Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
File: rAX0aJpExsm7ECrDExtucFNOr0U.mft (raw, json)
Hash identifier: ObPgCb/M9ItDIza5yy9E+jVeY/5/nOh4pXirLa8HCrI=
Subject key identifier: 62:1E:62:9E:A4:22:8B:64:42:FE:71:B3:FD:20:2F:81:5D:C8:C2:50
Authority key identifier: AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
Certificate issuer: /CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Certificate serial: 019FAC75AD1362A42C12C64ABFF2B18FE2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:20 +0000
Manifest this update: Wed 29 Jul 2026 06:00:20 +0000
Manifest next update: Thu 30 Jul 2026 06:00:20 +0000
Files and hashes: 1: 8KpPDxsbWUdm2uUdpYhleeRGrAY.roa (hash: onwtO6lm790hsvkHwCBWU4djLXwDxoFOKGLkdsUwJNE=)
2: GiGclhLqZFLRsgCRYA0MC4_mt7U.roa (hash: TNhQmFU9fhhz9PaprjVTJQ3o1TKkQSYQEMCYW6CwS90=)
3: rAX0aJpExsm7ECrDExtucFNOr0U.crl (hash: rPl+9h0LtOzNF2LpcD5tjKJXeiDYZo0xNdTFG4Vo1+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:ad:13:62:a4:2c:12:c6:4a:bf:f2:b1:8f:e2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Validity
Not Before: Jul 29 06:00:20 2026 GMT
Not After : Jul 30 06:00:20 2026 GMT
Subject: CN=621e629ea4228b6442fe71b3fd202f815dc8c250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:73:de:ff:9a:09:b7:d1:47:7f:79:7e:07:
80:57:e1:70:a6:78:a4:ba:b7:35:0f:21:0a:f7:21:
94:4a:06:9c:07:68:ed:ea:65:e7:76:c5:bd:8c:37:
4d:76:ba:26:d7:e2:ee:ca:f9:6b:c4:bd:fe:31:00:
c0:85:e1:54:68:b4:ac:28:ca:58:c9:dd:06:cc:b9:
54:3a:46:ce:b8:ee:02:d6:ff:b6:b7:ed:da:5e:93:
31:ed:56:a5:5e:9d:8b:20:bd:52:0d:c2:8a:15:b9:
90:2a:9b:5d:ce:31:73:03:b5:e6:bd:29:de:26:9c:
40:97:90:8b:ec:4c:8b:3c:68:44:ba:94:7c:40:b3:
71:1b:7f:c7:bd:34:45:ea:68:4e:6b:34:ad:fe:4b:
37:c0:b9:44:75:42:1e:36:7f:0d:10:70:df:34:2c:
81:f2:31:6a:37:20:a3:e6:b0:f1:ff:54:92:6d:0d:
f6:9d:3f:cc:5d:bb:8f:ce:a7:21:4f:e1:80:ac:1d:
ec:4f:4c:f0:e2:56:34:ee:58:6c:29:0d:21:eb:97:
7b:2e:20:21:41:83:73:b2:a8:57:ff:7e:bb:ab:2f:
14:f1:ac:3c:a8:2e:4e:66:61:08:45:33:cb:02:10:
77:ac:d3:67:b8:7c:9a:88:89:3f:ea:6d:6c:e7:be:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1E:62:9E:A4:22:8B:64:42:FE:71:B3:FD:20:2F:81:5D:C8:C2:50
X509v3 Authority Key Identifier:
keyid:AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2b:5a:6e:13:6c:ab:ee:fe:8f:e3:b6:33:e2:5a:1c:38:32:
