Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
File: s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft (raw, json)
Hash identifier: 6sbfhofqdHQpr3dZ0w+8AFgRoru2vY2QBujVqagHN4I=
Subject key identifier: 8D:13:E8:C1:8D:DF:5E:4B:49:9F:E7:A6:AB:19:CC:2E:9D:75:C2:5E
Authority key identifier: B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
Certificate issuer: /CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Certificate serial: 019FA899965B1041AAB521E0560ADF8B0BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:05 +0000
Manifest this update: Tue 28 Jul 2026 12:01:05 +0000
Manifest next update: Wed 29 Jul 2026 12:01:05 +0000
Files and hashes: 1: AlGAx9Fl6hfEZYbR82KN63CXdsA.asa (hash: dmP6VBHZrQsaHkli3FETSb10i/VF3suE+WLsSAtxktk=)
2: CJWICYUF8PQfPfv_l-YsbRABMGA.roa (hash: ckHVpf/nWip1+cSgGyvEj2vXDYp/OYjzyt+VU9SRBuw=)
3: s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl (hash: YWX8VXiVB5RTZddE3BpDl29+B2NI2CWCklSXkeMI5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:96:5b:10:41:aa:b5:21:e0:56:0a:df:8b:0b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5a7544fbb987980a3ff1c71ebf3fb1cf6ac9e
Validity
Not Before: Jul 28 12:01:05 2026 GMT
Not After : Jul 29 12:01:05 2026 GMT
Subject: CN=8d13e8c18ddf5e4b499fe7a6ab19cc2e9d75c25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:9b:a6:16:c5:99:bc:a5:a0:68:03:ab:de:
37:a8:18:97:32:25:cb:3f:f7:ef:dc:1f:e6:74:88:
7b:01:d0:16:44:65:bc:fe:47:9d:20:74:25:3a:ba:
23:0a:28:37:37:56:db:02:8c:6a:31:7b:a3:d8:1e:
fb:e1:87:32:3e:4b:b2:a4:77:0e:92:f6:51:15:5d:
80:7d:6d:ff:c4:f9:e4:2f:51:e9:68:68:8c:ea:23:
a5:e6:f5:5e:29:93:03:aa:20:92:6d:5a:40:2c:a0:
51:54:35:79:f3:57:1c:22:6f:7e:ef:f8:26:e5:40:
ac:71:7d:e8:07:7f:a6:ba:ca:81:32:57:75:f0:ae:
d5:81:ca:bf:57:14:f1:6a:79:0e:fe:db:30:a4:41:
04:da:c6:ca:47:3f:79:59:9d:70:0a:1d:0a:fb:01:
11:9c:94:e0:5e:48:0e:f4:d5:8c:8b:b2:c1:b0:22:
ca:e1:62:6b:8e:a0:0d:7c:78:26:e3:74:6c:69:ad:
7b:a3:e8:c3:f7:0d:32:cc:18:43:4e:76:9f:79:f5:
78:35:7d:fd:ff:af:a3:a7:01:e7:9f:14:1f:3a:cc:
20:f0:bb:c5:48:59:f1:7b:64:49:d5:42:e2:50:ba:
50:7d:74:83:79:00:14:48:c8:01:bf:e8:41:0c:11:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:E8:C1:8D:DF:5E:4B:49:9F:E7:A6:AB:19:CC:2E:9D:75:C2:5E
X509v3 Authority Key Identifier:
keyid:B3:B5:A7:54:4F:BB:98:79:80:A3:FF:1C:71:EB:F3:FB:1C:F6:AC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7WnVE-7mHmAo_8ccevz-xz2rJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/s7WnVE-7mHmAo_8ccevz-xz2rJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0e:60:9c:74:10:ad:09:19:c8:a4:b3:e6:7f:bf:33:39:dd:
e1:53:18:85:06:2e:7b:c1:94:41:a8:5d:f1:92:2e:2d:c1:42:
a3:aa:cb:c4:1c:fa:73:98:1e:56:b7:be:dd:4e:a4:26:03:d4:
a4:a8:0b:3f:3f:ca:09:15:ed:76:a5:bc:c6:0a:5e:5d:b9:10:
83:e9:9c:ef:f4:bd:a1:4a:ac:4f:9d:b3:f2:3b:1d:30:5d:61:
56:a7:a4:2f:d7:a2:72:f2:8a:d1:05:32:9b:59:d7:89:78:0e:
aa:70:71:92:08:8e:3b:7c:c1:10:f0:cb:04:32:33:ae:d7:a7:
6c:26:a5:25:a7:13:71:e7:c4:8c:94:58:d8:e5:bb:ab:db:35:
e6:6c:fc:28:77:57:3a:31:bb:f3:65:26:e9:d5:6f:3e:78:da:
90:83:c8:3d:ee:ca:96:0a:c5:05:a7:34:35:f4:f1:a4:e3:dd:
4c:88:94:be:da:fc:c8:1c:de:4b:aa:5b:78:2a:d6:39:1a:2c:
79:d2:b0:54:a1:53:f3:6c:39:db:49:53:bf:16:63:bb:08:22:
55:9e:5d:e5:81:74:8b:8a:da:ff:fb:1a:f4:77:71:03:54:28:
94:5c:cb:d4:c1:fe:60:b1:31:28:a3:f2:a9:f0:f6:70:41:55:
42:96:fc:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omZZbEEGqtSHgVgrfiwvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYjVhNzU0NGZiYjk4Nzk4MGEzZmYxYzcxZWJmM2ZiMWNm
NmFjOWUwHhcNMjYwNzI4MTIwMTA1WhcNMjYwNzI5MTIwMTA1WjAzMTEwLwYDVQQD
Eyg4ZDEzZThjMThkZGY1ZTRiNDk5ZmU3YTZhYjE5Y2MyZTlkNzVjMjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTSbphbFmbyloGgDq943qBiXMiXL
P/fv3B/mdIh7AdAWRGW8/kedIHQlOrojCig3N1bbAoxqMXuj2B774YcyPkuypHcO
kvZRFV2AfW3/xPnkL1HpaGiM6iOl5vVeKZMDqiCSbVpALKBRVDV581ccIm9+7/gm
5UCscX3oB3+musqBMld18K7Vgcq/VxTxankO/tswpEEE2sbKRz95WZ1wCh0K+wER
nJTgXkgO9NWMi7LBsCLK4WJrjqANfHgm43Rsaa17o+jD9w0yzBhDTnafefV4NX39
/6+jpwHnnxQfOswg8LvFSFnxe2RJ1ULiULpQfXSDeQAUSMgBv+hBDBFL7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0T6MGN315LSZ/npqsZzC6ddcJeMB8GA1UdIwQY
MBaAFLO1p1RPu5h5gKP/HHHr8/sc9qyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczdXblZFLTdtSG1Bb184Y2NldnoteHoycko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQt
ZWY4OGIyY2ZlODcyLzEvczdXblZFLTdtSG1Bb184Y2NldnoteHoycko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wMWMzMWYtZWUzYy00MzVhLWJmZWQtZWY4OGIyY2ZlODcy
LzEvczdXblZFLTdtSG1Bb184Y2NldnoteHoycko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA5gnHQQ
rQkZyKSz5n+/Mznd4VMYhQYue8GUQahd8ZIuLcFCo6rLxBz6c5geVre+3U6kJgPU
pKgLPz/KCRXtdqW8xgpeXbkQg+mc7/S9oUqsT52z8jsdMF1hVqekL9eicvKK0QUy
m1nXiXgOqnBxkgiOO3zBEPDLBDIzrtenbCalJacTcefEjJRY2OW7q9s15mz8KHdX
OjG782Um6dVvPnjakIPIPe7KlgrFBac0NfTxpOPdTIiUvtr8yBzeS6pbeCrWORos
edKwVKFT82w520lTvxZjuwgiVZ5d5YF0i4ra//sa9HdxA1QolFzL1MH+YLExKKPy
qfD2cEFVQpb83w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:37 2026 by rpki-client