Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
File: 4jBenNZCPdAyhv7s9V25OwYoL_E.mft (raw, json)
Hash identifier: Ndx3dEWezJL/3HdTpMnkFEQ51uC4ng7CtksoDI34cfs=
Subject key identifier: DB:73:8D:F4:75:86:4F:48:7E:27:0C:35:18:8B:75:01:8D:95:59:5E
Authority key identifier: E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
Certificate issuer: /CN=e2305e9cd6423dd03286feecf55db93b06282ff1
Certificate serial: 019F85D5E8C575BA60BC780D8E9974BC4C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:16 +0000
Manifest this update: Tue 21 Jul 2026 18:00:16 +0000
Manifest next update: Wed 22 Jul 2026 18:00:16 +0000
Files and hashes: 1: 4jBenNZCPdAyhv7s9V25OwYoL_E.crl (hash: 72JBkYVU06Jz5jmUikemNZGe+NxLBYU4Ep4L2/jmum4=)
2: LVdIDfbMJKbERE5iYpHj8ZRNKUA.roa (hash: dWz7dfTbtMU4DCAgJCXkJIju9IrVB5fnVpUt4hweyxU=)
3: euykv0FyncRwBQFkywZp-52bpgQ.roa (hash: ZOJbGj8NVyHjzXHRINSmo5KX6o2s1DTTLNtkxOa4CQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:e8:c5:75:ba:60:bc:78:0d:8e:99:74:bc:4c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2305e9cd6423dd03286feecf55db93b06282ff1
Validity
Not Before: Jul 21 18:00:16 2026 GMT
Not After : Jul 22 18:00:16 2026 GMT
Subject: CN=db738df475864f487e270c35188b75018d95595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:bc:be:e5:b2:8c:14:09:40:e5:44:52:46:
79:0d:ac:e2:45:86:41:13:54:d9:d9:5c:4f:de:b9:
7c:56:8d:f3:bb:4e:52:7b:e4:6e:b5:67:da:22:31:
28:6d:92:9f:28:c2:0b:0c:16:8d:28:47:9c:74:7c:
a8:b6:06:c7:cd:9d:37:c7:6f:8d:d1:b1:d5:49:b7:
9f:4d:69:73:07:96:78:ec:0d:6a:0c:8d:e0:b9:e1:
f2:28:b0:77:ca:e1:c4:d7:95:64:07:4f:66:4c:09:
68:a2:98:e3:e7:0b:dc:b7:b8:93:b2:77:d1:10:38:
81:6b:3e:81:58:88:23:e0:11:f7:4c:fd:75:28:0e:
5e:0f:8b:15:5c:05:a1:bf:d6:04:b1:57:97:61:c3:
46:4d:34:d0:1d:b4:16:a3:d0:a4:73:dd:30:12:fe:
5a:bc:ad:04:4b:c5:29:a4:80:97:96:a0:3a:8d:98:
84:6c:66:67:b7:06:4c:a7:ea:60:18:02:a4:0f:01:
a7:68:4d:8a:0a:3b:dd:03:bc:d6:2d:16:2f:57:d5:
ea:59:0a:25:dc:a9:ab:b1:5c:da:4b:da:a1:a7:3f:
99:0d:a2:90:a4:4a:c5:b4:32:68:c9:31:bb:f3:21:
99:1d:bc:c5:43:eb:06:6d:81:9f:72:b9:d5:d3:5a:
4c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:8D:F4:75:86:4F:48:7E:27:0C:35:18:8B:75:01:8D:95:59:5E
X509v3 Authority Key Identifier:
keyid:E2:30:5E:9C:D6:42:3D:D0:32:86:FE:EC:F5:5D:B9:3B:06:28:2F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jBenNZCPdAyhv7s9V25OwYoL_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/4jBenNZCPdAyhv7s9V25OwYoL_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:71:39:1c:64:97:7b:14:2b:f0:1c:7b:51:ca:c0:c4:35:72:
