
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft
File: t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft (raw, json)
Hash identifier: HwfcyvHVHoIU/uN6sa+4Yqn/QMq8foYnpVa3z9MPBys=
Subject key identifier: 08:E7:A7:B4:F0:DE:81:A8:04:5E:1E:3F:60:62:11:DE:B1:A6:21:DA
Authority key identifier: B7:56:91:E7:A6:C9:44:15:EC:83:A3:E6:AE:B4:6F:09:20:BA:0A:FA
Certificate issuer: /CN=b75691e7a6c94415ec83a3e6aeb46f0920ba0afa
Certificate serial: 019FAA887A899D47B76D827B4041A865C27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1aR56bJRBXsg6PmrrRvCSC6Cvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:38 +0000
Manifest this update: Tue 28 Jul 2026 21:01:38 +0000
Manifest next update: Wed 29 Jul 2026 21:01:38 +0000
Files and hashes: 1: ZiDPogPrQOpuh0FPglTkQ8pXUz8.roa (hash: YCXIv4lJCwsQYTuVQhQQmTXD83p/Au5A6G0CssWCKHE=)
2: t1aR56bJRBXsg6PmrrRvCSC6Cvo.crl (hash: 0jBMmpOhmh43/gu8npWjNz/PDlvPPZ8iOe/eP283Nx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1aR56bJRBXsg6PmrrRvCSC6Cvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:7a:89:9d:47:b7:6d:82:7b:40:41:a8:65:c2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75691e7a6c94415ec83a3e6aeb46f0920ba0afa
Validity
Not Before: Jul 28 21:01:38 2026 GMT
Not After : Jul 29 21:01:38 2026 GMT
Subject: CN=08e7a7b4f0de81a8045e1e3f606211deb1a621da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:87:9b:9e:0e:30:08:11:2d:35:41:e9:2c:
7c:3f:7d:c4:76:21:35:7c:48:b8:94:b1:d8:98:75:
2d:8e:88:7a:6d:e0:5b:1d:c3:6d:28:15:a3:c8:3a:
47:77:d1:48:16:d5:cf:71:df:41:e9:c8:38:c8:1e:
39:85:4f:f3:f5:5d:d6:ec:60:52:ce:67:82:a2:2e:
ac:3e:e2:04:17:ae:37:13:6c:a8:f0:7b:0c:83:ef:
c4:a4:e7:ba:1e:40:4d:18:5b:00:ac:2f:c3:52:02:
bb:eb:d0:cf:a2:e3:28:90:a2:aa:5f:37:0c:b7:29:
c0:43:e3:ca:4a:8f:b1:91:05:9d:be:d0:7b:2b:9c:
63:c6:36:c2:0b:4a:33:63:68:3c:c5:d7:ba:02:09:
01:2f:0f:f4:d7:2a:0c:6e:45:e7:21:78:34:46:e8:
39:92:48:ff:35:7b:a2:00:1f:11:95:6f:53:e8:71:
78:90:2e:0c:2a:6f:cb:93:62:8b:2d:c0:99:b7:80:
a6:de:73:86:25:94:8d:7b:ab:31:b2:85:38:6a:e1:
cd:83:87:38:52:49:80:44:b1:9f:d4:2d:56:5a:e7:
96:f1:aa:a0:fd:9d:58:47:27:68:57:fe:78:5d:80:
44:53:3c:5c:4e:ba:3d:78:0e:70:86:bb:aa:7a:e1:
bd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:A7:B4:F0:DE:81:A8:04:5E:1E:3F:60:62:11:DE:B1:A6:21:DA
X509v3 Authority Key Identifier:
keyid:B7:56:91:E7:A6:C9:44:15:EC:83:A3:E6:AE:B4:6F:09:20:BA:0A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1aR56bJRBXsg6PmrrRvCSC6Cvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/t1aR56bJRBXsg6PmrrRvCSC6Cvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:98:02:b6:cd:76:8e:1e:84:f4:9e:e8:1a:78:b9:fc:02:c3:
8c:e5:d5:0c:44:b1:8b:52:44:3e:0a:31:82:fb:fa:19:71:74:
00:64:0c:9a:5f:79:cd:32:94:5c:57:b4:26:f1:f4:9f:12:45:
46:93:9e:a2:10:c2:cf:d7:94:03:5e:04:e3:df:4e:a9:e3:20:
59:6f:63:98:9e:fe:72:6e:70:74:5e:db:db:04:c4:1d:70:ef:
56:0a:4d:92:e6:a6:b9:a6:c9:b0:22:95:9f:91:8e:0a:14:25:
93:c1:0d:04:fe:53:40:16:72:ee:8d:3b:2c:ae:92:a9:98:ae:
48:c0:98:4b:49:0e:83:14:06:b8:ac:e4:02:77:0b:9e:ff:36:
ea:79:6f:78:e7:c1:ef:f8:41:c9:82:9f:2e:77:a2:31:e7:8f:
ef:7b:36:03:b6:7e:24:b7:0d:46:22:8e:09:2f:78:0f:8f:31:
65:76:e8:28:97:c6:3a:5b:8a:d7:23:04:e6:ef:7f:b6:14:bf:
9a:1a:f8:37:98:db:79:28:0b:da:18:03:79:27:e8:79:06:a4:
29:49:46:a7:05:aa:6d:6f:7f:84:4d:18:71:2b:78:21:59:64:
cc:92:58:91:c3:14:6d:23:bb:f0:b2:27:20:03:e4:13:eb:71:
3a:22:91:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiHqJnUe3bYJ7QEGoZcJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTY5MWU3YTZjOTQ0MTVlYzgzYTNlNmFlYjQ2ZjA5MjBi
YTBhZmEwHhcNMjYwNzI4MjEwMTM4WhcNMjYwNzI5MjEwMTM4WjAzMTEwLwYDVQQD
EygwOGU3YTdiNGYwZGU4MWE4MDQ1ZTFlM2Y2MDYyMTFkZWIxYTYyMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsyHm54OMAgRLTVB6Sx8P33EdiE1
fEi4lLHYmHUtjoh6beBbHcNtKBWjyDpHd9FIFtXPcd9B6cg4yB45hU/z9V3W7GBS
zmeCoi6sPuIEF643E2yo8HsMg+/EpOe6HkBNGFsArC/DUgK769DPouMokKKqXzcM
tynAQ+PKSo+xkQWdvtB7K5xjxjbCC0ozY2g8xde6AgkBLw/01yoMbkXnIXg0Rug5
kkj/NXuiAB8RlW9T6HF4kC4MKm/Lk2KLLcCZt4Cm3nOGJZSNe6sxsoU4auHNg4c4
UkmARLGf1C1WWueW8aqg/Z1YRydoV/54XYBEUzxcTro9eA5whruqeuG9kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjnp7Tw3oGoBF4eP2BiEd6xpiHaMB8GA1UdIwQY
MBaAFLdWkeemyUQV7IOj5q60bwkgugr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFhUjU2YkpSQlhzZzZQbXJyUnZDU0M2Q3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80YzRmZjItYzdlYi00ZmRlLWFkNDUt
MzNkZDcwMjEwZmY1LzEvdDFhUjU2YkpSQlhzZzZQbXJyUnZDU0M2Q3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80YzRmZjItYzdlYi00ZmRlLWFkNDUtMzNkZDcwMjEwZmY1
LzEvdDFhUjU2YkpSQlhzZzZQbXJyUnZDU0M2Q3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJgCts12
jh6E9J7oGni5/ALDjOXVDESxi1JEPgoxgvv6GXF0AGQMml95zTKUXFe0JvH0nxJF
RpOeohDCz9eUA14E499OqeMgWW9jmJ7+cm5wdF7b2wTEHXDvVgpNkuamuabJsCKV
n5GOChQlk8ENBP5TQBZy7o07LK6SqZiuSMCYS0kOgxQGuKzkAncLnv826nlveOfB
7/hByYKfLneiMeeP73s2A7Z+JLcNRiKOCS94D48xZXboKJfGOluK1yME5u9/thS/
mhr4N5jbeSgL2hgDeSfoeQakKUlGpwWqbW9/hE0YcSt4IVlkzJJYkcMUbSO78LIn
IAPkE+txOiKRXA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:31 2026 by rpki-client