Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
File: Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft (raw, json)
Hash identifier: Ur5IWpJ1JOnEajmCX0ggQqU20UyGbSkhIBIjWT08zOI=
Subject key identifier: 87:4A:64:5C:A8:41:71:B9:32:CD:02:16:66:BF:6C:68:1E:84:F5:FD
Authority key identifier: 36:7E:3E:63:22:29:C7:B2:53:9C:E5:00:63:44:D6:AD:A5:F7:BC:12
Certificate issuer: /CN=367e3e632229c7b2539ce5006344d6ada5f7bc12
Certificate serial: 019FA89A3EBEE3AD4DA1617E75D824C71EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:48 +0000
Manifest this update: Tue 28 Jul 2026 12:01:48 +0000
Manifest next update: Wed 29 Jul 2026 12:01:48 +0000
Files and hashes: 1: Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl (hash: ZuDsZT7iy18qk/w0Hh/ahUIsN9wZHcNnBr1DKcwGj0s=)
2: a4y_KA-8E2Xvk9Flsk-gKj60kM0.roa (hash: fmCY+qTeS8bDabH+aUH61mLLbXxPfSRcAGvLlcj8OlM=)
3: oHsAIsY3K_cptDSyVkp0H0HXWxg.asa (hash: O1iswhvBCi8e0ADs7zbMpKEtTvdXvwFLXzFqvApLrkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:3e:be:e3:ad:4d:a1:61:7e:75:d8:24:c7:1e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e3e632229c7b2539ce5006344d6ada5f7bc12
Validity
Not Before: Jul 28 12:01:48 2026 GMT
Not After : Jul 29 12:01:48 2026 GMT
Subject: CN=874a645ca84171b932cd021666bf6c681e84f5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:a1:20:29:61:5e:99:a0:7c:59:d0:c3:5d:
ca:1b:51:0a:88:c9:49:07:11:7f:be:d6:c4:a7:e7:
ef:6e:0f:7f:15:92:33:6c:f8:91:8c:5b:cb:17:3e:
27:89:c7:c0:1a:a2:84:d4:3f:b4:7d:1f:5e:fc:4b:
53:78:c9:e9:9b:e6:2d:48:b2:9b:c7:51:ef:a2:d1:
b1:09:34:0b:30:5f:f7:ef:eb:88:a4:a7:23:92:c4:
6a:08:81:d6:55:76:b0:b6:b9:4d:2a:87:39:76:a1:
17:0d:99:1e:c3:e7:35:08:26:78:f1:96:37:3a:81:
83:28:cd:6e:19:29:ac:5c:3f:59:0c:15:a8:c3:0c:
4a:80:f2:02:41:57:55:a6:a1:a1:a7:ac:13:6b:a8:
ae:79:f1:fd:29:79:bd:24:9f:0f:d4:ca:e6:f2:95:
d6:2f:d7:81:40:4f:9d:35:c6:e8:43:02:99:28:6d:
63:ea:41:f4:d5:ba:98:07:e9:14:48:06:48:40:75:
0e:0e:76:14:27:28:cb:b4:e8:61:55:e6:8f:b3:aa:
e7:6b:24:da:d5:68:c7:60:4f:a7:39:a3:10:b5:f5:
6e:d5:79:1f:5d:82:8a:e8:ad:28:19:58:a1:ee:d3:
9c:b9:3b:14:30:47:2b:0b:49:8f:67:ef:9b:29:c2:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4A:64:5C:A8:41:71:B9:32:CD:02:16:66:BF:6C:68:1E:84:F5:FD
X509v3 Authority Key Identifier:
keyid:36:7E:3E:63:22:29:C7:B2:53:9C:E5:00:63:44:D6:AD:A5:F7:BC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:99:27:d6:34:8c:2e:66:7b:76:e9:90:34:22:83:b3:da:d8:
