Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: lEhvSGz8pOzXTyyEnk6qxyu3/C1WnotELjNBJD4KhAg=
Subject key identifier: 43:35:45:20:0E:CC:D1:37:1C:D6:A0:6A:D3:1A:37:B3:F1:61:69:07
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019F85D63551294D06AA6D6C45BBB40D5F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 19C9
Signing time: Tue 21 Jul 2026 18:00:35 +0000
Manifest this update: Tue 21 Jul 2026 18:00:35 +0000
Manifest next update: Wed 22 Jul 2026 18:00:35 +0000
Files and hashes: 1: 2KPw1cvbm50f0LYM14wl1jqJ9og.roa (hash: A1Jjz4VQ5P7K7cWtSDzEEjwDvup5VASHzuFeW68IpQ8=)
2: 4DjthTFuBFBUicM1fyQrr1R-zpA.roa (hash: /khTTdB4MFujwhgprh1GKjQ5sevdR189YyvZSZEdlvw=)
3: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: 2VrFXMCU8DIuOGuByAf/m/57Rz1mK9kwYSKX3AhxaZU=)
4: 7pxmMXSw-HkZG9cAZnnYN-vEkfQ.roa (hash: mEU3VRJ8fuQ7izupJUqVvL0qdRuIxFLkUNg5UpgN7ss=)
5: 8OlOEZgObzEvy1E8VmktgWUdQi0.roa (hash: vpY2iql20BkJOzJyUWVMsBYvSfuAgM3xo1h/baltqkw=)
6: IbI54r9UQEycQUhSG_R7IhAl23w.roa (hash: Xsth8W4XkRG829Saw23qV/fuk3mylDa5vQqSxMBq6Os=)
7: kaNSS3H8CcGwyEb9L0LHfodkCbI.asa (hash: w3bZtfnN5MHgcG0AWFUlSLsnuz4fMXs0k06prQh3OWE=)
8: mxy-X6DSpF8ZztbUQjMZo4HUfAM.roa (hash: 8VsFON9Y1Ltuj+mPJYLJdGhQhe4GbTQ4L4kgjue4VFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:35:51:29:4d:06:aa:6d:6c:45:bb:b4:0d:5f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Jul 21 18:00:35 2026 GMT
Not After : Jul 22 18:00:35 2026 GMT
Subject: CN=433545200eccd1371cd6a06ad31a37b3f1616907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:c9:bb:3f:18:4b:97:28:02:3b:c2:bf:87:
ff:bd:8e:cc:be:8e:f1:c8:03:0c:0d:33:18:c4:f7:
da:ac:c7:11:b6:1a:c1:60:d4:44:2f:af:02:6e:19:
07:3d:f1:e6:26:15:4b:8b:84:0e:3e:36:51:c8:f8:
c3:96:5e:34:4a:aa:59:07:32:1b:88:48:a0:1f:1d:
64:ed:91:ea:b7:bb:1b:41:c2:96:53:c3:2f:be:ec:
e9:a8:20:3c:b6:ac:a1:35:1f:33:17:8d:86:ff:32:
fa:b8:15:1f:95:c9:24:2e:a5:48:22:50:14:15:9b:
30:8b:0a:1e:4d:cb:03:76:bb:ec:e2:e3:05:69:88:
3c:be:91:80:5f:15:fe:e4:5b:22:13:5b:e1:62:2b:
be:d1:4a:19:20:3b:6d:c3:19:9c:65:5b:78:1f:18:
53:3b:4e:e1:f9:58:8d:17:5b:9b:fb:75:f4:41:b7:
64:75:40:2e:8b:84:12:3f:be:f7:82:c3:4a:07:69:
93:92:bb:63:4f:de:0d:82:30:e1:32:c9:9f:b4:6a:
59:c3:e8:83:f9:90:35:c8:5b:83:50:98:c7:59:49:
7b:7c:1e:3e:c9:9a:ef:22:de:2b:3b:55:22:f3:36:
62:8e:d1:2d:3c:0c:6e:b9:90:db:c3:49:bc:70:84:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:35:45:20:0E:CC:D1:37:1C:D6:A0:6A:D3:1A:37:B3:F1:61:69:07
