Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
File: T1HrSeFu3RhEgrvMFjExdFOV9GI.mft (raw, json)
Hash identifier: LZRY9/pW2pbjXHgzCGfkOZd47blMT4nyBaNBrtt4QmQ=
Subject key identifier: 93:83:6D:1E:97:2E:91:AB:93:95:6D:30:B5:EE:75:65:AD:0F:8C:B3
Authority key identifier: 4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
Certificate issuer: /CN=4f51eb49e16edd184482bbcc163131745395f462
Certificate serial: 019FA906BBD3DE7005F60A473CE9E7D1AC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
Manifest number: 0156
Signing time: Tue 28 Jul 2026 14:00:18 +0000
Manifest this update: Tue 28 Jul 2026 14:00:18 +0000
Manifest next update: Wed 29 Jul 2026 14:00:18 +0000
Files and hashes: 1: Io7n0RKdSC8NYvr3HwlbU080m-o.asa (hash: WD9WD3ogZA9m8TfNUNn+teG3m8j/94zNgQLzHUw+9JE=)
2: Ppt42Gv5gIDfqeLOpJTE20JEbUs.roa (hash: NdkXtmUAvOxUP9UHZgcc6jVZbUnj3SGw12e1roYv7cw=)
3: T1HrSeFu3RhEgrvMFjExdFOV9GI.crl (hash: xm5YNiNiG+hqSducD9TCCb/TBeFMtrZcj6sVW/gGIMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:bb:d3:de:70:05:f6:0a:47:3c:e9:e7:d1:ac:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f51eb49e16edd184482bbcc163131745395f462
Validity
Not Before: Jul 28 14:00:18 2026 GMT
Not After : Jul 29 14:00:18 2026 GMT
Subject: CN=93836d1e972e91ab93956d30b5ee7565ad0f8cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:b6:7a:b5:76:92:3b:9f:8f:57:f0:c8:4b:
31:c8:9f:cd:0f:17:8f:4f:af:c4:d2:56:5a:c6:db:
95:62:0e:3c:a2:6d:bd:d2:5f:5c:20:91:2e:0b:27:
7a:d3:79:1d:17:9e:31:77:81:82:f2:4b:7a:31:9a:
00:88:9a:7b:3a:c8:ad:fd:ba:3d:c5:65:0f:2d:dd:
0b:07:72:0a:4e:51:a4:bd:d1:e2:10:c4:76:1e:88:
9a:c7:86:1d:85:87:f2:a1:bb:ca:b4:12:71:b9:4e:
e0:dc:42:e6:b3:d8:71:5e:aa:ad:4b:ba:3b:e0:85:
18:f8:5a:29:b9:95:8c:ff:ae:41:5a:2f:e1:02:31:
f0:30:3a:86:45:ed:f6:d0:a0:86:55:d3:96:51:4a:
a9:a4:67:94:99:bb:c9:15:eb:34:9f:e2:9c:76:10:
b9:e9:69:7f:a3:fd:e8:39:24:1f:40:34:6a:73:11:
b6:8b:9d:1a:56:6e:b2:76:eb:af:20:58:17:de:d5:
04:6c:cc:8a:e4:e8:a9:82:c8:31:ac:11:5d:3b:0f:
2d:12:9b:e6:ac:88:8a:64:c2:f7:1a:d4:09:5e:16:
f5:1e:7e:6e:f6:8a:7f:0c:e3:ff:b0:97:ac:12:97:
a2:cd:98:5b:19:3d:66:5d:28:91:33:e4:3c:e3:0a:
a4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:83:6D:1E:97:2E:91:AB:93:95:6D:30:B5:EE:75:65:AD:0F:8C:B3
X509v3 Authority Key Identifier:
keyid:4F:51:EB:49:E1:6E:DD:18:44:82:BB:CC:16:31:31:74:53:95:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1HrSeFu3RhEgrvMFjExdFOV9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/10463f-d2cf-43a7-8520-a2168421fecf/1/T1HrSeFu3RhEgrvMFjExdFOV9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b2:f9:38:bd:e6:5e:85:97:64:c4:a1:b3:7e:59:bd:02:4a:
fc:89:8c:c3:21:25:90:a4:25:84:92:54:6a:c7:8d:6a:91:7d:
38:49:d9:22:ac:98:9f:49:ed:7a:25:d7:94:13:db:ec:44:28:
9d:20:f4:6d:19:b0:e8:04:8e:64:8f:d3:08:f1:38:5e:fd:b8:
54:fd:15:9f:d1:e1:d6:bc:52:18:2a:80:81:0e:3b:9e:c6:0e:
7d:6b:44:0a:35:38:de:97:36:e6:92:2b:85:92:40:33:ee:47:
75:91:17:70:c9:86:85:4b:04:fb:c5:29:45:95:dc:8d:8a:10:
e6:2e:0d:8f:9d:7b:32:61:f5:b9:c6:e4:29:30:48:09:c1:93:
78:40:50:ce:15:74:04:46:88:0f:72:36:44:76:56:4a:35:5e:
59:36:32:e1:2a:c7:f2:87:ad:71:96:cb:17:11:52:3f:b1:aa:
c9:12:3e:ad:1d:c0:9f:4b:51:d0:0c:58:da:e5:2f:84:56:3e:
e0:f7:23:6b:f2:09:a5:21:34:25:fa:2b:56:e8:92:9e:55:b6:
40:c9:12:9b:54:40:a1:7d:bf:65:93:cf:1b:14:47:c9:8d:e1:
a9:7c:f6:13:d2:41:5e:c8:29:b2:63:b6:05:c1:0f:42:53:19:
84:67:5e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBrvT3nAF9gpHPOnn0axGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNTFlYjQ5ZTE2ZWRkMTg0NDgyYmJjYzE2MzEzMTc0NTM5
NWY0NjIwHhcNMjYwNzI4MTQwMDE4WhcNMjYwNzI5MTQwMDE4WjAzMTEwLwYDVQQD
Eyg5MzgzNmQxZTk3MmU5MWFiOTM5NTZkMzBiNWVlNzU2NWFkMGY4Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAy2erV2kjufj1fwyEsxyJ/NDxeP
T6/E0lZaxtuVYg48om290l9cIJEuCyd603kdF54xd4GC8kt6MZoAiJp7Osit/bo9
xWUPLd0LB3IKTlGkvdHiEMR2Hoiax4YdhYfyobvKtBJxuU7g3ELms9hxXqqtS7o7
4IUY+FopuZWM/65BWi/hAjHwMDqGRe320KCGVdOWUUqppGeUmbvJFes0n+KcdhC5
6Wl/o/3oOSQfQDRqcxG2i50aVm6yduuvIFgX3tUEbMyK5OipgsgxrBFdOw8tEpvm
rIiKZML3GtQJXhb1Hn5u9op/DOP/sJesEpeizZhbGT1mXSiRM+Q84wqk0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJODbR6XLpGrk5VtMLXudWWtD4yzMB8GA1UdIwQY
MBaAFE9R60nhbt0YRIK7zBYxMXRTlfRiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDFIclNlRnUzUmhFZ3J2TUZqRXhkRk9WOUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xMDQ2M2YtZDJjZi00M2E3LTg1MjAt
YTIxNjg0MjFmZWNmLzEvVDFIclNlRnUzUmhFZ3J2TUZqRXhkRk9WOUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xMDQ2M2YtZDJjZi00M2E3LTg1MjAtYTIxNjg0MjFmZWNm
LzEvVDFIclNlRnUzUmhFZ3J2TUZqRXhkRk9WOUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLL5OL3m
XoWXZMShs35ZvQJK/ImMwyElkKQlhJJUaseNapF9OEnZIqyYn0nteiXXlBPb7EQo
nSD0bRmw6ASOZI/TCPE4Xv24VP0Vn9Hh1rxSGCqAgQ47nsYOfWtECjU43pc25pIr
hZJAM+5HdZEXcMmGhUsE+8UpRZXcjYoQ5i4Nj517MmH1ucbkKTBICcGTeEBQzhV0
BEaID3I2RHZWSjVeWTYy4SrH8oetcZbLFxFSP7GqyRI+rR3An0tR0AxY2uUvhFY+
4Pcja/IJpSE0JforVuiSnlW2QMkSm1RAoX2/ZZPPGxRHyY3hqXz2E9JBXsgpsmO2
BcEPQlMZhGdevQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:07:34 2026 by rpki-client