Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: Q3QInZXApuS+hiIPXtEzoL441m2XyXa22BcL/zXull8=
Subject key identifier: FA:FC:1B:CF:F2:35:1D:0D:05:97:16:E1:B2:97:6B:2D:06:84:CE:10
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 019FA304B1E38B71F99377D81A7DCA1D42A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 10E2
Signing time: Mon 27 Jul 2026 10:00:21 +0000
Manifest this update: Mon 27 Jul 2026 10:00:21 +0000
Manifest next update: Tue 28 Jul 2026 10:00:21 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: gSpMvJ7FZQAoi4sz7d033tV8fEsMSG8NExRnMRhlpko=)
2: a9UUQvVUQnxe273U6aniMeuVSV8.roa (hash: 7vEXbXNqwlMSgJyfX4S5RjxAdbJ6vW8VHoOqOei233g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:b1:e3:8b:71:f9:93:77:d8:1a:7d:ca:1d:42:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Jul 27 10:00:21 2026 GMT
Not After : Jul 28 10:00:21 2026 GMT
Subject: CN=fafc1bcff2351d0d059716e1b2976b2d0684ce10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:f5:49:a4:97:b5:ac:5c:b6:70:10:df:16:
93:b7:f8:ff:fb:d3:dd:57:f0:84:03:23:ef:1a:43:
44:ec:91:0f:ef:ca:b5:f8:81:17:ec:da:3c:33:b7:
e4:3a:2a:99:88:fc:c0:fb:b8:06:9f:1e:9f:26:49:
c5:ef:80:62:3e:60:c5:22:46:8e:ca:6f:d4:08:17:
0c:4a:2a:4c:f8:e5:4a:ce:be:0b:ce:95:5a:9f:a9:
5a:ae:13:92:f3:81:87:10:76:b5:97:95:6e:a7:cb:
a6:d1:85:33:86:f2:08:8c:5d:3b:e0:72:9d:71:80:
9e:1e:cf:e4:08:a3:6d:1e:70:df:1a:e9:78:f6:f0:
15:d2:7c:af:e1:02:24:7a:63:0a:cd:52:6f:15:47:
f4:61:4f:4a:22:27:64:91:7e:cb:c9:d3:49:02:46:
26:bd:1d:e5:c4:a3:73:db:c1:d1:b6:e4:b5:0e:77:
f9:b5:c3:6d:75:d9:05:9d:b9:04:79:c5:75:ec:fa:
b9:eb:44:61:c0:57:74:55:d6:a8:d9:39:50:9a:1a:
e3:37:f7:9b:f8:62:cc:11:73:4d:45:fe:8d:fe:6c:
26:4a:c5:9b:6a:32:45:36:ca:9c:e3:2b:86:1e:38:
d7:1e:94:f2:a3:e5:d1:9d:01:66:41:84:77:6e:73:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:1B:CF:F2:35:1D:0D:05:97:16:E1:B2:97:6B:2D:06:84:CE:10
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:d2:52:e1:04:88:1c:20:52:4a:41:68:b3:6d:73:63:ef:
b5:04:e2:80:c2:b7:7f:02:1f:e9:a6:50:79:85:7a:60:88:a1:
2b:04:83:e2:02:83:31:ec:a5:be:d3:b7:d5:2a:5f:ec:ce:95:
1e:0f:d8:8f:31:31:00:48:b7:1d:79:4d:19:a6:3e:dc:a9:bb:
17:5c:2d:9b:5a:cd:12:e5:47:fa:12:d5:38:ab:30:70:0a:4b:
d8:e9:af:c5:0f:e5:be:55:d7:c2:bd:60:a5:c3:72:9f:47:b2:
53:5a:c8:9e:4c:1e:d6:e1:ba:24:ae:bc:be:cf:03:48:2d:95:
b7:f6:2f:e7:93:7e:27:ef:83:27:72:ff:36:72:8a:ed:53:89:
7b:b9:91:aa:b8:28:b7:32:f5:b8:f9:d6:fd:ea:1d:83:31:7d:
ab:89:08:31:27:5b:8a:74:9f:a2:8f:7f:12:54:1d:0d:14:24:
96:34:ff:be:91:bb:0c:79:49:3b:20:be:71:6f:e4:57:91:6a:
c3:51:cc:a0:90:3c:e6:65:c9:6c:69:c9:53:45:90:12:cc:46:
24:18:fe:59:e6:f5:15:83:fa:96:10:d5:06:1f:8b:3a:27:a0:
85:40:7e:73:c3:50:1b:7e:34:16:e1:23:64:58:a0:b5:95:e1:
7d:79:39:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBLHji3H5k3fYGn3KHUKhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMGUzODA1YTFiNGY1YjYxY2ZlNzMwMTBlODM4YzJmMGQy
NWI0NGIwHhcNMjYwNzI3MTAwMDIxWhcNMjYwNzI4MTAwMDIxWjAzMTEwLwYDVQQD
EyhmYWZjMWJjZmYyMzUxZDBkMDU5NzE2ZTFiMjk3NmIyZDA2ODRjZTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLD1SaSXtaxctnAQ3xaTt/j/+9Pd
V/CEAyPvGkNE7JEP78q1+IEX7No8M7fkOiqZiPzA+7gGnx6fJknF74BiPmDFIkaO
ym/UCBcMSipM+OVKzr4LzpVan6larhOS84GHEHa1l5Vup8um0YUzhvIIjF074HKd
cYCeHs/kCKNtHnDfGul49vAV0nyv4QIkemMKzVJvFUf0YU9KIidkkX7LydNJAkYm
vR3lxKNz28HRtuS1Dnf5tcNtddkFnbkEecV17Pq560RhwFd0Vdao2TlQmhrjN/eb
+GLMEXNNRf6N/mwmSsWbajJFNsqc4yuGHjjXHpTyo+XRnQFmQYR3bnMYTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr8G8/yNR0NBZcW4bKXay0GhM4QMB8GA1UdIwQY
MBaAFOIOOAWhtPW2HP5zAQ6DjC8NJbRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEt
YmQzZTdhZGRlOGRlLzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9kMTZlM2UtZWIwOS00ZmI5LTkwODEtYmQzZTdhZGRlOGRl
LzEvNGc0NEJhRzA5YlljX25NQkRvT01MdzBsdEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGzSUuEE
iBwgUkpBaLNtc2PvtQTigMK3fwIf6aZQeYV6YIihKwSD4gKDMeylvtO31Spf7M6V
Hg/YjzExAEi3HXlNGaY+3Km7F1wtm1rNEuVH+hLVOKswcApL2OmvxQ/lvlXXwr1g
pcNyn0eyU1rInkwe1uG6JK68vs8DSC2Vt/Yv55N+J++DJ3L/NnKK7VOJe7mRqrgo
tzL1uPnW/eodgzF9q4kIMSdbinSfoo9/ElQdDRQkljT/vpG7DHlJOyC+cW/kV5Fq
w1HMoJA85mXJbGnJU0WQEsxGJBj+Web1FYP6lhDVBh+LOieghUB+c8NQG340FuEj
ZFigtZXhfXk5Tg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 17:29:07 2026 by rpki-client