Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
File: rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft (raw, json)
Hash identifier: DO+lrIMNmcUw3Lt6r14grgUPMHfCGkYxcBqvM5gfuKY=
Subject key identifier: 0D:CC:C9:65:D2:E1:33:AF:8D:E0:E2:79:7A:A4:DD:A6:5E:FD:7C:18
Authority key identifier: AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08
Certificate issuer: /CN=ac0fd4686b6c10a5e37f0a018f550b671d68c908
Certificate serial: 019FAC759FA14E8F5D9D5EFFC274B52F597A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:17 +0000
Manifest this update: Wed 29 Jul 2026 06:00:17 +0000
Manifest next update: Thu 30 Jul 2026 06:00:17 +0000
Files and hashes: 1: DvFoE9eQcmaY9cfgHPWGq1B4Y0o.roa (hash: 2frlwVf7B3+tlGK0l62bvwlFXmOnTN/JdBfNROmaTaE=)
2: rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl (hash: pgYXjuWHqLe2iC3tG04GXmRncOmJyHC3ZLL4cr6iorU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:9f:a1:4e:8f:5d:9d:5e:ff:c2:74:b5:2f:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0fd4686b6c10a5e37f0a018f550b671d68c908
Validity
Not Before: Jul 29 06:00:17 2026 GMT
Not After : Jul 30 06:00:17 2026 GMT
Subject: CN=0dccc965d2e133af8de0e2797aa4dda65efd7c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:8e:82:a7:22:ff:0e:b8:f2:05:8b:fc:a1:
a9:19:90:cc:73:29:1b:da:ea:3d:a6:4f:27:b0:dd:
81:3f:a8:9d:a6:9a:6d:98:33:30:66:de:c7:ba:cc:
e2:fc:7c:76:2e:87:9b:08:2a:a0:0f:89:d8:80:76:
45:86:0f:8b:10:2d:75:60:8f:36:56:c2:de:13:81:
b8:5f:8b:51:6a:13:a8:1a:44:59:b3:66:28:3b:1f:
1a:71:c7:ef:61:ba:cc:d0:3d:eb:74:6b:d1:8a:ff:
bc:20:4a:41:db:1e:6a:90:a5:cf:92:51:21:7f:f9:
68:5e:2d:d1:0b:c1:a8:1e:20:6e:12:67:96:fd:de:
76:ea:73:71:69:f9:1f:64:61:43:d6:9b:52:88:56:
9f:22:13:b9:2b:4b:63:23:b6:f4:d7:4c:4c:d7:73:
f3:80:71:c0:ab:44:73:db:fd:32:da:b3:9e:62:80:
9d:92:cf:9c:95:13:a4:ea:d2:e1:66:78:c4:cf:43:
57:74:14:11:f4:f2:b8:ea:ef:e1:1b:7d:94:33:1a:
23:72:5d:61:2d:14:4d:48:ff:91:f8:b8:13:89:ad:
06:84:c0:79:be:06:a0:6d:0c:bc:b1:b6:2b:a9:1b:
ad:ed:d3:ba:6b:0f:f8:54:de:33:f8:25:fb:b4:91:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CC:C9:65:D2:E1:33:AF:8D:E0:E2:79:7A:A4:DD:A6:5E:FD:7C:18
X509v3 Authority Key Identifier:
keyid:AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d9:26:f6:b4:4d:df:5a:f0:98:83:cc:d0:36:32:a5:40:56:
8b:17:18:25:3e:cc:67:de:eb:95:1e:4d:9c:e8:16:dc:fc:6f:
45:77:e5:1c:25:70:45:cc:ed:8a:66:73:1a:63:69:d7:fa:9a:
e8:c3:2a:f4:93:bf:20:69:f6:bf:a9:57:ad:c6:d8:44:f2:db:
56:10:ca:eb:8a:9a:19:3b:9a:36:e0:8c:08:aa:2f:34:be:28:
7d:14:3a:7b:b1:a3:ff:a8:4f:ac:74:ef:c3:66:b0:48:02:4f:
6b:64:31:b7:ad:66:d1:f5:e5:e4:ee:34:42:c5:cb:e7:a4:f5:
e9:96:19:f1:47:6e:cf:33:4f:81:a2:3b:5f:ce:1b:b2:56:51:
48:29:85:41:fc:1b:55:0a:76:3e:1e:44:d1:05:29:fe:42:9b:
b5:87:83:95:2a:d4:de:58:d5:0d:04:4c:60:cf:a9:54:43:e4:
68:77:04:5c:12:f1:a1:2e:6d:0d:ac:89:a3:91:97:d9:4e:46:
61:ae:2d:c7:9c:01:24:e9:11:19:a1:d4:b3:ed:27:d1:c1:1c:
6b:a8:13:c6:fe:24:d9:b8:15:a9:23:d6:f1:67:7c:3b:ea:41:
9c:ab:8e:0a:c0:c4:b9:a4:cd:31:fa:a4:b0:0f:7a:48:d7:6f:
8b:49:cd:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdZ+hTo9dnV7/wnS1L1l6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGZkNDY4NmI2YzEwYTVlMzdmMGEwMThmNTUwYjY3MWQ2
OGM5MDgwHhcNMjYwNzI5MDYwMDE3WhcNMjYwNzMwMDYwMDE3WjAzMTEwLwYDVQQD
EygwZGNjYzk2NWQyZTEzM2FmOGRlMGUyNzk3YWE0ZGRhNjVlZmQ3YzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcSOgqci/w648gWL/KGpGZDMcykb
2uo9pk8nsN2BP6idppptmDMwZt7Huszi/Hx2LoebCCqgD4nYgHZFhg+LEC11YI82
VsLeE4G4X4tRahOoGkRZs2YoOx8accfvYbrM0D3rdGvRiv+8IEpB2x5qkKXPklEh
f/loXi3RC8GoHiBuEmeW/d526nNxafkfZGFD1ptSiFafIhO5K0tjI7b010xM13Pz
gHHAq0Rz2/0y2rOeYoCdks+clROk6tLhZnjEz0NXdBQR9PK46u/hG32UMxojcl1h
LRRNSP+R+LgTia0GhMB5vgagbQy8sbYrqRut7dO6aw/4VN4z+CX7tJHmGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3MyWXS4TOvjeDieXqk3aZe/XwYMB8GA1UdIwQY
MBaAFKwP1GhrbBCl438KAY9VC2cdaMkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFfVWFHdHNFS1hqZndvQmoxVUxaeDFveVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQt
YzZiZGIxODMwNjk0LzEvckFfVWFHdHNFS1hqZndvQmoxVUxaeDFveVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQtYzZiZGIxODMwNjk0
LzEvckFfVWFHdHNFS1hqZndvQmoxVUxaeDFveVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENkm9rRN
31rwmIPM0DYypUBWixcYJT7MZ97rlR5NnOgW3PxvRXflHCVwRcztimZzGmNp1/qa
6MMq9JO/IGn2v6lXrcbYRPLbVhDK64qaGTuaNuCMCKovNL4ofRQ6e7Gj/6hPrHTv
w2awSAJPa2Qxt61m0fXl5O40QsXL56T16ZYZ8UduzzNPgaI7X84bslZRSCmFQfwb
VQp2Ph5E0QUp/kKbtYeDlSrU3ljVDQRMYM+pVEPkaHcEXBLxoS5tDayJo5GX2U5G
Ya4tx5wBJOkRGaHUs+0n0cEca6gTxv4k2bgVqSPW8Wd8O+pBnKuOCsDEuaTNMfqk
sA96SNdvi0nN5A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:05:53 2026 by rpki-client