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83NDUwMjQtOWUzNy00NzkwLTg2YWMtN2RlOGQ4YzJlOTMw
LzEvNGltemZyWXdhR3NUS0RPRWNiVXRxVjBnU1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpLAcSko
FrGiQ9O187/cVzRjMDRy9phbqestcg0+d2apLB0ha4Vqz7a5fGxjLtO4pPGxZujy
BneZnRySy0pMv3vnYBsWJXlFPU6G5PWDoST1bn/orgXrnS5Nyudprq4EobuFT/Sl
BBTmgNpwtGfmZs8my26xJPyqSG+VqkKOQfKdaRSDuREE2g/eCB/ORaLRKBcvsK2A
i37L2RRYbQCXfuGBxRD5FGiSyl/l9vscN9DeMfnmEO4/flid3FWW6W1peSWnkUKm
sfs+ERCxvSo8F14RnDgkqe6D0WUAQ671B/CpEuZe3n+4XwLzLnZgfbvgGdYquqGC
7Mc4AX1uXdiVqw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:00 2026 by rpki-client