Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: MASmpBojx7mywNQlGjU9EwdQM/RrKou/xl0Y3DlEzH0=
Subject key identifier: 09:A3:93:70:11:A0:58:61:97:FA:38:97:2D:CE:BE:5D:98:75:88:A9
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019FA9ABA8AB4E75FE379E79D383E0962313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 17:00:27 +0000
Manifest this update: Tue 28 Jul 2026 17:00:27 +0000
Manifest next update: Wed 29 Jul 2026 17:00:27 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: xCEVv6UGbZ3tyUwLt8pE7JTKO2rit2hWEQc1mYI2pj0=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a8:ab:4e:75:fe:37:9e:79:d3:83:e0:96:23:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Jul 28 17:00:27 2026 GMT
Not After : Jul 29 17:00:27 2026 GMT
Subject: CN=09a3937011a0586197fa38972dcebe5d987588a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:41:86:b7:5b:96:1f:5c:95:83:4b:78:cf:
ab:b7:4b:78:4d:7b:75:f1:ce:0c:24:f8:59:dc:77:
c5:f4:07:be:d4:63:3f:52:6c:53:5d:f2:37:73:e4:
92:d4:4c:fa:74:31:aa:6a:cf:35:36:ae:c9:d5:30:
b9:a0:03:97:58:8c:d9:0b:fd:4b:9a:a4:50:3c:b5:
84:d2:5f:c5:74:e6:3a:d9:c4:45:de:17:4a:78:ed:
9b:b0:16:37:5e:9b:d8:19:f1:b2:0b:4c:9c:8a:0d:
49:f6:9f:c8:65:89:a5:d4:0a:0d:ba:57:36:f0:d3:
20:41:ce:c1:d2:24:42:37:dc:5f:76:1f:98:86:f3:
44:aa:e7:60:54:e3:4c:27:c9:35:3e:db:75:d2:3a:
12:78:88:b6:40:f1:ce:66:e9:7c:bf:2e:83:7a:ec:
64:4c:a0:95:e2:8f:f5:32:a4:39:d2:09:d8:f6:22:
7e:19:51:49:45:e5:59:da:9a:7f:e1:33:4d:b9:76:
28:66:ab:e7:d9:74:8c:26:72:9d:a6:d3:31:50:e7:
85:19:fd:59:01:9a:b5:5e:c0:53:0d:ce:8f:6b:47:
af:b4:5c:94:de:c2:69:97:ac:eb:78:82:d9:05:72:
3d:be:1e:60:58:73:9d:74:cc:9a:6c:fe:0c:bc:e5:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A3:93:70:11:A0:58:61:97:FA:38:97:2D:CE:BE:5D:98:75:88:A9
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1f:ab:45:22:71:a8:c1:57:3e:bc:1c:97:c6:58:14:46:07:
93:53:6f:8f:0c:c1:e7:c8:a1:e4:89:6b:98:5c:ef:23:9c:ae:
4a:6e:08:42:d2:ad:b8:50:87:aa:1b:2f:47:bb:f2:55:7e:d0:
5d:bd:6e:88:d3:7b:74:bf:d3:d3:87:91:71:1c:1f:e2:9a:96:
d0:8a:f8:40:a6:5c:76:97:10:c7:6d:46:0a:03:6f:38:fa:d2:
c6:ef:1c:4b:c8:c4:65:7a:a1:c8:b3:0c:4d:31:ec:30:89:84:
4d:2f:cc:15:c4:07:d9:5c:09:0f:84:62:1a:75:bf:48:16:32:
1e:6d:44:b1:d3:de:f7:c9:f6:4b:c9:d6:2a:50:47:e8:bb:20:
28:51:e1:5d:3e:65:10:ef:ed:a3:f1:44:42:4c:78:9e:97:3c:
fa:fe:d0:0e:cc:17:78:0b:57:f5:16:c4:c4:7d:d0:24:f2:19:
2d:31:6a:c1:92:d6:c6:dc:bb:a4:1c:85:80:25:b7:16:63:fb:
7c:b8:81:1d:d8:7b:9f:5c:6c:9d:87:07:7e:ef:7b:1e:25:c1:
c5:40:c0:f2:48:39:02:8b:d6:2e:f1:30:f5:ff:ef:c6:1c:97:
9f:5d:2b:45:37:07:0d:99:46:9a:4d:ae:a6:ea:f4:03:41:d2:
2d:15:a9:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq6irTnX+N55504PgliMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx
MjYyZjcwHhcNMjYwNzI4MTcwMDI3WhcNMjYwNzI5MTcwMDI3WjAzMTEwLwYDVQQD
EygwOWEzOTM3MDExYTA1ODYxOTdmYTM4OTcyZGNlYmU1ZDk4NzU4OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMNBhrdblh9clYNLeM+rt0t4TXt1
8c4MJPhZ3HfF9Ae+1GM/UmxTXfI3c+SS1Ez6dDGqas81Nq7J1TC5oAOXWIzZC/1L
mqRQPLWE0l/FdOY62cRF3hdKeO2bsBY3XpvYGfGyC0ycig1J9p/IZYml1AoNulc2
8NMgQc7B0iRCN9xfdh+YhvNEqudgVONMJ8k1Ptt10joSeIi2QPHOZul8vy6Deuxk
TKCV4o/1MqQ50gnY9iJ+GVFJReVZ2pp/4TNNuXYoZqvn2XSMJnKdptMxUOeFGf1Z
AZq1XsBTDc6Pa0evtFyU3sJpl6zreILZBXI9vh5gWHOddMyabP4MvOU0MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmjk3ARoFhhl/o4ly3Ovl2YdYipMB8GA1UdIwQY
MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et
ZGM2NGFlNzI1NzhlLzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl
LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAER+rRSJx
qMFXPrwcl8ZYFEYHk1NvjwzB58ih5IlrmFzvI5yuSm4IQtKtuFCHqhsvR7vyVX7Q
Xb1uiNN7dL/T04eRcRwf4pqW0Ir4QKZcdpcQx21GCgNvOPrSxu8cS8jEZXqhyLMM
TTHsMImETS/MFcQH2VwJD4RiGnW/SBYyHm1EsdPe98n2S8nWKlBH6LsgKFHhXT5l
EO/to/FEQkx4npc8+v7QDswXeAtX9RbExH3QJPIZLTFqwZLWxty7pByFgCW3FmP7
fLiBHdh7n1xsnYcHfu97HiXBxUDA8kg5AovWLvEw9f/vxhyXn10rRTcHDZlGmk2u
pur0A0HSLRWpmA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:27:41 2026 by rpki-client