
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File: N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier: 70zLo3/HBxOhpeepBSKABGhLIoXqidFxx82mHDaz8iM=
Subject key identifier: 84:47:62:1E:D3:72:9F:90:F3:6B:DB:6E:8B:A0:5B:70:9D:D0:8F:16
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 019FAAF5CDA084E4810842E0086151FF4AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 23:01:03 +0000
Manifest this update: Tue 28 Jul 2026 23:01:03 +0000
Manifest next update: Wed 29 Jul 2026 23:01:03 +0000
Files and hashes: 1: 2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa (hash: ZSsnNRN6qb6nlLwR6tJUMByyx0s8BQTn0qVgNGvcWZc=)
2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: xaUzNUTOah2bctWtYrAXe+wgQeK8oMYHAw8IHahheTM=)
3: Ol3Cdb1XyRY6urO3sw4yVDwme94.roa (hash: tfUvfQzgGXJJiO1C8x+8AL672Tfl8NCYZs94wHKASfw=)
4: fJoKECLKUeD5DLyAzQSfUcqojno.roa (hash: 3zNqg/msTStClL6VJhx0R8PHg/rjNiAgrUFnWqVj+Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:cd:a0:84:e4:81:08:42:e0:08:61:51:ff:4a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Jul 28 23:01:03 2026 GMT
Not After : Jul 29 23:01:03 2026 GMT
Subject: CN=8447621ed3729f90f36bdb6e8ba05b709dd08f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:fb:11:3d:d2:50:6e:87:61:0a:dd:c5:12:
84:65:96:a6:c9:40:81:8c:71:93:5f:32:b8:7b:c3:
e1:9c:e0:af:68:c2:3e:7d:b8:fa:33:d0:95:29:ec:
3c:9b:43:f6:38:ef:63:a5:90:91:d3:9b:78:c3:58:
54:84:e2:1c:f0:6b:e2:f4:f9:a8:84:b5:1b:8e:c8:
52:a6:11:b5:a6:fd:50:3f:40:57:f0:ea:bd:32:45:
47:7f:c0:03:c8:63:1d:cb:88:08:08:24:0e:de:42:
f8:ab:76:38:72:52:75:4f:27:11:25:aa:b6:c3:31:
02:cb:b0:5b:ef:54:51:c1:cb:fd:2d:11:2c:ae:bb:
46:22:2f:a3:43:42:01:cc:fc:c9:8a:4b:a7:de:f9:
77:01:5f:76:36:d7:be:ab:7c:da:58:e1:88:63:4b:
a0:88:c6:62:8b:2c:fb:b5:55:e0:0c:d5:f3:26:b0:
d7:a7:1a:73:c7:c5:56:f1:51:6c:f3:35:54:c3:50:
1c:7c:10:4b:b2:f7:db:60:0c:f8:44:d7:e0:39:54:
79:ff:0a:27:2c:b4:5b:c5:54:fb:25:5f:f8:a2:19:
af:09:25:11:f8:67:c3:59:0e:5c:a9:de:ca:2c:58:
f0:ad:15:a3:f9:f0:45:b0:9b:9a:e5:4a:de:4a:f8:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:47:62:1E:D3:72:9F:90:F3:6B:DB:6E:8B:A0:5B:70:9D:D0:8F:16
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:54:03:eb:59:d7:c1:3e:07:15:12:81:c9:1f:c9:00:64:f0:
33:a9:5e:21:1a:86:57:84:93:4f:a0:13:f4:60:fb:49:7b:07:
b5:e2:0b:9c:5b:36:0a:fe:35:cb:47:61:e5:d5:59:f7:67:6c:
bc:04:1b:9d:63:fd:7f:68:66:ba:59:8b:58:a8:55:4d:9b:2a:
f7:ae:33:73:c9:d3:83:2d:d4:db:4a:28:2a:ed:60:e6:67:4d:
52:bd:fa:31:02:ac:11:8d:fa:c7:be:d7:d1:59:68:4b:3b:43:
cb:22:ba:33:bc:4c:a0:8b:18:73:ef:da:32:d0:8b:c0:ca:87:
68:d6:4e:32:65:74:95:69:bf:be:eb:c6:cb:39:74:2a:b6:39:
62:af:92:0f:9b:38:93:74:f5:c3:67:28:ea:50:74:d4:1b:de:
72:82:85:29:51:03:87:7e:79:5d:1d:db:7b:f2:02:a7:ad:66:
55:ba:62:71:94:ae:19:ec:fb:ba:b7:60:58:cc:51:8f:1e:45:
d5:9e:eb:85:7a:eb:82:06:ff:19:4c:f0:af:1d:0c:67:1b:a2:
a7:17:dc:59:7e:10:c7:02:f3:9f:1c:e1:74:bf:6c:e2:78:12:
9a:88:32:66:41:3a:e5:5d:47:a8:5e:83:0d:ea:39:cd:77:fa:
6e:2e:01:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9c2ghOSBCELgCGFR/0roMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw
MDA4MGUwHhcNMjYwNzI4MjMwMTAzWhcNMjYwNzI5MjMwMTAzWjAzMTEwLwYDVQQD
Eyg4NDQ3NjIxZWQzNzI5ZjkwZjM2YmRiNmU4YmEwNWI3MDlkZDA4ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aD7ET3SUG6HYQrdxRKEZZamyUCB
jHGTXzK4e8PhnOCvaMI+fbj6M9CVKew8m0P2OO9jpZCR05t4w1hUhOIc8Gvi9Pmo
hLUbjshSphG1pv1QP0BX8Oq9MkVHf8ADyGMdy4gICCQO3kL4q3Y4clJ1TycRJaq2
wzECy7Bb71RRwcv9LREsrrtGIi+jQ0IBzPzJikun3vl3AV92Nte+q3zaWOGIY0ug
iMZiiyz7tVXgDNXzJrDXpxpzx8VW8VFs8zVUw1AcfBBLsvfbYAz4RNfgOVR5/won
LLRbxVT7JV/4ohmvCSUR+GfDWQ5cqd7KLFjwrRWj+fBFsJua5UreSviyewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRHYh7Tcp+Q82vbbougW3Cd0I8WMB8GA1UdIwQY
MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt
ZjRiOWRhNDgwZWUyLzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy
LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlQD61nX
wT4HFRKByR/JAGTwM6leIRqGV4STT6AT9GD7SXsHteILnFs2Cv41y0dh5dVZ92ds
vAQbnWP9f2hmulmLWKhVTZsq964zc8nTgy3U20ooKu1g5mdNUr36MQKsEY36x77X
0VloSztDyyK6M7xMoIsYc+/aMtCLwMqHaNZOMmV0lWm/vuvGyzl0KrY5Yq+SD5s4
k3T1w2co6lB01BvecoKFKVEDh355XR3be/ICp61mVbpicZSuGez7urdgWMxRjx5F
1Z7rhXrrggb/GUzwrx0MZxuipxfcWX4QxwLznxzhdL9s4ngSmogyZkE65V1HqF6D
Deo5zXf6bi4BRA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:01:55 2026 by rpki-client