
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json)
Hash identifier: jtbYM1f96Sk6ChJAv4Zi1EasZ5rR5ILcBSlkPK1Hl14=
Subject key identifier: 6E:02:3A:25:6D:3E:3C:70:42:0E:D8:02:AB:BD:9D:7C:0B:FE:6A:8E
Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Certificate serial: 019FAA19721EA80B95C09A5404F084D12B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
Manifest number: 0267
Signing time: Tue 28 Jul 2026 19:00:22 +0000
Manifest this update: Tue 28 Jul 2026 19:00:22 +0000
Manifest next update: Wed 29 Jul 2026 19:00:22 +0000
Files and hashes: 1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=)
2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: 4per7KZPXX2kex+gRgeWI+f4q/kXS1g39YOoXRLB9rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:72:1e:a8:0b:95:c0:9a:54:04:f0:84:d1:2b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Validity
Not Before: Jul 28 19:00:22 2026 GMT
Not After : Jul 29 19:00:22 2026 GMT
Subject: CN=6e023a256d3e3c70420ed802abbd9d7c0bfe6a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:57:44:4f:32:f2:3d:6c:b9:6e:6e:d3:a9:
9d:5b:99:c8:91:9d:56:61:ba:c9:41:0e:d3:5c:cb:
02:5a:a4:f4:26:4b:bb:ed:a3:9a:91:1e:c3:1a:74:
19:47:35:af:29:8e:75:04:1f:fd:3a:32:2b:39:67:
ff:c0:fd:3d:f2:e3:80:6f:0f:1e:57:aa:79:7d:e1:
89:1e:41:56:84:2f:fd:56:4b:36:82:72:ca:fa:37:
37:1a:0e:2a:33:7c:e6:21:02:28:55:b5:5f:d4:a9:
ab:c9:6d:44:d7:a4:c5:3e:9b:66:bc:6d:7b:c7:2b:
55:dd:ce:d8:0b:cb:c3:06:f4:89:4b:47:d4:74:69:
b4:38:10:c3:1f:9f:c1:fa:0b:1f:13:05:12:ef:17:
b9:3e:c3:bd:5f:b5:a7:14:09:f9:25:35:04:ad:41:
1e:71:86:c2:bb:03:f8:c8:38:e6:d1:3c:aa:36:df:
60:7c:40:38:42:ea:5b:b3:e5:20:b9:ff:4f:8c:cc:
e8:6b:9f:59:a9:66:02:6a:65:a4:6a:34:7d:f8:e2:
ee:42:2e:09:e1:36:4c:b7:27:89:92:47:a9:88:be:
18:8d:a1:ac:f1:3a:73:4e:c3:cb:a0:bd:c8:44:b4:
15:2c:0b:fe:3b:97:2f:bc:c7:30:c4:a5:69:07:0e:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:02:3A:25:6D:3E:3C:70:42:0E:D8:02:AB:BD:9D:7C:0B:FE:6A:8E
X509v3 Authority Key Identifier:
keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:40:e7:2c:b7:12:53:48:bf:2d:b8:28:b2:7d:f1:18:06:ab:
01:6b:47:a7:05:cf:fb:e9:87:fc:1e:ee:52:f2:15:9f:1f:23:
d9:3d:9e:1c:1a:bf:99:c5:6e:e0:81:4f:9e:7a:d3:73:13:1f:
0e:a8:3c:d7:45:51:67:9e:18:78:56:93:84:1e:65:c0:b8:7a:
f7:50:7b:99:2a:38:73:c5:bc:61:2a:df:8b:cd:3b:38:37:cf:
3c:d4:b6:52:f5:06:78:a4:5a:1a:34:63:4f:99:8a:d8:0c:42:
c9:fc:53:ff:0d:ac:03:78:d2:04:4b:e1:f3:61:f8:1e:e0:91:
90:fe:aa:66:2a:2f:89:f3:20:f5:2e:d2:6a:b1:32:92:c5:6a:
a1:9c:ff:d9:f2:db:e7:0b:2e:f8:a7:1b:be:21:64:f7:ad:04:
00:b9:1c:c1:2b:b3:15:c6:90:b5:89:e3:e1:3d:46:ad:f3:93:
54:a5:68:d4:58:fd:b3:09:85:af:2d:44:62:92:6a:9a:dc:a9:
d9:84:dc:f9:72:8b:8b:94:e6:fb:7c:76:89:52:f6:09:b9:84:
5f:50:a8:41:b2:78:52:dc:a9:c9:27:87:07:a9:26:1c:e7:4b:
2a:e3:28:1b:7d:74:61:30:3b:72:fa:44:a2:65:b6:bc:56:2c:
b3:1d:ee:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGXIeqAuVwJpUBPCE0StHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1
YWQwMTgwHhcNMjYwNzI4MTkwMDIyWhcNMjYwNzI5MTkwMDIyWjAzMTEwLwYDVQQD
Eyg2ZTAyM2EyNTZkM2UzYzcwNDIwZWQ4MDJhYmJkOWQ3YzBiZmU2YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb1XRE8y8j1suW5u06mdW5nIkZ1W
YbrJQQ7TXMsCWqT0Jku77aOakR7DGnQZRzWvKY51BB/9OjIrOWf/wP098uOAbw8e
V6p5feGJHkFWhC/9Vks2gnLK+jc3Gg4qM3zmIQIoVbVf1KmryW1E16TFPptmvG17
xytV3c7YC8vDBvSJS0fUdGm0OBDDH5/B+gsfEwUS7xe5PsO9X7WnFAn5JTUErUEe
cYbCuwP4yDjm0TyqNt9gfEA4Qupbs+Uguf9PjMzoa59ZqWYCamWkajR9+OLuQi4J
4TZMtyeJkkepiL4YjaGs8TpzTsPLoL3IRLQVLAv+O5cvvMcwxKVpBw4unwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4COiVtPjxwQg7YAqu9nXwL/mqOMB8GA1UdIwQY
MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt
NTViNjc3MjM1ZWIzLzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz
LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0DnLLcS
U0i/Lbgosn3xGAarAWtHpwXP++mH/B7uUvIVnx8j2T2eHBq/mcVu4IFPnnrTcxMf
Dqg810VRZ54YeFaThB5lwLh691B7mSo4c8W8YSrfi807ODfPPNS2UvUGeKRaGjRj
T5mK2AxCyfxT/w2sA3jSBEvh82H4HuCRkP6qZiovifMg9S7SarEyksVqoZz/2fLb
5wsu+KcbviFk960EALkcwSuzFcaQtYnj4T1GrfOTVKVo1Fj9swmFry1EYpJqmtyp
2YTc+XKLi5Tm+3x2iVL2CbmEX1CoQbJ4UtypySeHB6kmHOdLKuMoG310YTA7cvpE
omW2vFYssx3uCQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:31 2026 by rpki-client