8b:f4:7b:d8:b8:fb:87:ee:96:6b:4e:ed:1f:9f:64:33:71:f9:
9e:f6:5f:1f:4e:d2:a9:42:3c:31:64:6d:90:f1:29:71:04:3f:
f4:e7:c0:8b:f1:01:be:09:f2:b0:24:69:32:21:c6:57:14:59:
3b:1f:0c:37:80:8f:30:ec:a5:75:2c:92:01:51:d6:5b:4f:46:
99:8e:9d:ca:3b:cf:bf:7a:a9:84:c0:6a:df:58:4f:a8:d6:55:
19:09:53:01:ac:58:12:df:f2:7f:a2:80:45:ce:d2:c0:54:17:
7f:7b:53:28:3f:7d:6a:76:5e:3c:38:3d:4f:ec:6b:a7:58:37:
ae:b7:ed:38:c3:4a:35:07:96:80:c8:7f:1d:b3:cb:f0:99:7e:
9b:ea:44:ff:3a:f4:7d:b5:f4:d2:7c:6f:4e:02:b4:a8:2f:ba:
f4:13:91:72:15:16:2c:e9:1d:ef:a1:fc:93:5b:cc:8e:24:fb:
46:5d:59:ec:0a:7f:e7:07:8e:ec:be:c3:7c:9d:d0:b2:99:e1:
7c:83:74:9f:7a:d3:62:72:67:b6:b8:7e:5e:15:75:a2:44:29:
7b:fd:df:d9:59:8a:03:ef:ab:28:f9:25:77:54:53:68:1d:61:
a5:9e:45:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omj6+461NoWF+ddgkxx6uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2N2UzZTYzMjIyOWM3YjI1MzljZTUwMDYzNDRkNmFkYTVm
N2JjMTIwHhcNMjYwNzI4MTIwMTQ4WhcNMjYwNzI5MTIwMTQ4WjAzMTEwLwYDVQQD
Eyg4NzRhNjQ1Y2E4NDE3MWI5MzJjZDAyMTY2NmJmNmM2ODFlODRmNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeihIClhXpmgfFnQw13KG1EKiMlJ
BxF/vtbEp+fvbg9/FZIzbPiRjFvLFz4nicfAGqKE1D+0fR9e/EtTeMnpm+YtSLKb
x1HvotGxCTQLMF/37+uIpKcjksRqCIHWVXawtrlNKoc5dqEXDZkew+c1CCZ48ZY3
OoGDKM1uGSmsXD9ZDBWowwxKgPICQVdVpqGhp6wTa6iuefH9KXm9JJ8P1Mrm8pXW
L9eBQE+dNcboQwKZKG1j6kH01bqYB+kUSAZIQHUODnYUJyjLtOhhVeaPs6rnayTa
1WjHYE+nOaMQtfVu1XkfXYKK6K0oGVih7tOcuTsUMEcrC0mPZ++bKcIFxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdKZFyoQXG5Ms0CFma/bGgehPX9MB8GA1UdIwQY
MBaAFDZ+PmMiKceyU5zlAGNE1q2l97wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm40LVl5SXB4N0pUbk9VQVkwVFdyYVgzdkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt
NmI0OWEzODkzYzc5LzEvTm40LVl5SXB4N0pUbk9VQVkwVFdyYVgzdkJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5
LzEvTm40LVl5SXB4N0pUbk9VQVkwVFdyYVgzdkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapkn1jSM
LmZ7dumQNCKDs9rYi/R72Lj7h+6Wa07tH59kM3H5nvZfH07SqUI8MWRtkPEpcQQ/
9OfAi/EBvgnysCRpMiHGVxRZOx8MN4CPMOyldSySAVHWW09GmY6dyjvPv3qphMBq
31hPqNZVGQlTAaxYEt/yf6KARc7SwFQXf3tTKD99anZePDg9T+xrp1g3rrftOMNK
NQeWgMh/HbPL8Jl+m+pE/zr0fbX00nxvTgK0qC+69BORchUWLOkd76H8k1vMjiT7
Rl1Z7Ap/5weO7L7DfJ3QspnhfIN0n3rTYnJntrh+XhV1okQpe/3f2VmKA++rKPkl
d1RTaB1hpZ5FZg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:41:20 2026 by rpki-client