Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
File: 9OobD89CmqOLUtkXHOfJI8qKrIE.mft (raw, json)
Hash identifier: FEvXaALsNxxFqgwfzGYjNNLMW4S1oqCBmjoYslSPRjg=
Subject key identifier: 80:5B:F1:1A:F9:C7:17:A0:C7:27:F5:AC:EB:FF:F8:E2:BE:34:FE:A4
Authority key identifier: F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
Certificate issuer: /CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Certificate serial: 019FAC76816DF05B8B60E5666BF771AEEDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:15 +0000
Manifest this update: Wed 29 Jul 2026 06:01:15 +0000
Manifest next update: Thu 30 Jul 2026 06:01:15 +0000
Files and hashes: 1: 1-3zjSgmPbe5tSIM8kLlfo3SeJP4.roa (hash: u4WfkbMiSbJkmrL6GA8qH3vMspeYSQot+mOiu9K3y4w=)
2: 9OobD89CmqOLUtkXHOfJI8qKrIE.crl (hash: Fyx4MQi4ihpWi3k/qSZhtGb2gDKy5ThiN64Zs+WVeTM=)
3: joV_6cAQSK_je5KrB8bVTeK2szE.roa (hash: fk94vtPfOafs8CuY1ZMt1P+v4ADiKe8HjDC4WwhIxvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:81:6d:f0:5b:8b:60:e5:66:6b:f7:71:ae:ed:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Validity
Not Before: Jul 29 06:01:15 2026 GMT
Not After : Jul 30 06:01:15 2026 GMT
Subject: CN=805bf11af9c717a0c727f5acebfff8e2be34fea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:80:cf:9e:9f:8d:62:2c:ae:87:34:0b:e3:
1e:90:8b:0d:68:ee:df:1b:81:08:25:dd:4a:0f:a2:
87:d5:b9:bb:2e:ef:93:c3:d2:47:de:c4:9a:e7:bb:
a4:31:2b:e2:44:3e:15:58:dc:ed:71:32:34:db:24:
e3:cc:eb:59:a1:3c:8c:c9:dd:5f:53:a4:85:65:c3:
f6:b1:06:9b:58:1a:9c:3a:df:9e:1c:a9:8a:e2:59:
45:89:4c:db:4a:8c:f5:70:84:c3:8a:11:43:29:9c:
8a:a3:1e:06:a3:7c:4c:8b:18:c0:54:71:7d:2a:61:
f1:68:63:0a:5a:67:3f:66:d7:91:ea:1f:f8:b5:b2:
b0:37:21:11:f4:5f:a5:78:31:ad:ac:20:85:d5:f6:
62:b5:6d:7e:cc:35:04:21:26:94:ca:bd:d3:40:0a:
51:13:1b:fa:65:92:42:e0:b7:ea:dd:e6:e2:47:17:
ea:cd:18:90:65:17:87:71:58:84:3f:31:ea:07:84:
67:e8:40:f0:fc:aa:ae:23:4b:79:98:ca:06:b6:26:
e5:66:af:94:53:85:aa:a8:3a:41:27:a9:08:e1:5f:
37:ba:ea:7d:60:86:f9:ba:bd:75:25:fe:eb:42:89:
30:06:a3:2d:1a:11:dc:df:f6:e3:97:d6:a2:5b:5d:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:F1:1A:F9:C7:17:A0:C7:27:F5:AC:EB:FF:F8:E2:BE:34:FE:A4
X509v3 Authority Key Identifier:
keyid:F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a2:5b:5a:49:c4:49:e3:d7:b5:80:24:1f:ed:0b:2b:27:67:
48:97:76:8e:0f:e7:e5:17:12:8f:ec:77:45:a2:9a:85:b4:87:
9f:ba:92:34:e9:42:70:aa:95:24:11:e5:e8:0d:12:69:4e:37:
f8:99:83:68:a1:b7:11:98:46:44:a3:1e:4d:0d:17:99:59:c2:
db:61:35:e1:0f:8c:9b:31:cb:05:fa:e8:f2:5d:01:81:fc:90:
45:40:9a:8c:c0:95:4e:ac:85:0d:42:03:62:72:90:05:e7:4c:
c1:7d:86:26:1c:74:08:90:f8:42:21:fb:78:5a:0b:fb:bc:00:
47:d4:f3:b4:5c:fb:c3:ff:f2:35:10:50:01:96:4a:de:28:07:
85:a9:12:10:1a:2c:da:12:03:59:9a:c9:ea:49:21:dd:ef:60:
7b:90:df:f6:e3:7f:23:c2:c3:e1:4d:02:eb:4e:fd:7e:be:5a:
f3:ef:f1:b5:96:fb:88:c1:30:c9:82:0f:50:11:71:5d:94:2d:
e4:7c:09:c8:b5:44:aa:cf:69:9e:d1:0b:a9:42:ff:7c:f1:32:
7a:b3:0a:62:ea:4b:37:1f:ac:e2:bf:d2:0a:a3:40:46:2d:d5:
c2:f4:c2:37:02:bc:4e:87:39:01:24:41:1f:ed:75:4c:28:77:
3c:b4:89:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdoFt8FuLYOVma/dxru3OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWExYjBmY2Y0MjlhYTM4YjUyZDkxNzFjZTdjOTIzY2E4
YWFjODEwHhcNMjYwNzI5MDYwMTE1WhcNMjYwNzMwMDYwMTE1WjAzMTEwLwYDVQQD
Eyg4MDViZjExYWY5YzcxN2EwYzcyN2Y1YWNlYmZmZjhlMmJlMzRmZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPiAz56fjWIsroc0C+MekIsNaO7f
G4EIJd1KD6KH1bm7Lu+Tw9JH3sSa57ukMSviRD4VWNztcTI02yTjzOtZoTyMyd1f
U6SFZcP2sQabWBqcOt+eHKmK4llFiUzbSoz1cITDihFDKZyKox4Go3xMixjAVHF9
KmHxaGMKWmc/ZteR6h/4tbKwNyER9F+leDGtrCCF1fZitW1+zDUEISaUyr3TQApR
Exv6ZZJC4Lfq3ebiRxfqzRiQZReHcViEPzHqB4Rn6EDw/KquI0t5mMoGtiblZq+U
U4WqqDpBJ6kI4V83uup9YIb5ur11Jf7rQokwBqMtGhHc3/bjl9aiW13+4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBb8Rr5xxegxyf1rOv/+OK+NP6kMB8GA1UdIwQY
MBaAFPTqGw/PQpqji1LZFxznySPKiqyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9vYkQ4OUNtcU9MVXRrWEhPZkpJOHFLcklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYt
ZGZjNWNjNjRhODFlLzEvOU9vYkQ4OUNtcU9MVXRrWEhPZkpJOHFLcklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85M2Y2ZWUtMDVlYS00ZjMxLTlhZjYtZGZjNWNjNjRhODFl
LzEvOU9vYkQ4OUNtcU9MVXRrWEhPZkpJOHFLcklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaJbWknE
SePXtYAkH+0LKydnSJd2jg/n5RcSj+x3RaKahbSHn7qSNOlCcKqVJBHl6A0SaU43
+JmDaKG3EZhGRKMeTQ0XmVnC22E14Q+MmzHLBfro8l0BgfyQRUCajMCVTqyFDUID
YnKQBedMwX2GJhx0CJD4QiH7eFoL+7wAR9TztFz7w//yNRBQAZZK3igHhakSEBos
2hIDWZrJ6kkh3e9ge5Df9uN/I8LD4U0C6079fr5a8+/xtZb7iMEwyYIPUBFxXZQt
5HwJyLVEqs9pntELqUL/fPEyerMKYupLNx+s4r/SCqNARi3VwvTCNwK8Toc5ASRB
H+11TCh3PLSJ/A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:22:38 2026 by rpki-client