Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
File: v02QFSU9d7e4q3m7vrs-_LdCwvE.mft (raw, json)
Hash identifier: GRdCWKUpGkqCb6NM9vS2uqd/MEwIY/eprKZsLYIgCv0=
Subject key identifier: 29:21:56:DA:A1:E5:6F:54:84:EC:9F:EE:BE:41:C1:EA:B1:BC:D4:A8
Authority key identifier: BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
Certificate issuer: /CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Certificate serial: 019FAC762B2FF74DE24215EB7D0FAA21B4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:53 +0000
Manifest this update: Wed 29 Jul 2026 06:00:53 +0000
Manifest next update: Thu 30 Jul 2026 06:00:53 +0000
Files and hashes: 1: LLW6KMEjDdWJNHccooMhS8WkJBo.roa (hash: 4wPZvW7aabauk/AVllnR9557p3pfAAJeEY/OlA5nxV8=)
2: azhaK6p4TY581nFNN0YSc0NYZII.roa (hash: D1i0KlyPZu/BLyg50mMb9PNPD0ML3cRf92lF5p6N+zc=)
3: v02QFSU9d7e4q3m7vrs-_LdCwvE.crl (hash: Rwg7dTf5MtAzQBEd4nKaE4AnjdRR5KmRS9HoTNVz8Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:2b:2f:f7:4d:e2:42:15:eb:7d:0f:aa:21:b4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Validity
Not Before: Jul 29 06:00:53 2026 GMT
Not After : Jul 30 06:00:53 2026 GMT
Subject: CN=292156daa1e56f5484ec9feebe41c1eab1bcd4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:dc:33:e2:36:46:f5:a9:f9:88:1d:ba:37:
db:fa:87:9f:62:33:e6:82:ea:6b:49:ee:2a:80:21:
50:dc:c1:de:fa:09:f0:7b:f9:7b:84:bf:10:8c:96:
46:18:ab:9e:6c:3d:6c:68:4a:08:2f:87:51:09:f5:
04:20:e5:b0:2e:1e:03:89:f0:34:4a:72:40:f7:1c:
79:d5:22:2a:b6:e3:63:de:71:b5:38:bc:8e:00:3c:
c7:5c:ff:d1:fc:27:68:48:2e:60:84:7c:3d:06:47:
32:25:8e:6d:a1:05:e4:4b:96:88:26:84:7a:e8:bd:
0e:33:bd:fd:8a:a5:78:d3:ef:a7:6d:bf:24:53:c8:
3f:03:08:37:c1:68:71:b1:ae:18:9e:23:d4:2f:e3:
46:25:18:07:6a:98:51:29:fd:8f:97:cf:28:46:2b:
08:26:3f:37:94:d9:11:a6:a1:dc:de:d6:58:36:b0:
40:cd:00:af:f5:52:19:c6:54:58:d2:81:64:eb:24:
5f:3c:45:67:dc:9f:f0:fa:e1:08:0e:ac:51:c9:6b:
9f:e9:69:06:ab:63:5f:de:6a:37:1f:c2:66:6b:a1:
38:aa:67:29:87:f8:e4:1e:ea:0f:95:6a:c3:24:f7:
78:78:0e:46:8c:a3:a5:4e:34:d9:71:dc:9e:3b:d0:
76:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:56:DA:A1:E5:6F:54:84:EC:9F:EE:BE:41:C1:EA:B1:BC:D4:A8
X509v3 Authority Key Identifier:
keyid:BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3d:e6:3e:e8:95:b5:1a:39:c3:42:af:91:15:93:9d:d3:80:
5d:05:c0:e5:ac:1d:63:6c:00:5f:58:96:96:b1:1a:9e:49:23:
