Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier: zapBoX1n2ZO7c884yZtzkVEnDvabyeP7DlX5XOrfMnE=
Subject key identifier: 7B:5B:2D:41:87:60:C7:82:22:17:0F:C9:C0:4F:3F:55:1B:1A:ED:B9
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial: 01A0C96B763AAE2D2A3B1053A7BE6683D472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number: 0359
Signing time: Tue 22 Sep 2026 14:00:58 +0000
Manifest this update: Tue 22 Sep 2026 14:00:58 +0000
Manifest next update: Wed 23 Sep 2026 14:00:58 +0000
Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: NoMiuQBNkpiRL/utHnwDo9gQeH0ljKw0GETl/GYJ2Nk=)
2: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
3: sSUeiTuTscB37GhFxmHCikkgWjE.asa (hash: Kd5QYpqifnyO+2uyl3rYd5x9cU744aPeXurfnyMHjoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:76:3a:ae:2d:2a:3b:10:53:a7:be:66:83:d4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Validity
Not Before: Sep 22 14:00:58 2026 GMT
Not After : Sep 23 14:00:58 2026 GMT
Subject: CN=7b5b2d418760c78222170fc9c04f3f551b1aedb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3a:c2:55:d9:37:0e:8b:1c:c1:4e:8c:32:f1:
2d:f5:03:e9:b8:2f:6e:eb:fd:65:7e:76:f9:2d:52:
ef:ff:a3:2c:01:5b:ec:7d:8d:2f:23:b4:a2:e1:4b:
34:e3:23:94:f3:a6:12:63:dc:e5:0d:a7:cb:ba:15:
aa:7b:a9:ff:a5:59:4b:b2:1b:b4:55:95:93:ca:63:
20:6c:6a:ff:44:40:1d:0b:20:9b:19:1c:50:a3:49:
ff:da:0d:ca:89:40:79:c9:ca:89:ce:e4:e6:f4:62:
26:0c:24:63:22:37:96:1d:2f:12:27:8f:80:7c:d5:
76:dd:f6:4f:ac:34:7e:f8:6f:b1:8b:f7:09:86:a8:
4c:1e:26:da:bb:f7:41:86:62:d8:0a:d9:70:2a:4a:
1c:23:8c:0f:25:34:cd:07:5f:aa:91:5d:8f:4f:db:
8f:5c:d0:8f:c6:48:72:9f:86:f3:0b:b4:2c:7c:f7:
ee:4a:b5:f5:07:7c:a2:82:55:b4:38:5a:08:ca:0e:
a7:ec:28:b7:e3:89:3a:39:8e:64:f0:b8:b1:9a:ab:
1a:3d:0e:d8:28:3d:ce:b4:b8:40:3d:7c:62:21:e8:
57:ba:45:50:ae:85:bb:6e:3f:02:12:38:25:e8:9e:
7f:e3:ca:ab:94:7c:2c:4b:89:fd:dd:6f:bf:64:1a:
44:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5B:2D:41:87:60:C7:82:22:17:0F:C9:C0:4F:3F:55:1B:1A:ED:B9
X509v3 Authority Key Identifier:
keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c9:f0:b5:c1:c2:e7:31:c9:91:1f:ac:e3:c5:83:5f:b7:66:
5f:36:f1:e5:ab:38:bc:4b:40:64:26:b4:f1:a5:26:16:c1:f8:
97:4c:4a:25:de:9a:6f:ec:4a:9d:c6:6b:55:16:a7:2a:1e:d2:
8a:ad:52:b0:8e:8b:c5:6a:10:fa:0d:ce:e7:8e:86:15:ce:19:
0e:8e:1a:21:11:16:a3:7a:55:fb:94:ea:ce:ef:44:ce:30:6c:
ec:08:de:86:c9:45:91:6c:86:9a:4b:b2:d8:ab:7e:df:ce:f4:
ee:9f:ba:1b:8d:95:c7:9b:c3:06:69:24:fa:b0:c6:23:a2:3d:
df:90:d9:17:e7:3f:13:d7:f4:d1:39:68:2c:b0:f9:38:3c:22:
ee:a9:99:3c:1b:25:1c:ab:94:85:9c:1b:7a:ad:9c:fb:14:64:
63:f9:eb:04:ac:be:97:41:3c:18:40:8b:4e:64:50:76:0c:ff:
60:5e:43:97:8d:5e:86:8f:e3:0b:6f:e2:79:2a:eb:9f:67:db:
7f:c6:68:b8:1b:16:5d:87:f7:fc:f2:0b:f6:12:a8:78:47:2e:
84:be:ef:bd:37:b8:c2:b4:cb:c0:39:b0:51:8d:b8:dc:99:46:
69:bd:2a:96:8c:67:d1:79:d1:9d:f9:0c:38:f2:01:e8:8e:03:
36:5f:d1:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa3Y6ri0qOxBTp75mg9RyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzY0OWI2NmExOWRhMmZlYzIzNmIwNDlkZDEyMmEwZWYz
NjhiMGYwHhcNMjYwOTIyMTQwMDU4WhcNMjYwOTIzMTQwMDU4WjAzMTEwLwYDVQQD
Eyg3YjViMmQ0MTg3NjBjNzgyMjIxNzBmYzljMDRmM2Y1NTFiMWFlZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TrCVdk3DoscwU6MMvEt9QPpuC9u
6/1lfnb5LVLv/6MsAVvsfY0vI7Si4Us04yOU86YSY9zlDafLuhWqe6n/pVlLshu0
VZWTymMgbGr/REAdCyCbGRxQo0n/2g3KiUB5ycqJzuTm9GImDCRjIjeWHS8SJ4+A
fNV23fZPrDR++G+xi/cJhqhMHibau/dBhmLYCtlwKkocI4wPJTTNB1+qkV2PT9uP
XNCPxkhyn4bzC7QsfPfuSrX1B3yiglW0OFoIyg6n7Ci344k6OY5k8LixmqsaPQ7Y
KD3OtLhAPXxiIehXukVQroW7bj8CEjgl6J5/48qrlHwsS4n93W+/ZBpEywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtbLUGHYMeCIhcPycBPP1UbGu25MB8GA1UdIwQY
MBaAFODGSbZqGdov7CNrBJ3RIqDvNosPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYjhmN2MtYzhiZi00MzQyLTgyNmMt
OGY1NDQ4NDdiZTc0LzEvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jYjhmN2MtYzhiZi00MzQyLTgyNmMtOGY1NDQ4NDdiZTc0
LzEvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsnwtcHC
5zHJkR+s48WDX7dmXzbx5as4vEtAZCa08aUmFsH4l0xKJd6ab+xKncZrVRanKh7S
iq1SsI6LxWoQ+g3O546GFc4ZDo4aIREWo3pV+5Tqzu9EzjBs7AjehslFkWyGmkuy
2Kt+38707p+6G42Vx5vDBmkk+rDGI6I935DZF+c/E9f00TloLLD5ODwi7qmZPBsl
HKuUhZwbeq2c+xRkY/nrBKy+l0E8GECLTmRQdgz/YF5Dl41eho/jC2/ieSrrn2fb
f8ZouBsWXYf3/PIL9hKoeEcuhL7vvTe4wrTLwDmwUY243JlGab0qloxn0XnRnfkM
OPIB6I4DNl/RCQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:37:48 2026 by rpki-client