5f:4f:99:d9:2d:e5:ae:cf:2d:1a:7c:2d:c7:a7:a4:e7:fd:72:
a2:5b:fa:98:4a:12:20:1b:27:ab:3f:5b:6d:c6:c5:a5:87:71:
70:88:bf:f4:64:0d:62:53:fa:6f:0e:43:b8:41:61:c4:80:c5:
95:62:b3:c8:81:69:ce:aa:3d:ed:8c:39:c8:58:25:1e:f2:8d:
a2:11:94:e3:bf:5e:38:8a:ae:b0:58:b1:df:a6:0a:6b:61:ff:
74:2d:c0:59:f6:69:bb:0e:45:8b:9d:6f:aa:de:bb:4a:6c:0a:
0b:66:e3:11:0f:62:a0:bd:82:ed:b0:b2:8d:5f:82:11:f4:c0:
07:ac:15:4c:4e:fb:f2:cf:e7:ff:fc:cf:b9:fd:fe:83:36:8a:
4f:f4:c7:06:37:78:e6:e3:61:38:42:b4:27:34:7b:9a:4d:46:
94:b5:b8:6d:6f:b2:74:7d:1a:30:99:14:2b:b0:fd:5a:f2:bb:
65:d3:6c:0d:a7:e9:7b:b4:17:42:92:e3:12:b4:46:47:e8:5f:
05:66:31:50:4a:01:40:14:88:9c:25:f5:e9:f7:8d:ae:95:bf:
45:42:c8:de:ac:d3:b2:e8:f7:14:e6:7c:28:fb:70:95:e2:8f:
47:74:68:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F1ejFdbpgvHgNjpl0vEybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzA1ZTljZDY0MjNkZDAzMjg2ZmVlY2Y1NWRiOTNiMDYy
ODJmZjEwHhcNMjYwNzIxMTgwMDE2WhcNMjYwNzIyMTgwMDE2WjAzMTEwLwYDVQQD
EyhkYjczOGRmNDc1ODY0ZjQ4N2UyNzBjMzUxODhiNzUwMThkOTU1OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfm8vuWyjBQJQOVEUkZ5DaziRYZB
E1TZ2VxP3rl8Vo3zu05Se+RutWfaIjEobZKfKMILDBaNKEecdHyotgbHzZ03x2+N
0bHVSbefTWlzB5Z47A1qDI3gueHyKLB3yuHE15VkB09mTAloopjj5wvct7iTsnfR
EDiBaz6BWIgj4BH3TP11KA5eD4sVXAWhv9YEsVeXYcNGTTTQHbQWo9Ckc90wEv5a
vK0ES8UppICXlqA6jZiEbGZntwZMp+pgGAKkDwGnaE2KCjvdA7zWLRYvV9XqWQol
3KmrsVzaS9qhpz+ZDaKQpErFtDJoyTG78yGZHbzFQ+sGbYGfcrnV01pMwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtzjfR1hk9IficMNRiLdQGNlVleMB8GA1UdIwQY
MBaAFOIwXpzWQj3QMob+7PVduTsGKC/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpCZW5OWkNQZEF5aHY3czlWMjVPd1lvTF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjIt
YzdlMjUyMGM0Y2VhLzEvNGpCZW5OWkNQZEF5aHY3czlWMjVPd1lvTF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZTgyZDEtMTU3NS00N2MxLTlmMjItYzdlMjUyMGM0Y2Vh
LzEvNGpCZW5OWkNQZEF5aHY3czlWMjVPd1lvTF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHE5HGSX
exQr8Bx7UcrAxDVyX0+Z2S3lrs8tGnwtx6ek5/1yolv6mEoSIBsnqz9bbcbFpYdx
cIi/9GQNYlP6bw5DuEFhxIDFlWKzyIFpzqo97Yw5yFglHvKNohGU479eOIqusFix
36YKa2H/dC3AWfZpuw5Fi51vqt67SmwKC2bjEQ9ioL2C7bCyjV+CEfTAB6wVTE77
8s/n//zPuf3+gzaKT/THBjd45uNhOEK0JzR7mk1GlLW4bW+ydH0aMJkUK7D9WvK7
ZdNsDafpe7QXQpLjErRGR+hfBWYxUEoBQBSInCX16feNrpW/RULI3qzTsuj3FOZ8
KPtwleKPR3RoFA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:58 2026 by rpki-client