70:1e:47:81:d6:8a:9a:1d:05:b7:67:fe:5c:08:30:a7:a9:6b:
35:7f:23:a7:93:54:f6:a0:81:3e:23:89:59:7b:b9:a7:cf:8a:
f7:05:ad:e4:dd:80:26:b6:a6:5e:43:e8:92:1d:ab:12:c3:c1:
bc:d3:6b:0b:c5:aa:cd:42:c1:66:31:18:6f:87:df:70:f9:de:
d7:7a:12:39:37:2d:c3:8f:e7:96:09:e0:40:d4:f3:2d:2d:1c:
7e:65:34:7a:59:f0:6c:37:47:af:42:f9:d6:00:6f:29:d0:c8:
7f:45:62:29:7b:3f:53:19:b9:1d:6d:83:a2:a1:9a:24:95:e1:
b0:25:94:09:cf:bf:b5:d8:c2:49:de:78:1f:0c:33:dd:04:1b:
65:44:1e:dd:f4:b0:40:47:68:44:80:c9:08:0b:25:43:b9:cf:
3a:f7:d1:a0:e5:31:df:43:a2:db:7d:36:1a:90:ff:e8:df:b5:
50:37:27:b2:af:55:98:d3:7d:a7:8b:ed:fe:13:b7:99:1b:2f:
ae:c4:f8:67:c5:16:b9:d9:62:0d:ed:d9:61:0c:35:a3:ea:e4:
f8:e6:7b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdisv903iQhXrfQ+qIbT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGQ5MDE1MjUzZDc3YjdiOGFiNzliYmJlYmIzZWZjYjc0
MmMyZjEwHhcNMjYwNzI5MDYwMDUzWhcNMjYwNzMwMDYwMDUzWjAzMTEwLwYDVQQD
EygyOTIxNTZkYWExZTU2ZjU0ODRlYzlmZWViZTQxYzFlYWIxYmNkNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOrcM+I2RvWp+Ygdujfb+oefYjPm
guprSe4qgCFQ3MHe+gnwe/l7hL8QjJZGGKuebD1saEoIL4dRCfUEIOWwLh4DifA0
SnJA9xx51SIqtuNj3nG1OLyOADzHXP/R/CdoSC5ghHw9BkcyJY5toQXkS5aIJoR6
6L0OM739iqV40++nbb8kU8g/Awg3wWhxsa4YniPUL+NGJRgHaphRKf2Pl88oRisI
Jj83lNkRpqHc3tZYNrBAzQCv9VIZxlRY0oFk6yRfPEVn3J/w+uEIDqxRyWuf6WkG
q2Nf3mo3H8Jma6E4qmcph/jkHuoPlWrDJPd4eA5GjKOlTjTZcdyeO9B2uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkhVtqh5W9UhOyf7r5BweqxvNSoMB8GA1UdIwQY
MBaAFL9NkBUlPXe3uKt5u767Pvy3QsLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjAyUUZTVTlkN2U0cTNtN3Zycy1fTGRDd3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMt
YmZkZWMwYzExMmUzLzEvdjAyUUZTVTlkN2U0cTNtN3Zycy1fTGRDd3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wYTFiODMtODZiYS00MDFhLWE1NDMtYmZkZWMwYzExMmUz
LzEvdjAyUUZTVTlkN2U0cTNtN3Zycy1fTGRDd3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEz3mPuiV
tRo5w0KvkRWTndOAXQXA5awdY2wAX1iWlrEankkjcB5HgdaKmh0Ft2f+XAgwp6lr
NX8jp5NU9qCBPiOJWXu5p8+K9wWt5N2AJramXkPokh2rEsPBvNNrC8WqzULBZjEY
b4ffcPne13oSOTctw4/nlgngQNTzLS0cfmU0elnwbDdHr0L51gBvKdDIf0ViKXs/
Uxm5HW2DoqGaJJXhsCWUCc+/tdjCSd54Hwwz3QQbZUQe3fSwQEdoRIDJCAslQ7nP
OvfRoOUx30Oi2302GpD/6N+1UDcnsq9VmNN9p4vt/hO3mRsvrsT4Z8UWudliDe3Z
YQw1o+rk+OZ78Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:01:37 2026 by rpki-client