Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier: SIofRrPuSb86Z64E2QZlMtxz1gXRT+VcJfbBYMjrD8Y=
Subject key identifier: 1A:B6:AD:C1:16:85:86:21:26:F7:54:34:87:EB:48:3B:5E:8D:7B:48
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial: 019FA9ABCCB9041119748F2BE0D4D4F633FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number: 02C4
Signing time: Tue 28 Jul 2026 17:00:36 +0000
Manifest this update: Tue 28 Jul 2026 17:00:36 +0000
Manifest next update: Wed 29 Jul 2026 17:00:36 +0000
Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: bayu9ShKV55mz6xwpMeYVe//BZfNY+iuifiOz8z3m0o=)
2: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
3: sSUeiTuTscB37GhFxmHCikkgWjE.asa (hash: Kd5QYpqifnyO+2uyl3rYd5x9cU744aPeXurfnyMHjoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:cc:b9:04:11:19:74:8f:2b:e0:d4:d4:f6:33:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Validity
Not Before: Jul 28 17:00:36 2026 GMT
Not After : Jul 29 17:00:36 2026 GMT
Subject: CN=1ab6adc11685862126f7543487eb483b5e8d7b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:ad:4d:96:79:0c:ac:e3:c7:56:6c:2d:55:
b1:5a:20:85:66:5f:44:51:94:3b:c5:9e:79:fc:be:
c0:c8:a1:08:e3:ad:43:4f:c5:4a:da:a7:9b:f3:fe:
34:64:19:cd:bd:ff:ab:08:e4:dc:0a:ea:24:96:12:
f5:a3:34:8f:8b:15:ec:41:8e:20:57:6d:5b:4d:72:
89:39:23:5d:6b:88:0d:9c:8d:67:b5:30:75:d2:97:
7a:b4:12:e9:ba:f0:94:72:a3:30:b5:df:9e:0e:da:
8d:41:bd:a2:05:83:88:88:df:a1:96:f8:13:ca:d9:
1d:70:8e:e9:70:b5:cc:68:c2:9d:d7:64:19:80:3e:
fc:04:a1:75:74:81:57:65:62:13:95:54:49:80:b2:
fe:3c:68:1d:81:f4:9a:a3:0b:22:9e:4a:64:be:8e:
dc:79:1a:36:69:42:87:3a:e8:b5:0c:69:91:1c:ba:
ef:bd:e1:44:40:20:2c:7c:1b:31:4d:79:02:b5:b3:
ee:7a:69:99:b3:d7:9f:26:04:35:11:00:ca:c5:80:
31:16:f8:fe:e4:24:65:31:6f:ca:e7:ae:db:8c:0e:
fd:6c:e6:e4:48:83:d9:41:6b:6f:71:ff:4e:a6:44:
b7:08:93:8a:6b:2a:2a:61:81:da:50:aa:76:cf:ad:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B6:AD:C1:16:85:86:21:26:F7:54:34:87:EB:48:3B:5E:8D:7B:48
X509v3 Authority Key Identifier:
keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4a:20:93:c4:79:23:c2:40:70:9a:4e:18:cc:cf:d2:cb:f1:
4a:75:5d:39:68:20:ca:06:f4:07:12:e9:fa:43:16:17:5a:0a:
04:d0:3c:14:b3:f8:d8:24:ee:0e:5e:a4:ee:a8:62:99:cc:24:
3c:c4:1b:b2:04:f2:18:52:e3:70:ba:43:87:33:26:d2:ca:31:
3d:02:61:7c:1a:21:ce:98:05:da:dc:09:70:2a:7d:2d:8d:c2:
52:d9:a5:48:e0:f7:d4:37:d0:67:1e:fa:23:98:8e:2a:db:ca:
36:a9:fc:b9:5a:5a:a3:25:31:18:c6:b8:1d:c8:ff:29:21:48:
69:2f:ce:60:0d:f3:2a:ec:86:da:21:bc:8d:fe:6e:a9:5d:a3:
1a:22:01:5b:c0:3d:12:e9:66:a8:89:26:25:62:b9:fd:4e:f9:
28:31:26:28:1a:f3:e8:3e:8d:09:b2:21:27:2e:20:1b:e0:be:
10:1c:d4:5d:60:26:07:56:17:79:15:70:5c:2a:22:de:4c:d2:
78:77:14:83:02:6c:12:c5:a7:12:67:6c:c4:d6:00:51:35:c3:
c6:dc:9b:73:73:1f:18:92:b9:7d:46:e8:d3:19:5a:bf:ea:25:
99:e1:b7:19:cd:c1:09:83:ab:2a:ce:4c:d3:b4:62:2b:97:0b:
b1:ea:45:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq8y5BBEZdI8r4NTU9jP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzY0OWI2NmExOWRhMmZlYzIzNmIwNDlkZDEyMmEwZWYz
NjhiMGYwHhcNMjYwNzI4MTcwMDM2WhcNMjYwNzI5MTcwMDM2WjAzMTEwLwYDVQQD
EygxYWI2YWRjMTE2ODU4NjIxMjZmNzU0MzQ4N2ViNDgzYjVlOGQ3YjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA006tTZZ5DKzjx1ZsLVWxWiCFZl9E
UZQ7xZ55/L7AyKEI461DT8VK2qeb8/40ZBnNvf+rCOTcCuoklhL1ozSPixXsQY4g
V21bTXKJOSNda4gNnI1ntTB10pd6tBLpuvCUcqMwtd+eDtqNQb2iBYOIiN+hlvgT
ytkdcI7pcLXMaMKd12QZgD78BKF1dIFXZWITlVRJgLL+PGgdgfSaowsinkpkvo7c
eRo2aUKHOui1DGmRHLrvveFEQCAsfBsxTXkCtbPuemmZs9efJgQ1EQDKxYAxFvj+
5CRlMW/K567bjA79bObkSIPZQWtvcf9OpkS3CJOKayoqYYHaUKp2z61TOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq2rcEWhYYhJvdUNIfrSDtejXtIMB8GA1UdIwQY
MBaAFODGSbZqGdov7CNrBJ3RIqDvNosPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYjhmN2MtYzhiZi00MzQyLTgyNmMt
OGY1NDQ4NDdiZTc0LzEvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jYjhmN2MtYzhiZi00MzQyLTgyNmMtOGY1NDQ4NDdiZTc0
LzEvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkogk8R5
I8JAcJpOGMzP0svxSnVdOWggygb0BxLp+kMWF1oKBNA8FLP42CTuDl6k7qhimcwk
PMQbsgTyGFLjcLpDhzMm0soxPQJhfBohzpgF2twJcCp9LY3CUtmlSOD31DfQZx76
I5iOKtvKNqn8uVpaoyUxGMa4Hcj/KSFIaS/OYA3zKuyG2iG8jf5uqV2jGiIBW8A9
EulmqIkmJWK5/U75KDEmKBrz6D6NCbIhJy4gG+C+EBzUXWAmB1YXeRVwXCoi3kzS
eHcUgwJsEsWnEmdsxNYAUTXDxtybc3MfGJK5fUbo0xlav+olmeG3Gc3BCYOrKs5M
07RiK5cLsepFNA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:00 2026 by rpki-client