Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
File: 891MdxfPacsnmpvjhwzh1ViI6BI.mft (raw, json)
Hash identifier: 3kpsN50rOZ7dJGZI8YenKcPLc4p3zOAdvp4/BBXzNEw=
Subject key identifier: 09:A8:38:18:A9:E7:DC:82:4F:38:BE:DE:E6:8B:5D:31:8E:EE:7D:95
Authority key identifier: F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
Certificate issuer: /CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Certificate serial: 019FAC759F26A2E59B196D477D9844F18247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:17 +0000
Manifest this update: Wed 29 Jul 2026 06:00:17 +0000
Manifest next update: Thu 30 Jul 2026 06:00:17 +0000
Files and hashes: 1: 891MdxfPacsnmpvjhwzh1ViI6BI.crl (hash: Q4GWd3s2zRhccgU7BehFa4C1XvgQEp5AgNs5maJaKOA=)
2: DaMYvuVk4VxbeiY5886TRjR80-c.roa (hash: D4FeXaKBovPda7PA/y7sGSV1DU6UbX4cAmo6Backls8=)
3: lyXkg79P2FE1dqoSHDtkOfaKYYE.roa (hash: cbRt0iwVvDFLlG9nHuLjCQUjtgic0aVsU0+cAtoJ9AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:9f:26:a2:e5:9b:19:6d:47:7d:98:44:f1:82:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3dd4c7717cf69cb279a9be3870ce1d55888e812
Validity
Not Before: Jul 29 06:00:17 2026 GMT
Not After : Jul 30 06:00:17 2026 GMT
Subject: CN=09a83818a9e7dc824f38bedee68b5d318eee7d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:fb:f7:d9:d9:4d:c5:20:12:71:7f:83:b5:
32:af:5b:39:96:fc:a9:8b:23:22:1c:c6:0d:03:ac:
33:31:37:75:08:47:ff:ac:53:5f:0a:38:9a:8b:02:
88:39:1d:26:98:dc:af:ae:f3:f5:1e:23:39:3e:ef:
5b:c9:75:06:2b:85:1c:d8:96:53:47:a0:1e:6f:fb:
fd:a7:ae:5a:eb:dc:c9:30:2c:dc:b3:78:7f:af:c6:
0e:d5:90:2d:9e:77:d9:aa:34:6d:e3:3c:70:38:de:
cc:56:f0:50:a6:01:84:4b:bd:d8:db:e4:d4:4d:b0:
4d:be:f1:dd:05:38:da:92:16:a9:f8:cd:5a:1e:37:
c7:0f:cd:9d:69:a9:7a:41:0c:ba:4e:14:be:93:66:
6d:15:5e:82:09:c9:1c:f3:f9:2f:79:48:67:ff:49:
86:3b:79:ce:4a:4c:30:39:b1:bb:67:4c:1c:80:81:
a0:84:d6:a8:02:24:79:63:ee:19:00:c4:de:bc:27:
b4:f2:dc:31:91:6d:09:dd:89:47:4d:1b:c3:34:ae:
ca:5e:0d:73:27:76:4d:8b:c4:ec:fc:99:0e:86:56:
a0:19:a3:25:bb:f9:7d:92:f2:1a:65:eb:b8:97:ce:
c5:15:eb:d1:27:24:b7:23:56:d4:cd:7d:13:0d:9b:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:38:18:A9:E7:DC:82:4F:38:BE:DE:E6:8B:5D:31:8E:EE:7D:95
X509v3 Authority Key Identifier:
keyid:F3:DD:4C:77:17:CF:69:CB:27:9A:9B:E3:87:0C:E1:D5:58:88:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/891MdxfPacsnmpvjhwzh1ViI6BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/891MdxfPacsnmpvjhwzh1ViI6BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ed:1f:dc:65:61:06:8d:90:01:43:92:77:95:6f:34:ed:ac:
7c:ab:34:6f:45:bf:98:ba:a8:f7:35:b9:53:a1:e1:03:9b:91:
a4:50:d3:8c:87:a6:58:bf:ca:1b:a4:90:79:12:b7:43:ce:74:
0c:32:2b:a8:e4:a4:ee:d4:7e:3a:61:fb:5a:6f:09:4b:74:b7:
ee:0f:30:c0:24:6a:e1:42:f5:fa:74:92:8e:57:38:cd:57:51:
08:01:54:30:b8:d6:c1:b1:99:cc:dd:ee:74:70:a3:1a:58:89:
17:fd:a4:a2:af:9c:81:2b:81:13:f3:45:57:68:a6:e1:a0:69:
dd:4d:8d:15:42:ed:af:4d:01:00:09:6c:35:07:f6:42:9d:a1:
4f:cd:b0:d2:b1:fb:8f:70:62:d1:d8:44:65:29:16:5c:93:1c:
51:70:88:71:8d:1a:53:21:cb:42:e7:db:76:1a:8b:f9:8d:88:
91:eb:0e:e6:19:60:ff:63:35:e7:82:a1:02:6c:8c:e8:8f:dc:
19:ee:65:3d:10:2d:5f:77:3c:aa:0e:5e:11:36:22:09:cc:de:
0d:cb:89:71:fb:02:85:2f:f4:1c:40:71:01:53:86:90:b6:48:
9a:4d:b0:d4:60:47:61:be:48:7a:9e:35:ce:be:ce:93:c8:be:
5b:43:54:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdZ8mouWbGW1HfZhE8YJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZGQ0Yzc3MTdjZjY5Y2IyNzlhOWJlMzg3MGNlMWQ1NTg4
OGU4MTIwHhcNMjYwNzI5MDYwMDE3WhcNMjYwNzMwMDYwMDE3WjAzMTEwLwYDVQQD
EygwOWE4MzgxOGE5ZTdkYzgyNGYzOGJlZGVlNjhiNWQzMThlZWU3ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw3799nZTcUgEnF/g7Uyr1s5lvyp
iyMiHMYNA6wzMTd1CEf/rFNfCjiaiwKIOR0mmNyvrvP1HiM5Pu9byXUGK4Uc2JZT
R6Aeb/v9p65a69zJMCzcs3h/r8YO1ZAtnnfZqjRt4zxwON7MVvBQpgGES73Y2+TU
TbBNvvHdBTjakhap+M1aHjfHD82daal6QQy6ThS+k2ZtFV6CCckc8/kveUhn/0mG
O3nOSkwwObG7Z0wcgIGghNaoAiR5Y+4ZAMTevCe08twxkW0J3YlHTRvDNK7KXg1z
J3ZNi8Ts/JkOhlagGaMlu/l9kvIaZeu4l87FFevRJyS3I1bUzX0TDZumfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmoOBip59yCTzi+3uaLXTGO7n2VMB8GA1UdIwQY
MBaAFPPdTHcXz2nLJ5qb44cM4dVYiOgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODkxTWR4ZlBhY3NubXB2amh3emgxVmlJNkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMt
YzIzOGNlNDgxN2RiLzEvODkxTWR4ZlBhY3NubXB2amh3emgxVmlJNkJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMtYzIzOGNlNDgxN2Ri
LzEvODkxTWR4ZlBhY3NubXB2amh3emgxVmlJNkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+0f3GVh
Bo2QAUOSd5VvNO2sfKs0b0W/mLqo9zW5U6HhA5uRpFDTjIemWL/KG6SQeRK3Q850
DDIrqOSk7tR+OmH7Wm8JS3S37g8wwCRq4UL1+nSSjlc4zVdRCAFUMLjWwbGZzN3u
dHCjGliJF/2koq+cgSuBE/NFV2im4aBp3U2NFULtr00BAAlsNQf2Qp2hT82w0rH7
j3Bi0dhEZSkWXJMcUXCIcY0aUyHLQufbdhqL+Y2IkesO5hlg/2M154KhAmyM6I/c
Ge5lPRAtX3c8qg5eETYiCczeDcuJcfsChS/0HEBxAVOGkLZImk2w1GBHYb5Iep41
zr7Ok8i+W0NUwA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:08 2026 by rpki-client