Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
File: i7nJXujwyzU8HemSB5KjTTAkRhc.mft (raw, json)
Hash identifier: bq2RlMw0UFBGEo6PTEpjLn0xbsLDDQrW5/6aVzak7DQ=
Subject key identifier: AE:01:C3:6C:35:A9:DF:F7:94:D4:AD:34:DE:27:FA:63:D3:B2:42:B4
Authority key identifier: 8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
Certificate issuer: /CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Certificate serial: 019FA8996387F47A0214F355F2D1A10FAF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:52 +0000
Manifest this update: Tue 28 Jul 2026 12:00:52 +0000
Manifest next update: Wed 29 Jul 2026 12:00:52 +0000
Files and hashes: 1: 1vRpnwT5aWEFUf7idoYyMgEId1A.roa (hash: n5E9zBhbTEAOt3MyaXx4rOi5mO2COvIRgHqBDBLt80c=)
2: RTei5mA4S96lbi42Q3vTGKXxacg.asa (hash: ZSqSBARSF1NeaRnky6OQdESjN9MCG3xVCSNU88xKLhE=)
3: i7nJXujwyzU8HemSB5KjTTAkRhc.crl (hash: 6tPV9zzgsbFtFUKJq1kJE7pYoGUCtI4PsvcEanSlBrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:63:87:f4:7a:02:14:f3:55:f2:d1:a1:0f:af:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb9c95ee8f0cb353c1de9920792a34d30244617
Validity
Not Before: Jul 28 12:00:52 2026 GMT
Not After : Jul 29 12:00:52 2026 GMT
Subject: CN=ae01c36c35a9dff794d4ad34de27fa63d3b242b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:e3:11:9c:27:b7:de:be:7a:5a:e2:51:d7:
03:a4:66:05:15:9c:af:f6:7a:83:63:d2:0a:ef:19:
3f:b5:08:6c:f1:62:43:1e:7a:ff:e8:f4:cf:da:15:
5d:82:5b:0b:3e:bf:df:5a:cb:90:14:51:4e:54:15:
52:21:52:5c:ab:90:b5:78:f0:e3:eb:d2:e3:23:e7:
7a:aa:c1:7b:a4:c8:d8:34:54:ab:b8:7d:89:cc:a2:
b8:ea:ba:cd:b5:78:bc:9d:0f:de:8c:e5:cb:73:58:
a3:7f:b0:4e:59:04:fe:40:18:e7:08:d1:37:ca:5b:
99:16:ec:fe:cd:bd:73:e7:fe:6a:45:8a:c1:ef:94:
00:6f:11:d1:4e:83:b9:f1:5d:af:d9:99:30:d3:ec:
b4:1a:47:fe:da:fa:59:52:98:4e:94:78:58:3a:14:
57:99:ee:0d:60:fe:c9:9f:33:47:93:14:be:8c:a5:
28:07:93:5a:6b:6b:bb:5c:a6:4f:19:89:16:3d:25:
3a:95:ef:e4:31:09:ee:08:a3:b1:d5:78:11:0f:66:
82:0b:34:ca:dd:62:b7:fd:01:d1:f4:f0:e2:73:b5:
bf:ef:0d:e8:7d:f3:ef:38:f6:28:b8:db:32:35:a6:
68:7b:5c:fc:0a:e2:6c:de:0d:ec:9a:a7:39:59:dc:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:C3:6C:35:A9:DF:F7:94:D4:AD:34:DE:27:FA:63:D3:B2:42:B4
X509v3 Authority Key Identifier:
keyid:8B:B9:C9:5E:E8:F0:CB:35:3C:1D:E9:92:07:92:A3:4D:30:24:46:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nJXujwyzU8HemSB5KjTTAkRhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/7abdf1-252e-4b36-9270-a96102c83641/1/i7nJXujwyzU8HemSB5KjTTAkRhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:63:dc:d5:52:b1:86:51:0c:b4:4d:5f:3e:b2:ec:50:29:8f:
61:9e:7b:da:b0:2b:09:e6:ca:77:9a:60:98:cb:d1:b6:1f:7f:
19:5d:de:3f:b5:cd:0f:8c:3e:4c:a4:68:bf:8d:51:6a:42:fd:
3f:7f:00:3a:bc:6e:0c:0b:65:25:be:70:96:10:86:38:ad:d9:
3b:d1:39:eb:bf:e7:b9:14:cd:61:1b:a2:08:f0:b9:90:73:b8:
09:ef:e7:b9:5c:07:19:8b:af:3d:58:3b:04:04:4b:c3:7b:8e:
09:d3:af:26:c0:c5:35:3a:78:04:fa:07:42:f4:08:23:0d:3a:
da:9e:61:78:6a:56:07:ee:c4:32:65:a3:f9:d6:71:ee:15:2d:
0f:9f:63:07:83:9f:35:72:1a:e5:87:b8:c9:7f:c6:fb:58:be:
9c:13:be:9a:7c:c5:7e:7b:23:d7:dd:16:f8:6d:23:7a:9c:30:
7c:d1:29:1a:cb:6a:fb:64:15:74:5b:ba:a4:d3:5f:8b:9e:a2:
a7:5c:ce:b9:91:bc:3d:66:1b:88:fe:94:0d:49:49:f2:9b:ff:
24:af:6e:ee:c2:de:6f:4a:c9:71:ad:99:27:a5:49:61:60:64:
30:76:70:aa:47:a9:5f:40:a1:da:cb:b0:97:7b:26:b6:e2:04:
19:2f:64:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omWOH9HoCFPNV8tGhD68BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjljOTVlZThmMGNiMzUzYzFkZTk5MjA3OTJhMzRkMzAy
NDQ2MTcwHhcNMjYwNzI4MTIwMDUyWhcNMjYwNzI5MTIwMDUyWjAzMTEwLwYDVQQD
EyhhZTAxYzM2YzM1YTlkZmY3OTRkNGFkMzRkZTI3ZmE2M2QzYjI0MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6TjEZwnt96+elriUdcDpGYFFZyv
9nqDY9IK7xk/tQhs8WJDHnr/6PTP2hVdglsLPr/fWsuQFFFOVBVSIVJcq5C1ePDj
69LjI+d6qsF7pMjYNFSruH2JzKK46rrNtXi8nQ/ejOXLc1ijf7BOWQT+QBjnCNE3
yluZFuz+zb1z5/5qRYrB75QAbxHRToO58V2v2Zkw0+y0Gkf+2vpZUphOlHhYOhRX
me4NYP7JnzNHkxS+jKUoB5Naa2u7XKZPGYkWPSU6le/kMQnuCKOx1XgRD2aCCzTK
3WK3/QHR9PDic7W/7w3offPvOPYouNsyNaZoe1z8CuJs3g3smqc5WdxAYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4Bw2w1qd/3lNStNN4n+mPTskK0MB8GA1UdIwQY
MBaAFIu5yV7o8Ms1PB3pkgeSo00wJEYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAt
YTk2MTAyYzgzNjQxLzEvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83YWJkZjEtMjUyZS00YjM2LTkyNzAtYTk2MTAyYzgzNjQx
LzEvaTduSlh1and5elU4SGVtU0I1S2pUVEFrUmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWPc1VKx
hlEMtE1fPrLsUCmPYZ572rArCebKd5pgmMvRth9/GV3eP7XND4w+TKRov41RakL9
P38AOrxuDAtlJb5wlhCGOK3ZO9E567/nuRTNYRuiCPC5kHO4Ce/nuVwHGYuvPVg7
BARLw3uOCdOvJsDFNTp4BPoHQvQIIw062p5heGpWB+7EMmWj+dZx7hUtD59jB4Of
NXIa5Ye4yX/G+1i+nBO+mnzFfnsj190W+G0jepwwfNEpGstq+2QVdFu6pNNfi56i
p1zOuZG8PWYbiP6UDUlJ8pv/JK9u7sLeb0rJca2ZJ6VJYWBkMHZwqkepX0Ch2suw
l3smtuIEGS9k+A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:42:11 2026 by rpki-client