Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
File: 4LVOM0Iq091sqToY7dguC2jIWlw.mft (raw, json)
Hash identifier: t2heKlZ5vjwDeysvwo+XhgFuqv3DPc8vXEvv0sMTg3E=
Subject key identifier: 4D:DE:D0:5A:FD:AD:03:AD:62:D3:25:9D:69:61:D5:C9:04:CC:DC:0D
Authority key identifier: E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
Certificate issuer: /CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Certificate serial: 019FAA87FD60073F3DFE58F0A1958B9EA1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
Manifest number: 0CE1
Signing time: Tue 28 Jul 2026 21:01:06 +0000
Manifest this update: Tue 28 Jul 2026 21:01:06 +0000
Manifest next update: Wed 29 Jul 2026 21:01:06 +0000
Files and hashes: 1: 4LVOM0Iq091sqToY7dguC2jIWlw.crl (hash: 5Nz+oUlpcllV321P6dqCaKMDnzJ/w0OCTe821wnMd+U=)
2: kIHklMXqFB3plTjcytHieJh2B-M.roa (hash: ZoF+jtSa09y4vfpn8Xs04s6mctTJ+GrzJPmzo0cvvKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:fd:60:07:3f:3d:fe:58:f0:a1:95:8b:9e:a1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b54e33422ad3dd6ca93a18edd82e0b68c85a5c
Validity
Not Before: Jul 28 21:01:06 2026 GMT
Not After : Jul 29 21:01:06 2026 GMT
Subject: CN=4dded05afdad03ad62d3259d6961d5c904ccdc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:30:99:6c:11:8b:7f:c0:ee:0f:2e:3b:d3:
e0:b9:0e:e0:0f:6b:c4:52:99:9b:48:e5:69:5a:34:
f0:09:ac:63:a2:2f:86:99:b5:d4:8c:9f:84:86:98:
91:d8:5d:e6:c3:aa:aa:ef:b5:f9:ac:7d:ee:ee:91:
6c:e3:ca:68:ae:a2:32:b0:7a:16:8e:50:de:ef:df:
84:4b:25:06:f3:72:ad:d9:2d:81:41:cc:70:7e:2c:
00:8f:78:e6:18:95:ad:cf:14:ae:3c:7c:4b:02:de:
eb:0f:d6:db:b4:3b:d7:bb:f4:9b:86:d7:1d:33:ad:
e5:5d:25:a7:7f:55:da:b2:d2:9e:a0:68:50:6e:92:
b0:d5:f4:97:19:0a:c7:6d:78:0c:e3:a3:cc:66:e4:
88:1f:85:4f:9f:1a:c3:b5:46:86:f7:ec:98:70:54:
cb:df:54:e4:56:50:e5:ce:06:1e:ae:52:24:19:30:
dd:86:49:e5:14:00:1c:0c:02:7a:a5:45:06:1d:0e:
18:ca:b9:26:12:eb:c0:bb:1a:e2:79:34:3a:c4:c1:
eb:ef:16:e8:13:bc:81:8b:0f:6b:2d:13:2f:21:7e:
6c:85:4a:7f:55:72:ce:91:e9:66:aa:ea:30:05:bc:
be:91:82:43:30:03:df:42:c0:c6:49:8b:51:1f:cd:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DE:D0:5A:FD:AD:03:AD:62:D3:25:9D:69:61:D5:C9:04:CC:DC:0D
X509v3 Authority Key Identifier:
keyid:E0:B5:4E:33:42:2A:D3:DD:6C:A9:3A:18:ED:D8:2E:0B:68:C8:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LVOM0Iq091sqToY7dguC2jIWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/496bba-a6a3-4dd3-8f86-3cbb5e877791/1/4LVOM0Iq091sqToY7dguC2jIWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a7:cd:b3:9b:14:90:73:e0:47:07:15:e8:63:62:cf:19:da:
