Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: zQNU4TZlyzUImn3+EgJZCmZBnLZDuo2M5zqTDIvHSHs=
Subject key identifier: A2:83:38:1E:84:96:94:14:90:FB:9A:87:A8:F9:7D:F7:42:0C:A9:3A
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 019FAA88B5F1C6DCDF0EAD1EC5335D09219A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0ADC
Signing time: Tue 28 Jul 2026 21:01:53 +0000
Manifest this update: Tue 28 Jul 2026 21:01:53 +0000
Manifest next update: Wed 29 Jul 2026 21:01:53 +0000
Files and hashes: 1: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: dJX+gREyD8btQJXmQb5o46vZvsqyU9ktsOcL2HrqiJE=)
2: u7z3f5MyS6Pn44Y8ceWPcFJRqYE.roa (hash: wWTcWByT+kygfV9+kd/6R30QexArvjCPKfIUysPXkgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:b5:f1:c6:dc:df:0e:ad:1e:c5:33:5d:09:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Jul 28 21:01:53 2026 GMT
Not After : Jul 29 21:01:53 2026 GMT
Subject: CN=a283381e8496941490fb9a87a8f97df7420ca93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:82:0d:4d:d9:01:96:f2:82:3e:ef:63:ce:
af:c1:e7:c6:29:ed:2c:ab:f3:22:11:8a:1e:3c:8d:
c8:40:3a:72:12:b4:a9:f8:f5:32:45:5a:9c:40:3e:
95:16:e0:e8:81:4f:4b:bc:be:5d:4e:cc:7d:6e:b4:
c3:6c:d1:ba:13:2b:59:ab:36:06:0a:99:cf:1f:6d:
65:70:fa:05:d2:0d:ec:08:ae:2d:df:9a:2e:30:67:
6f:3c:78:0c:e6:cd:06:cc:33:87:d0:c7:6f:3d:d9:
44:9e:c3:1f:7b:78:f9:b0:7b:3b:99:06:37:29:e7:
fd:b2:50:59:20:22:3a:da:d9:6d:b8:7d:77:52:f5:
74:e8:89:ee:47:6e:bd:7e:1c:f4:60:8d:9f:1d:c8:
82:43:d4:d0:a4:9d:75:bc:23:dc:6d:d3:8b:3e:dd:
ca:13:d8:2c:58:0d:d3:92:dc:10:05:3b:28:23:b5:
72:a4:05:35:c3:2f:50:db:20:67:99:78:2c:6c:7c:
5f:72:cb:2e:a0:95:d5:73:6c:d1:8f:d9:51:30:2f:
98:6f:75:30:66:0a:07:75:b8:8c:f1:d9:84:b8:f0:
2c:22:b8:69:b2:21:a4:18:1f:bb:f1:37:3b:34:f0:
3c:fb:c3:b8:21:ca:ba:21:03:3b:d7:3b:58:46:f1:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:83:38:1E:84:96:94:14:90:FB:9A:87:A8:F9:7D:F7:42:0C:A9:3A
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2c:7d:db:f7:d9:76:40:99:ec:34:90:d1:ec:2b:23:89:bb:
57:e1:8a:cf:31:e6:06:44:50:b0:30:88:a2:15:b8:ad:5d:04:
bd:96:de:e3:5e:84:78:40:7c:c0:f2:0a:90:64:7c:74:bf:ce:
00:3e:5f:b0:4b:2d:c3:a5:40:3f:d3:0d:ef:5c:3c:f0:96:f4:
65:91:42:12:cc:cc:b6:7b:fd:88:0b:07:2e:67:f4:15:d9:fc:
2c:8a:3c:3c:ec:ba:1c:08:6e:c0:93:30:f8:fe:47:ff:88:5a:
cb:74:d7:5d:e6:32:06:a4:fd:c6:90:7b:bc:92:11:a2:31:0c:
f1:42:61:8f:ce:30:1b:92:fd:89:9a:e3:19:4a:e6:90:70:85:
a1:76:af:ae:ab:c7:61:af:fb:19:3d:f9:52:23:1d:82:51:5c:
13:c1:b2:7b:1a:05:67:ef:d9:02:ba:83:90:62:f5:b5:1e:eb:
cc:38:40:f2:8a:9a:bb:22:2c:3d:aa:00:2c:f2:97:f8:1d:33:
c5:bb:8c:50:3a:fc:ee:e4:af:e8:9b:a1:45:6b:98:ab:da:ec:
41:84:ef:d9:c9:60:95:40:2e:4e:e0:f6:33:40:4d:4c:3c:24:
84:78:ce:8c:63:79:85:e5:42:61:d8:84:9e:26:9b:7c:a8:20:
77:b4:bb:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiLXxxtzfDq0exTNdCSGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1
NWQxNGYwHhcNMjYwNzI4MjEwMTUzWhcNMjYwNzI5MjEwMTUzWjAzMTEwLwYDVQQD
EyhhMjgzMzgxZTg0OTY5NDE0OTBmYjlhODdhOGY5N2RmNzQyMGNhOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NCCDU3ZAZbygj7vY86vwefGKe0s
q/MiEYoePI3IQDpyErSp+PUyRVqcQD6VFuDogU9LvL5dTsx9brTDbNG6EytZqzYG
CpnPH21lcPoF0g3sCK4t35ouMGdvPHgM5s0GzDOH0MdvPdlEnsMfe3j5sHs7mQY3
Kef9slBZICI62tltuH13UvV06InuR269fhz0YI2fHciCQ9TQpJ11vCPcbdOLPt3K
E9gsWA3TktwQBTsoI7VypAU1wy9Q2yBnmXgsbHxfcssuoJXVc2zRj9lRMC+Yb3Uw
ZgoHdbiM8dmEuPAsIrhpsiGkGB+78Tc7NPA8+8O4Icq6IQM71ztYRvHadQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKDOB6ElpQUkPuah6j5ffdCDKk6MB8GA1UdIwQY
MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt
MmIyYThiYTYxMmZkLzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk
LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOix92/fZ
dkCZ7DSQ0ewrI4m7V+GKzzHmBkRQsDCIohW4rV0EvZbe416EeEB8wPIKkGR8dL/O
AD5fsEstw6VAP9MN71w88Jb0ZZFCEszMtnv9iAsHLmf0Fdn8LIo8POy6HAhuwJMw
+P5H/4hay3TXXeYyBqT9xpB7vJIRojEM8UJhj84wG5L9iZrjGUrmkHCFoXavrqvH
Ya/7GT35UiMdglFcE8GyexoFZ+/ZArqDkGL1tR7rzDhA8oqauyIsPaoALPKX+B0z
xbuMUDr87uSv6JuhRWuYq9rsQYTv2clglUAuTuD2M0BNTDwkhHjOjGN5heVCYdiE
niabfKggd7S7wQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:37 2026 by rpki-client