Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
File: 798-8o6In9MNzxN-fPEkjyVeZxo.mft (raw, json)
Hash identifier: R60UuX8KU9wHXvWspnJdFuJE+WVwdm2iIHDVUJvnBCQ=
Subject key identifier: BC:33:4B:AB:9B:83:64:41:A0:CE:A3:DD:94:09:61:B9:38:CD:C0:4C
Authority key identifier: EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A
Certificate issuer: /CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
Certificate serial: 019FAC76C409BF4FB73D9946FFDD498A5255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:32 +0000
Manifest this update: Wed 29 Jul 2026 06:01:32 +0000
Manifest next update: Thu 30 Jul 2026 06:01:32 +0000
Files and hashes: 1: 798-8o6In9MNzxN-fPEkjyVeZxo.crl (hash: s8UWiG8liC5yq21dPaRJ/eCmlTLXt0VRssbaYYX0B1M=)
2: uZCJ1ZlX7FZKbkYCZM2a8EPtRMI.roa (hash: gQPzOCK/RXUj7ECDDWVHnreCZ/IrlUfLQtw8hRWnAl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:c4:09:bf:4f:b7:3d:99:46:ff:dd:49:8a:52:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efdf3ef28e889fd30dcf137e7cf1248f255e671a
Validity
Not Before: Jul 29 06:01:32 2026 GMT
Not After : Jul 30 06:01:32 2026 GMT
Subject: CN=bc334bab9b836441a0cea3dd940961b938cdc04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:3b:f9:b0:21:19:1a:92:da:6e:7c:3e:cc:
2b:4c:2d:35:52:fe:be:ff:ba:a0:21:71:22:bf:b1:
1f:14:9e:6a:5d:0d:c2:24:a1:e2:2e:d7:f3:ef:a9:
5e:f6:7e:0a:b9:36:63:01:66:33:38:34:b7:ce:2a:
18:8a:88:43:e9:a6:76:48:c2:2d:0f:4b:49:cc:93:
75:32:21:4e:19:e6:f2:11:4d:a8:78:3c:b4:03:3c:
62:e4:ce:77:8d:38:9b:1e:e5:b9:cd:84:63:23:8e:
76:a3:26:5b:5c:d5:4f:9d:5c:11:ec:06:e5:69:1a:
92:fe:bb:0a:29:bc:23:04:85:7d:9a:48:8e:25:6b:
16:1d:76:06:f7:68:0a:98:6e:a0:62:62:64:f6:d7:
32:86:51:15:75:6b:f2:a9:00:d1:a6:fb:4e:3e:dd:
9c:bc:d9:4f:df:58:bd:84:2b:e2:be:c6:ea:b9:08:
98:43:94:40:bf:b9:e2:ad:87:2a:1f:db:b7:b6:7b:
2b:98:d0:e0:3a:48:91:f8:39:21:92:0a:e6:e7:9e:
75:e3:d6:f7:a7:f0:92:07:86:b6:0e:c5:c2:50:33:
e9:51:bc:cc:20:22:42:7f:78:81:0d:9b:fb:4d:88:
42:b2:81:4b:6b:ce:bb:2d:a2:76:b7:1e:16:62:86:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:4B:AB:9B:83:64:41:A0:CE:A3:DD:94:09:61:B9:38:CD:C0:4C
X509v3 Authority Key Identifier:
keyid:EF:DF:3E:F2:8E:88:9F:D3:0D:CF:13:7E:7C:F1:24:8F:25:5E:67:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/798-8o6In9MNzxN-fPEkjyVeZxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/798-8o6In9MNzxN-fPEkjyVeZxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a7:f4:32:9b:3b:86:08:ea:d3:fd:7c:fb:d8:dc:a3:f1:bf:
