Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.mft
File: tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.mft (raw, json)
Hash identifier: MSFsMXo5ovLzN9wUcYZO6VJyNGvycZTAYTLyStm5pwo=
Subject key identifier: 4F:A8:77:87:2C:81:DA:50:98:F7:B7:31:63:63:D2:10:A5:8B:82:AE
Authority key identifier: B5:BE:0B:CF:C5:2D:FC:80:14:DF:3B:CE:1B:60:46:69:4B:57:23:38
Certificate issuer: /CN=b5be0bcfc52dfc8014df3bce1b6046694b572338
Certificate serial: 019FA8998168B37794AD843FC629DCEF47C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:00 +0000
Manifest this update: Tue 28 Jul 2026 12:01:00 +0000
Manifest next update: Wed 29 Jul 2026 12:01:00 +0000
Files and hashes: 1: tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.crl (hash: bex3psFlKFGlburQFvRMo0l+5q/xhHpmdBmH2eniqbw=)
2: wyVZPEnWLphfupuscKUKNMAIMg8.roa (hash: cW3QQ6Mnex3pAVpBkzFmqz9XYUjvfjbl4McJ3OPDO9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:81:68:b3:77:94:ad:84:3f:c6:29:dc:ef:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5be0bcfc52dfc8014df3bce1b6046694b572338
Validity
Not Before: Jul 28 12:01:00 2026 GMT
Not After : Jul 29 12:01:00 2026 GMT
Subject: CN=4fa877872c81da5098f7b7316363d210a58b82ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:f4:33:a0:ba:b6:93:da:af:eb:ce:a4:7c:
df:c5:cf:9f:51:a3:eb:3c:80:f6:46:31:f5:84:7c:
a0:92:b9:32:ca:82:dc:51:a0:54:7b:e2:81:a9:d5:
f7:d7:15:ac:fc:6d:5d:d2:8e:ff:c4:68:0e:bd:0a:
fa:4a:68:1e:f9:5f:97:69:ba:8a:c0:85:94:82:33:
1b:e1:e8:46:3c:1b:98:65:90:2f:03:2d:e1:36:ce:
e3:8a:e0:a6:2a:22:19:2f:35:bd:76:f9:76:91:47:
56:60:14:e4:6b:f5:f2:2a:c7:df:f1:6e:ed:57:94:
fb:4c:be:01:96:9d:1e:14:d8:61:d0:6b:75:8e:45:
aa:ee:b8:2a:f1:39:98:3f:83:20:d6:cb:2d:a2:6a:
57:32:6a:71:40:46:cb:26:38:b2:a9:7c:7e:1c:2a:
23:76:26:55:2f:17:40:cb:1d:1c:3b:be:de:25:d3:
60:ec:16:03:6e:f9:e3:ff:6f:0c:e8:2e:1e:38:9d:
bc:5a:2c:fa:21:f6:d2:1b:ec:bc:c4:34:f5:4e:57:
44:73:1f:af:ed:26:6f:ff:17:89:cc:ae:ed:57:1a:
94:7d:5d:eb:a1:40:7c:7b:82:85:cc:a2:d4:dd:9b:
a6:d0:b1:de:b6:fc:2a:5b:dd:56:ed:58:cb:2c:33:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:77:87:2C:81:DA:50:98:F7:B7:31:63:63:D2:10:A5:8B:82:AE
X509v3 Authority Key Identifier:
keyid:B5:BE:0B:CF:C5:2D:FC:80:14:DF:3B:CE:1B:60:46:69:4B:57:23:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9dd5e3-576f-44a1-a5cc-6509cb5f27f8/1/tb4Lz8Ut_IAU3zvOG2BGaUtXIzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:61:e9:1f:12:16:c9:31:4b:ff:7f:0b:23:5f:eb:2c:ad:c3:
00:a1:5c:f6:1a:f6:d2:e8:f1:14:4f:f7:61:b3:8d:44:e7:ff:
ac:cb:fc:f2:00:d7:28:9b:9d:00:75:a5:00:35:8a:6d:2d:23:
6c:a7:05:b5:6a:ba:1d:c0:c3:87:01:9d:02:7c:8e:6b:ec:22:
f5:c9:e4:9b:60:9e:7a:c3:38:d4:d4:cf:ce:67:ac:27:71:ab:
a7:d0:f2:32:52:ad:21:e2:6d:d1:22:d2:08:8b:9b:b6:f5:32:
32:b9:12:a7:36:01:be:1c:c3:61:6e:df:23:7b:2b:60:9e:c9:
5f:92:75:e1:30:42:78:44:7f:ba:e7:80:b9:03:e0:15:a3:2b:
40:b2:74:06:94:cb:fe:bd:43:10:39:0c:ab:08:c4:0c:81:19:
e7:1c:ab:58:31:b9:02:82:be:83:87:6a:17:a3:96:31:8c:84:
5e:af:f7:c7:1c:87:32:ba:3e:e3:9b:64:17:78:39:0d:6b:ba:
c9:0b:85:95:29:e5:8e:b8:e9:6d:8b:53:27:4e:9b:b8:54:af:
44:c9:d9:ec:1b:95:eb:83:32:f9:20:80:c9:6f:04:de:ae:9b:
80:1a:fd:3e:56:44:0d:92:b4:bc:3b:b9:c3:0e:93:02:c3:de:
cf:d5:1b:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omYFos3eUrYQ/xinc70fAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YmUwYmNmYzUyZGZjODAxNGRmM2JjZTFiNjA0NjY5NGI1
NzIzMzgwHhcNMjYwNzI4MTIwMTAwWhcNMjYwNzI5MTIwMTAwWjAzMTEwLwYDVQQD
Eyg0ZmE4Nzc4NzJjODFkYTUwOThmN2I3MzE2MzYzZDIxMGE1OGI4MmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgP0M6C6tpPar+vOpHzfxc+fUaPr
PID2RjH1hHygkrkyyoLcUaBUe+KBqdX31xWs/G1d0o7/xGgOvQr6Smge+V+XabqK
wIWUgjMb4ehGPBuYZZAvAy3hNs7jiuCmKiIZLzW9dvl2kUdWYBTka/XyKsff8W7t
V5T7TL4Blp0eFNhh0Gt1jkWq7rgq8TmYP4Mg1sstompXMmpxQEbLJjiyqXx+HCoj
diZVLxdAyx0cO77eJdNg7BYDbvnj/28M6C4eOJ28Wiz6IfbSG+y8xDT1TldEcx+v
7SZv/xeJzK7tVxqUfV3roUB8e4KFzKLU3Zum0LHetvwqW91W7VjLLDOnpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+od4csgdpQmPe3MWNj0hCli4KuMB8GA1UdIwQY
MBaAFLW+C8/FLfyAFN87zhtgRmlLVyM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGI0THo4VXRfSUFVM3p2T0cyQkdhVXRYSXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2Mt
NjUwOWNiNWYyN2Y4LzEvdGI0THo4VXRfSUFVM3p2T0cyQkdhVXRYSXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85ZGQ1ZTMtNTc2Zi00NGExLWE1Y2MtNjUwOWNiNWYyN2Y4
LzEvdGI0THo4VXRfSUFVM3p2T0cyQkdhVXRYSXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWHpHxIW
yTFL/38LI1/rLK3DAKFc9hr20ujxFE/3YbONROf/rMv88gDXKJudAHWlADWKbS0j
bKcFtWq6HcDDhwGdAnyOa+wi9cnkm2CeesM41NTPzmesJ3Grp9DyMlKtIeJt0SLS
CIubtvUyMrkSpzYBvhzDYW7fI3srYJ7JX5J14TBCeER/uueAuQPgFaMrQLJ0BpTL
/r1DEDkMqwjEDIEZ5xyrWDG5AoK+g4dqF6OWMYyEXq/3xxyHMro+45tkF3g5DWu6
yQuFlSnljrjpbYtTJ06buFSvRMnZ7BuV64My+SCAyW8E3q6bgBr9PlZEDZK0vDu5
ww6TAsPez9UbHA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:47 2026 by rpki-client