e6:63:ca:39:cf:73:66:78:54:21:f7:57:c0:8c:15:2d:75:ea:
1c:b9:11:3b:5b:06:93:11:90:a5:31:36:83:70:e3:8d:dc:f5:
f7:b0:f9:17:4e:25:af:13:7a:8a:c8:92:77:3d:11:dd:4f:65:
00:d3:a2:1e:fe:95:71:60:03:ec:92:03:ed:ea:32:8e:df:25:
e1:98:79:f0:36:2b:24:34:0d:18:76:9b:28:6d:51:10:3f:a0:
14:fa:43:8e:94:82:8f:b2:27:50:0e:25:3b:53:0c:d2:6d:9d:
7b:5f:2d:8a:15:8e:9e:36:25:5c:85:cd:e6:97:d8:5c:27:48:
4e:4b:6e:0a:da:0b:32:9d:70:c8:b7:95:2e:0d:da:db:0b:39:
f0:4d:37:ce:d9:4a:32:09:9c:80:04:e3:70:7a:c4:c9:3f:87:
6e:b2:87:6b:0e:92:8e:77:5a:9c:3b:83:76:97:73:c8:b6:56:
aa:60:4a:bc:75:43:73:93:6d:fc:d1:70:4b:06:6a:05:1d:58:
e7:2a:85:c2:51:c1:6c:68:d4:15:ab:3a:ad:9c:0c:99:f4:8c:
a4:c5:06:8c:49:55:85:98:ea:8e:e4:a9:d5:16:e8:fa:31:08:
3b:2f:c5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh/1gBz89/ljwoZWLnqGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYjU0ZTMzNDIyYWQzZGQ2Y2E5M2ExOGVkZDgyZTBiNjhj
ODVhNWMwHhcNMjYwNzI4MjEwMTA2WhcNMjYwNzI5MjEwMTA2WjAzMTEwLwYDVQQD
Eyg0ZGRlZDA1YWZkYWQwM2FkNjJkMzI1OWQ2OTYxZDVjOTA0Y2NkYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/IwmWwRi3/A7g8uO9PguQ7gD2vE
UpmbSOVpWjTwCaxjoi+GmbXUjJ+EhpiR2F3mw6qq77X5rH3u7pFs48porqIysHoW
jlDe79+ESyUG83Kt2S2BQcxwfiwAj3jmGJWtzxSuPHxLAt7rD9bbtDvXu/Sbhtcd
M63lXSWnf1XastKeoGhQbpKw1fSXGQrHbXgM46PMZuSIH4VPnxrDtUaG9+yYcFTL
31TkVlDlzgYerlIkGTDdhknlFAAcDAJ6pUUGHQ4YyrkmEuvAuxrieTQ6xMHr7xbo
E7yBiw9rLRMvIX5shUp/VXLOkelmquowBby+kYJDMAPfQsDGSYtRH81d7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3e0Fr9rQOtYtMlnWlh1ckEzNwNMB8GA1UdIwQY
MBaAFOC1TjNCKtPdbKk6GO3YLgtoyFpcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNExWT00wSXEwOTFzcVRvWTdkZ3VDMmpJV2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80OTZiYmEtYTZhMy00ZGQzLThmODYt
M2NiYjVlODc3NzkxLzEvNExWT00wSXEwOTFzcVRvWTdkZ3VDMmpJV2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80OTZiYmEtYTZhMy00ZGQzLThmODYtM2NiYjVlODc3Nzkx
LzEvNExWT00wSXEwOTFzcVRvWTdkZ3VDMmpJV2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACafNs5sU
kHPgRwcV6GNizxna5mPKOc9zZnhUIfdXwIwVLXXqHLkRO1sGkxGQpTE2g3Djjdz1
97D5F04lrxN6isiSdz0R3U9lANOiHv6VcWAD7JID7eoyjt8l4Zh58DYrJDQNGHab
KG1RED+gFPpDjpSCj7InUA4lO1MM0m2de18tihWOnjYlXIXN5pfYXCdITktuCtoL
Mp1wyLeVLg3a2ws58E03ztlKMgmcgATjcHrEyT+HbrKHaw6SjndanDuDdpdzyLZW
qmBKvHVDc5Nt/NFwSwZqBR1Y5yqFwlHBbGjUFas6rZwMmfSMpMUGjElVhZjqjuSp
1Rbo+jEIOy/FMg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:45 2026 by rpki-client