ef:41:13:65:48:f8:e2:4f:dd:fa:8b:28:23:cc:84:af:65:99:
74:64:fb:70:45:7e:a4:01:43:ac:60:2b:30:ea:b5:48:ca:25:
38:49:3f:97:b3:73:06:23:b5:a8:02:ef:35:b3:52:eb:35:4c:
28:7d:51:b0:5a:52:fb:26:c1:c2:22:03:72:66:41:67:6b:5a:
be:09:1f:26:ab:86:08:63:a2:36:59:7a:90:a1:77:e6:82:1d:
4f:82:cc:df:61:93:83:b6:76:e1:70:86:f7:76:eb:06:96:25:
84:22:06:94:e8:50:10:be:ac:b4:5c:68:3c:33:5a:9d:d4:67:
a1:c5:bc:bf:87:c8:b5:72:42:d0:77:3f:91:71:38:44:1d:56:
91:f1:b3:56:88:1d:88:d4:98:6d:d5:6b:82:cb:40:2f:4b:d9:
5d:0e:87:e8:9a:22:79:6e:ed:b6:a8:1d:d2:f7:86:47:6b:50:
b1:49:db:3d:26:f7:72:01:3c:bd:f4:7c:ca:ef:44:f1:ff:a2:
5f:30:8c:3d:28:07:5d:ac:51:0e:1f:b4:a2:91:93:90:cf:d3:
80:14:81:cf:31:6c:23:0d:41:0c:4e:d2:e2:74:74:e0:f2:0c:
62:c6:7d:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdsQJv0+3PZlG/91JilJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGYzZWYyOGU4ODlmZDMwZGNmMTM3ZTdjZjEyNDhmMjU1
ZTY3MWEwHhcNMjYwNzI5MDYwMTMyWhcNMjYwNzMwMDYwMTMyWjAzMTEwLwYDVQQD
EyhiYzMzNGJhYjliODM2NDQxYTBjZWEzZGQ5NDA5NjFiOTM4Y2RjMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrE7+bAhGRqS2m58PswrTC01Uv6+
/7qgIXEiv7EfFJ5qXQ3CJKHiLtfz76le9n4KuTZjAWYzODS3zioYiohD6aZ2SMIt
D0tJzJN1MiFOGebyEU2oeDy0Azxi5M53jTibHuW5zYRjI452oyZbXNVPnVwR7Abl
aRqS/rsKKbwjBIV9mkiOJWsWHXYG92gKmG6gYmJk9tcyhlEVdWvyqQDRpvtOPt2c
vNlP31i9hCvivsbquQiYQ5RAv7nirYcqH9u3tnsrmNDgOkiR+Dkhkgrm555149b3
p/CSB4a2DsXCUDPpUbzMICJCf3iBDZv7TYhCsoFLa867LaJ2tx4WYoZJRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwzS6ubg2RBoM6j3ZQJYbk4zcBMMB8GA1UdIwQY
MBaAFO/fPvKOiJ/TDc8TfnzxJI8lXmcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzk4LThvNkluOU1OenhOLWZQRWtqeVZlWnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQt
YTM1YzI3ZDk1MTg2LzEvNzk4LThvNkluOU1OenhOLWZQRWtqeVZlWnhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQtYTM1YzI3ZDk1MTg2
LzEvNzk4LThvNkluOU1OenhOLWZQRWtqeVZlWnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqf0Mps7
hgjq0/18+9jco/G/70ETZUj44k/d+osoI8yEr2WZdGT7cEV+pAFDrGArMOq1SMol
OEk/l7NzBiO1qALvNbNS6zVMKH1RsFpS+ybBwiIDcmZBZ2tavgkfJquGCGOiNll6
kKF35oIdT4LM32GTg7Z24XCG93brBpYlhCIGlOhQEL6stFxoPDNandRnocW8v4fI
tXJC0Hc/kXE4RB1WkfGzVogdiNSYbdVrgstAL0vZXQ6H6JoieW7ttqgd0veGR2tQ
sUnbPSb3cgE8vfR8yu9E8f+iXzCMPSgHXaxRDh+0opGTkM/TgBSBzzFsIw1BDE7S
4nR04PIMYsZ9Ag==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:43:52 2026 by rpki-client