
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
File: 1sOjfCGNyegU2_xCq0dvJhZjHUc.mft (raw, json)
Hash identifier: P3ZrAZtgTYprhWCvC31fnm8lD6yuFyqW2e7eB/n5C38=
Subject key identifier: 8B:4A:C1:A2:08:B2:F8:97:47:E9:3E:C7:9C:EC:9B:14:9B:46:BE:40
Authority key identifier: D6:C3:A3:7C:21:8D:C9:E8:14:DB:FC:42:AB:47:6F:26:16:63:1D:47
Certificate issuer: /CN=d6c3a37c218dc9e814dbfc42ab476f2616631d47
Certificate serial: 019FAC760DF7A1E789D439DD8D320E4B1E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:45 +0000
Manifest this update: Wed 29 Jul 2026 06:00:45 +0000
Manifest next update: Thu 30 Jul 2026 06:00:45 +0000
Files and hashes: 1: 1sOjfCGNyegU2_xCq0dvJhZjHUc.crl (hash: F4+tDIW4tFgaEwZwHyDsypiWdQg4Tv8hZ/yuaW7dYMQ=)
2: Eu0fB4RPCslDaY2STwFsEjtmjM4.roa (hash: baHCjNbN0yoBwK8/yKMs0jfLYaaJD3Ay7zAQGrvne+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:0d:f7:a1:e7:89:d4:39:dd:8d:32:0e:4b:1e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c3a37c218dc9e814dbfc42ab476f2616631d47
Validity
Not Before: Jul 29 06:00:45 2026 GMT
Not After : Jul 30 06:00:45 2026 GMT
Subject: CN=8b4ac1a208b2f89747e93ec79cec9b149b46be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:cc:1c:7c:19:b3:ac:ca:98:c5:84:d8:a5:
56:60:1e:d2:63:95:c9:2b:a5:40:cc:c2:b7:54:34:
04:a9:13:7d:8e:5f:b3:d9:71:4c:9a:b2:79:22:ea:
45:e3:89:6c:81:4b:c3:6d:e2:08:bd:b1:35:a6:95:
8e:ca:7d:6c:83:c2:d5:ab:34:fc:97:b5:45:f0:8e:
55:db:b9:cf:82:7e:ee:03:27:6a:c6:39:fd:2b:fe:
97:8e:e9:89:b7:26:2d:c7:ea:d8:7f:d4:a8:78:7e:
f4:2a:db:cc:43:16:bb:46:35:65:c7:f4:ff:3e:c0:
e0:df:e0:cd:c5:d4:fe:9c:0f:d0:d7:57:22:55:10:
09:f7:9d:cf:b5:e2:09:79:7c:b0:9a:46:26:61:3c:
48:22:85:6f:9b:2e:d0:ee:58:b6:2c:0f:a0:53:87:
46:e2:29:aa:18:4b:d3:d7:bc:96:d1:71:3a:00:8c:
cc:a2:b4:9c:95:e3:5c:f0:4e:a0:f5:31:fd:12:5a:
01:4b:38:b7:1b:69:c3:f3:39:5a:7d:37:61:8e:42:
15:c5:c4:a6:24:aa:c4:0b:e5:a1:bb:39:f4:48:c1:
28:62:03:55:5c:0e:93:d8:76:bf:13:31:ce:3c:17:
e3:d3:ac:5b:d0:f0:79:a8:2b:b8:4a:bf:27:6a:c9:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:C1:A2:08:B2:F8:97:47:E9:3E:C7:9C:EC:9B:14:9B:46:BE:40
X509v3 Authority Key Identifier:
keyid:D6:C3:A3:7C:21:8D:C9:E8:14:DB:FC:42:AB:47:6F:26:16:63:1D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e0:6b:fb:fd:74:27:0d:5f:d8:02:60:28:8c:ef:cc:44:ed:
1f:22:61:e8:67:ad:1a:02:de:db:3f:fc:ac:ba:cf:92:ef:1e:
ea:ed:35:e5:58:05:88:61:87:b8:aa:25:1f:64:e7:08:90:2c:
2e:cc:d7:9b:15:a4:ca:53:c8:02:a1:7a:57:b5:70:32:b2:e7:
c4:cc:3c:38:12:10:00:ad:63:a1:b6:7f:b9:84:78:80:62:31:
ad:3c:2e:52:e8:3c:a9:15:21:4a:51:db:0a:f7:83:f3:22:ec:
93:c9:fe:54:fb:9a:a6:a5:70:db:f5:84:87:19:5d:f6:3f:bd:
cd:59:78:bc:e3:0f:13:a0:b5:e6:24:88:3d:c5:a4:f3:54:b9:
c4:0b:62:8b:f4:71:cb:d7:f3:28:4b:6d:c5:13:26:f5:95:70:
b1:8d:17:f5:cb:ce:09:89:06:9d:a6:01:60:01:49:99:f1:88:
e2:7a:ab:f3:95:47:f4:56:f4:2d:41:ba:3e:77:b3:8b:b1:66:
52:68:f9:4f:00:8d:b4:fb:59:f9:0e:41:2e:ff:19:e5:ad:8d:
bf:9f:14:bd:9e:21:90:ed:c8:42:ec:10:6e:d0:53:af:23:63:
5d:c1:da:a3:8b:b5:31:96:bc:9e:b5:e9:f8:c4:74:b9:d0:a8:
d8:48:6c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdg33oeeJ1DndjTIOSx40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzNhMzdjMjE4ZGM5ZTgxNGRiZmM0MmFiNDc2ZjI2MTY2
MzFkNDcwHhcNMjYwNzI5MDYwMDQ1WhcNMjYwNzMwMDYwMDQ1WjAzMTEwLwYDVQQD
Eyg4YjRhYzFhMjA4YjJmODk3NDdlOTNlYzc5Y2VjOWIxNDliNDZiZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zvMHHwZs6zKmMWE2KVWYB7SY5XJ
K6VAzMK3VDQEqRN9jl+z2XFMmrJ5IupF44lsgUvDbeIIvbE1ppWOyn1sg8LVqzT8
l7VF8I5V27nPgn7uAydqxjn9K/6XjumJtyYtx+rYf9SoeH70KtvMQxa7RjVlx/T/
PsDg3+DNxdT+nA/Q11ciVRAJ953PteIJeXywmkYmYTxIIoVvmy7Q7li2LA+gU4dG
4imqGEvT17yW0XE6AIzMorScleNc8E6g9TH9EloBSzi3G2nD8zlafTdhjkIVxcSm
JKrEC+Whuzn0SMEoYgNVXA6T2Ha/EzHOPBfj06xb0PB5qCu4Sr8naskNAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItKwaIIsviXR+k+x5zsmxSbRr5AMB8GA1UdIwQY
MBaAFNbDo3whjcnoFNv8QqtHbyYWYx1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNPamZDR055ZWdVMl94Q3EwZHZKaFpqSFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgt
Y2Q4YmUxYzU5ZDhkLzEvMXNPamZDR055ZWdVMl94Q3EwZHZKaFpqSFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgtY2Q4YmUxYzU5ZDhk
LzEvMXNPamZDR055ZWdVMl94Q3EwZHZKaFpqSFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOBr+/10
Jw1f2AJgKIzvzETtHyJh6GetGgLe2z/8rLrPku8e6u015VgFiGGHuKolH2TnCJAs
LszXmxWkylPIAqF6V7VwMrLnxMw8OBIQAK1jobZ/uYR4gGIxrTwuUug8qRUhSlHb
CveD8yLsk8n+VPuapqVw2/WEhxld9j+9zVl4vOMPE6C15iSIPcWk81S5xAtii/Rx
y9fzKEttxRMm9ZVwsY0X9cvOCYkGnaYBYAFJmfGI4nqr85VH9Fb0LUG6Pnezi7Fm
Umj5TwCNtPtZ+Q5BLv8Z5a2Nv58UvZ4hkO3IQuwQbtBTryNjXcHao4u1MZa8nrXp
+MR0udCo2EhsPg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:15:12 2026 by rpki-client