Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: AkXM1C14Vyswiw51uyWyVqKXms2jWUYCpX0YI+aevG4=
Subject key identifier: 2F:E0:5D:21:D0:6C:6C:08:1A:0F:7D:84:B0:D9:BB:C8:BC:D6:5B:99
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019FAAF62BFB781DB6410C7A29FE5F5C7333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 13C3
Signing time: Tue 28 Jul 2026 23:01:27 +0000
Manifest this update: Tue 28 Jul 2026 23:01:27 +0000
Manifest next update: Wed 29 Jul 2026 23:01:27 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: 5Kbm14yxUXkCtlT2gNPMIUi1rJEm0xuQzch15Q+e6hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:2b:fb:78:1d:b6:41:0c:7a:29:fe:5f:5c:73:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Jul 28 23:01:27 2026 GMT
Not After : Jul 29 23:01:27 2026 GMT
Subject: CN=2fe05d21d06c6c081a0f7d84b0d9bbc8bcd65b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:80:95:6a:7e:82:66:76:0f:88:6b:f1:ac:
4c:d1:70:0d:dd:d5:81:b7:5e:1c:67:f0:6d:ba:df:
86:fe:55:8b:0e:34:f7:14:08:df:fc:ef:0d:69:9e:
29:b4:c3:40:9a:7d:e9:ea:66:3a:2e:b2:a6:ba:c0:
d5:e6:68:a3:33:ed:b9:df:bb:d4:50:c2:47:db:51:
4a:4c:3b:51:43:36:7a:85:aa:66:cf:fd:8b:a6:8f:
0d:7b:ec:a3:4c:96:09:af:78:f9:9f:2e:92:20:41:
88:d2:61:88:f9:b0:b8:04:6a:9c:12:ce:6b:32:fd:
8b:0f:d4:a9:fe:0a:ca:cf:f7:01:f0:7b:15:ab:c0:
65:4b:12:df:d3:fd:30:fc:e3:5c:2b:1e:d4:e5:f5:
b6:1b:5d:87:97:bb:67:83:90:18:11:5b:70:0f:e8:
41:e0:bf:2a:2d:c8:fa:44:28:e2:34:6a:b2:f5:2a:
67:52:89:39:1a:c2:c7:b2:98:2a:33:d5:7a:92:cc:
28:3c:3f:84:5d:c6:ad:03:dc:4f:4c:d0:7e:bb:06:
72:7c:6c:76:1e:c1:3c:e2:78:52:5b:14:36:30:13:
f6:ef:b1:4d:03:2e:65:4c:4d:16:43:9c:9c:cd:9d:
7b:bf:b1:23:04:6c:57:0b:b4:67:dd:01:6f:a8:f7:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:5D:21:D0:6C:6C:08:1A:0F:7D:84:B0:D9:BB:C8:BC:D6:5B:99
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:86:b1:a2:4b:ac:b9:38:28:b6:5e:e7:0e:11:63:86:3c:ed:
c1:2b:79:91:f7:7c:2c:fc:8e:82:f4:a0:38:6d:1d:aa:bc:4c:
03:57:05:ef:3b:91:b0:6e:42:ea:fc:2c:5c:0e:af:2f:dd:c2:
94:2e:75:05:74:09:7d:24:de:84:c6:50:97:3c:6a:e8:7d:9d:
6d:5f:20:20:0e:47:5e:00:83:7e:7d:19:7a:b9:27:f9:e9:1d:
04:2f:af:66:9b:66:44:28:f4:ce:67:29:89:ae:de:e1:cc:f0:
55:f9:63:54:08:35:cc:17:05:73:67:2f:7e:8b:2e:5a:56:ca:
46:df:5d:9b:d8:06:37:7a:2e:d7:6c:f4:9d:35:6f:07:e4:5b:
2e:5f:1a:b3:2e:8a:12:5b:4b:82:57:0c:28:45:dd:b5:f8:e1:
75:bb:67:6d:ae:b9:a1:8a:e9:7c:45:52:31:cd:c2:95:7a:e9:
e2:01:3b:bd:c1:96:5a:df:cf:ce:76:2b:a0:17:45:dd:bb:5f:
eb:73:73:25:42:23:95:55:4d:e6:57:b1:e3:2d:e5:dd:c4:b3:
80:9a:0e:07:85:6f:61:28:c9:d4:5c:db:9c:fe:ac:96:98:c0:
bb:37:cd:fe:2f:d1:2a:87:fa:c6:f6:a2:e6:6f:f3:29:08:60:
16:73:0e:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9iv7eB22QQx6Kf5fXHMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl
OTVjYWYwHhcNMjYwNzI4MjMwMTI3WhcNMjYwNzI5MjMwMTI3WjAzMTEwLwYDVQQD
EygyZmUwNWQyMWQwNmM2YzA4MWEwZjdkODRiMGQ5YmJjOGJjZDY1Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbSAlWp+gmZ2D4hr8axM0XAN3dWB
t14cZ/Btut+G/lWLDjT3FAjf/O8NaZ4ptMNAmn3p6mY6LrKmusDV5mijM+2537vU
UMJH21FKTDtRQzZ6hapmz/2Lpo8Ne+yjTJYJr3j5ny6SIEGI0mGI+bC4BGqcEs5r
Mv2LD9Sp/grKz/cB8HsVq8BlSxLf0/0w/ONcKx7U5fW2G12Hl7tng5AYEVtwD+hB
4L8qLcj6RCjiNGqy9SpnUok5GsLHspgqM9V6kswoPD+EXcatA9xPTNB+uwZyfGx2
HsE84nhSWxQ2MBP277FNAy5lTE0WQ5yczZ17v7EjBGxXC7Rn3QFvqPf0tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/gXSHQbGwIGg99hLDZu8i81luZMB8GA1UdIwQY
MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt
MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3
LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIaxokus
uTgotl7nDhFjhjztwSt5kfd8LPyOgvSgOG0dqrxMA1cF7zuRsG5C6vwsXA6vL93C
lC51BXQJfSTehMZQlzxq6H2dbV8gIA5HXgCDfn0Zerkn+ekdBC+vZptmRCj0zmcp
ia7e4czwVfljVAg1zBcFc2cvfosuWlbKRt9dm9gGN3ou12z0nTVvB+RbLl8asy6K
EltLglcMKEXdtfjhdbtnba65oYrpfEVSMc3ClXrp4gE7vcGWWt/PznYroBdF3btf
63NzJUIjlVVN5lex4y3l3cSzgJoOB4VvYSjJ1FzbnP6slpjAuzfN/i/RKof6xvai
5m/zKQhgFnMOdg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:46:41 2026 by rpki-client