83:cb:2b:4b:50:5a:5f:49:c5:2e:28:dd:32:4e:dd:21:49:37:
45:15:1e:f0:00:0e:4c:15:da:ab:e7:84:05:11:38:14:9a:e0:
40:06:e8:3b:3c:87:ae:32:12:2c:2e:09:7a:fe:0e:fc:76:43:
88:12:04:ee:68:15:04:45:58:6a:a7:ab:1c:d8:c9:b3:e4:4e:
05:38:e6:d5:d8:63:75:f3:77:04:07:85:d8:b3:96:63:c2:4d:
7c:18:18:6e:a3:91:e6:2d:22:01:8a:ec:68:be:f9:e0:99:9e:
6c:d5:8a:7f:cb:3a:b2:77:62:5c:7b:ae:94:2e:dd:35:14:00:
35:8c:78:b2:ba:16:98:2f:03:6b:f9:b8:d6:1a:80:2a:bf:cf:
c3:3f:d9:a1:1b:cd:35:c5:c5:d6:92:fe:cc:14:35:e6:ab:ee:
86:67:7f:1c:7d:1e:f6:07:3d:ce:21:18:d7:90:fb:f8:23:81:
01:16:5f:63:c1:45:2c:ef:af:23:c2:16:60:57:d5:1b:9a:c7:
a8:80:75:7c:a0:6d:59:bc:c5:d8:36:d8:7f:f3:cc:e9:4e:40:
18:bb:1b:f1:fa:17:af:bd:16:f0:41:e5:15:0b:24:a0:2f:45:
75:ad:a1:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sda0TYqQsEsZKv/Kxj+LQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMDVmNDY4OWE0NGM2YzliYjEwMmFjMzEzMWI2ZTcwNTM0
ZWFmNDUwHhcNMjYwNzI5MDYwMDIwWhcNMjYwNzMwMDYwMDIwWjAzMTEwLwYDVQQD
Eyg2MjFlNjI5ZWE0MjI4YjY0NDJmZTcxYjNmZDIwMmY4MTVkYzhjMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBFz3v+aCbfRR395fgeAV+Fwpnik
urc1DyEK9yGUSgacB2jt6mXndsW9jDdNdrom1+LuyvlrxL3+MQDAheFUaLSsKMpY
yd0GzLlUOkbOuO4C1v+2t+3aXpMx7ValXp2LIL1SDcKKFbmQKptdzjFzA7XmvSne
JpxAl5CL7EyLPGhEupR8QLNxG3/HvTRF6mhOazSt/ks3wLlEdUIeNn8NEHDfNCyB
8jFqNyCj5rDx/1SSbQ32nT/MXbuPzqchT+GArB3sT0zw4lY07lhsKQ0h65d7LiAh
QYNzsqhX/367qy8U8aw8qC5OZmEIRTPLAhB3rNNnuHyaiIk/6m1s5768vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIeYp6kIotkQv5xs/0gL4FdyMJQMB8GA1UdIwQY
MBaAFKwF9GiaRMbJuxAqwxMbbnBTTq9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFYMGFKcEV4c203RUNyREV4dHVjRk5PcjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2Ut
MzJlYjNhNGVhZDQzLzEvckFYMGFKcEV4c203RUNyREV4dHVjRk5PcjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2UtMzJlYjNhNGVhZDQz
LzEvckFYMGFKcEV4c203RUNyREV4dHVjRk5PcjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCtabhNs
q+7+j+O2M+JaHDgyg8srS1BaX0nFLijdMk7dIUk3RRUe8AAOTBXaq+eEBRE4FJrg
QAboOzyHrjISLC4Jev4O/HZDiBIE7mgVBEVYaqerHNjJs+ROBTjm1dhjdfN3BAeF
2LOWY8JNfBgYbqOR5i0iAYrsaL754JmebNWKf8s6sndiXHuulC7dNRQANYx4sroW
mC8Da/m41hqAKr/Pwz/ZoRvNNcXF1pL+zBQ15qvuhmd/HH0e9gc9ziEY15D7+COB
ARZfY8FFLO+vI8IWYFfVG5rHqIB1fKBtWbzF2DbYf/PM6U5AGLsb8foXr70W8EHl
FQskoC9Fda2hqg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:31 2026 by rpki-client