
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: qRurnw2r/iD250qyKwsaILmXQzc4+jDCrV6O4hN+Wa4=
Subject key identifier: 4E:E9:9E:7A:3D:51:A9:FA:3F:0D:F2:49:E7:47:68:D5:00:39:BD:4F
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019FA974CBAA9A7562AF93D3005D7C43F863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 16:00:31 +0000
Manifest this update: Tue 28 Jul 2026 16:00:31 +0000
Manifest next update: Wed 29 Jul 2026 16:00:31 +0000
Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: iOAyJNlrxy3X/sarkmykc0vuwbNpLb7Ex4CXWGxUrls=)
3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:cb:aa:9a:75:62:af:93:d3:00:5d:7c:43:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Jul 28 16:00:31 2026 GMT
Not After : Jul 29 16:00:31 2026 GMT
Subject: CN=4ee99e7a3d51a9fa3f0df249e74768d50039bd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:8f:81:b8:c3:17:6f:8e:ff:bb:32:4a:02:
c6:5d:68:69:d1:99:9b:45:6c:10:cd:03:c6:0a:b3:
24:62:b6:22:2c:7f:c9:c6:7e:f1:54:3f:21:6f:1b:
56:51:c7:5e:28:63:ab:a8:70:3d:c3:b8:d1:3b:3f:
02:6d:e0:41:1b:88:d0:df:8d:05:80:8b:f5:3f:2a:
40:75:25:89:cd:aa:6d:de:27:5f:d8:86:2c:71:e9:
01:67:a5:c2:da:68:58:3a:cc:76:9a:d1:98:fd:d5:
b0:d6:4a:27:8a:9d:80:e3:39:e5:6a:22:78:eb:53:
7a:f2:22:46:c9:40:9c:02:59:5b:39:43:34:5f:ee:
81:d1:00:90:da:a0:cf:c2:22:cd:85:07:25:eb:e1:
9a:11:f0:bd:d2:57:9c:64:fa:0d:e7:61:04:7b:4e:
80:cb:1d:a1:7e:e5:35:3d:5f:59:fb:0e:59:21:b9:
e4:b5:4b:3d:e4:e0:f9:63:ca:4b:91:f9:e6:44:48:
d1:8b:bc:de:ba:1b:f2:3c:7a:68:3e:34:fc:a5:6d:
a8:b2:2b:fd:d3:1f:01:ec:cb:b2:7a:0d:26:58:70:
64:42:e2:a4:17:32:c5:7d:bf:db:7e:a0:6f:15:69:
36:7e:e5:0f:55:6e:62:25:06:0a:1e:07:eb:7f:85:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E9:9E:7A:3D:51:A9:FA:3F:0D:F2:49:E7:47:68:D5:00:39:BD:4F
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:28:1c:c9:c6:17:a1:f9:d8:88:47:51:fe:35:ed:e2:f2:63:
a1:4c:3f:b7:b3:9e:9f:e5:ef:da:92:7f:5d:c9:e1:fe:a1:c8:
77:ff:c1:a1:f1:c8:1e:d3:5f:93:db:64:ab:1c:4f:37:b3:cb:
2d:79:51:f9:71:09:a7:53:99:6c:a0:2b:99:d0:12:31:f4:38:
8f:19:f7:d7:b1:c3:4a:d1:62:06:e9:ae:15:9a:c9:2a:d2:8b:
72:9a:ba:3a:f2:bf:dd:0b:9c:db:af:ca:14:09:19:72:89:44:
88:b9:1c:a1:cf:e0:2e:1f:25:43:fa:b9:b6:f0:ce:e7:5a:eb:
44:2c:ab:f9:72:88:e9:d1:81:bb:e8:c6:57:21:2a:86:d1:0e:
a2:f6:5f:00:cf:65:85:86:9b:3d:4d:13:a4:5a:7c:e6:df:49:
dd:18:e6:ec:d6:7b:fa:82:54:c6:45:c7:0c:64:59:16:ba:a1:
e6:e2:58:ba:69:0e:b4:e6:e2:1c:09:c2:59:1a:66:a1:5c:92:
97:59:4b:f4:31:1c:97:79:35:9d:71:22:9b:98:1e:16:aa:95:
d9:51:69:e7:79:70:b5:19:1c:6d:22:61:b6:32:74:9b:bd:3a:
ee:62:14:55:e3:91:db:ef:ca:20:72:60:8c:d9:0c:76:55:7e:
50:32:98:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdMuqmnVir5PTAF18Q/hjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1
MjE3NDYwHhcNMjYwNzI4MTYwMDMxWhcNMjYwNzI5MTYwMDMxWjAzMTEwLwYDVQQD
Eyg0ZWU5OWU3YTNkNTFhOWZhM2YwZGYyNDllNzQ3NjhkNTAwMzliZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpqPgbjDF2+O/7sySgLGXWhp0Zmb
RWwQzQPGCrMkYrYiLH/Jxn7xVD8hbxtWUcdeKGOrqHA9w7jROz8CbeBBG4jQ340F
gIv1PypAdSWJzapt3idf2IYscekBZ6XC2mhYOsx2mtGY/dWw1konip2A4znlaiJ4
61N68iJGyUCcAllbOUM0X+6B0QCQ2qDPwiLNhQcl6+GaEfC90lecZPoN52EEe06A
yx2hfuU1PV9Z+w5ZIbnktUs95OD5Y8pLkfnmREjRi7zeuhvyPHpoPjT8pW2osiv9
0x8B7Muyeg0mWHBkQuKkFzLFfb/bfqBvFWk2fuUPVW5iJQYKHgfrf4XH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7pnno9Uan6Pw3ySedHaNUAOb1PMB8GA1UdIwQY
MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt
NTBmYzRkNTU3ZDA4LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4
LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSgcycYX
ofnYiEdR/jXt4vJjoUw/t7Oen+Xv2pJ/Xcnh/qHId//BofHIHtNfk9tkqxxPN7PL
LXlR+XEJp1OZbKArmdASMfQ4jxn317HDStFiBumuFZrJKtKLcpq6OvK/3Quc26/K
FAkZcolEiLkcoc/gLh8lQ/q5tvDO51rrRCyr+XKI6dGBu+jGVyEqhtEOovZfAM9l
hYabPU0TpFp85t9J3Rjm7NZ7+oJUxkXHDGRZFrqh5uJYumkOtObiHAnCWRpmoVyS
l1lL9DEcl3k1nXEim5geFqqV2VFp53lwtRkcbSJhtjJ0m7067mIUVeOR2+/KIHJg
jNkMdlV+UDKY+w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:40:34 2026 by rpki-client