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a5:31:40:f9:3f:0e:61:21:67:5f:51:3f:9b:3a:aa:1f:a5:
03:b0:de:34:da:bb:81:24:90:8c:ad:37:a7:ba:6e:dd:f2:38:
d2:68:db:1b:e7:25:af:88:7e:d3:c6:ea:7e:b9:f2:a2:56:11:
40:32:66:24:99:77:2b:73:f6:af:ca:c6:ef:03:cf:01:a7:07:
32:08:4f:b1:b1:b2:a7:3c:dc:e2:ef:99:cb:f7:7f:a1:6a:f8:
20:3f:00:c3:56:56:3a:f2:62:fa:aa:58:aa:01:fd:0b:f8:42:
45:e8:8a:fc:91:6f:6b:e0:a5:0c:60:88:7d:06:11:d2:34:dd:
33:6a:56:86:3d:26:30:b8:91:b6:06:a6:6e:c4:5c:93:f7:40:
a1:15:82:ed:83:2b:ff:f6:e3:68:aa:02:ff:0c:59:d2:96:29:
a9:60:64:47:35:b4:da:fa:9d:b4:43:e4:bf:17:2d:fb:ed:7d:
89:1b:5c:6e:8d:b1:19:e9:77:f8:63:e7:0d:e7:bb:19:be:5b:
ab:51:08:6a:1d:9e:ce:67:52:37:a3:4e:64:1a:2b:07:aa:10:
a3:0a:65:91:6f:1a:41:67:05:ea:8a:14:7c:15:4f:47:05:02:
6f:6f:91:ad:e6:c0:66:79:7a:51:e0:b6:90:50:31:ad:83:47:
e1:99:19:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1jVRKU0Gqm1sRbu0DV9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODY2ZTVhN2M3MjVkY2I2YTEzOGNjNmMzNDBjZmRhZDQz
MTVkM2UwHhcNMjYwNzIxMTgwMDM1WhcNMjYwNzIyMTgwMDM1WjAzMTEwLwYDVQQD
Eyg0MzM1NDUyMDBlY2NkMTM3MWNkNmEwNmFkMzFhMzdiM2YxNjE2OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArojJuz8YS5coAjvCv4f/vY7Mvo7x
yAMMDTMYxPfarMcRthrBYNREL68CbhkHPfHmJhVLi4QOPjZRyPjDll40SqpZBzIb
iEigHx1k7ZHqt7sbQcKWU8MvvuzpqCA8tqyhNR8zF42G/zL6uBUflckkLqVIIlAU
FZswiwoeTcsDdrvs4uMFaYg8vpGAXxX+5FsiE1vhYiu+0UoZIDttwxmcZVt4HxhT
O07h+ViNF1ub+3X0QbdkdUAui4QSP773gsNKB2mTkrtjT94NgjDhMsmftGpZw+iD
+ZA1yFuDUJjHWUl7fB4+yZrvIt4rO1Ui8zZijtEtPAxuuZDbw0m8cIQsswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEM1RSAOzNE3HNagatMaN7PxYWkHMB8GA1UdIwQY
MBaAFOCGblp8cl3LahOMxsNAz9rUMV0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEladVdueHlYY3RxRTR6R3cwRFAydFF4WFQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83YmE4NzctNDgzOS00NzE3LThhYTQt
MjQ0MTliODc2ZjA4LzEvNEladVdueHlYY3RxRTR6R3cwRFAydFF4WFQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83YmE4NzctNDgzOS00NzE3LThhYTQtMjQ0MTliODc2ZjA4
LzEvNEladVdueHlYY3RxRTR6R3cwRFAydFF4WFQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6UxQPk/
DmEhZ19RP5s6qh+lA7DeNNq7gSSQjK03p7pu3fI40mjbG+clr4h+08bqfrnyolYR
QDJmJJl3K3P2r8rG7wPPAacHMghPsbGypzzc4u+Zy/d/oWr4ID8Aw1ZWOvJi+qpY
qgH9C/hCReiK/JFva+ClDGCIfQYR0jTdM2pWhj0mMLiRtgambsRck/dAoRWC7YMr
//bjaKoC/wxZ0pYpqWBkRzW02vqdtEPkvxct++19iRtcbo2xGel3+GPnDee7Gb5b
q1EIah2ezmdSN6NOZBorB6oQowplkW8aQWcF6ooUfBVPRwUCb2+RrebAZnl6UeC2
kFAxrYNH4ZkZdQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:59 2026 by rpki-client