
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
File: xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft (raw, json)
Hash identifier: HD5V9gMnfU2xkxRDv96u2CyYKwZM9EuitZikJBbVsnA=
Subject key identifier: 48:05:74:88:64:57:3C:5C:FE:59:F7:36:BA:FD:B4:6C:1E:3E:89:7A
Authority key identifier: C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
Certificate issuer: /CN=c73e163a37870548d696ef0330646b8425328f28
Certificate serial: 019FA8996C974581806112F54A37AAC81E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:54 +0000
Manifest this update: Tue 28 Jul 2026 12:00:54 +0000
Manifest next update: Wed 29 Jul 2026 12:00:54 +0000
Files and hashes: 1: WSJBCh2OsvZcrdAL-2hq6pN9tFg.roa (hash: PeDCYtSLNPlYm/YRPC7P1Ngc8lvfXH2IT/iFWw8s2T4=)
2: xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl (hash: WDTXacSWtNhA0K0lt9JwHcPMjzoUU06G7+J1Ld8OKP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:6c:97:45:81:80:61:12:f5:4a:37:aa:c8:1e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c73e163a37870548d696ef0330646b8425328f28
Validity
Not Before: Jul 28 12:00:54 2026 GMT
Not After : Jul 29 12:00:54 2026 GMT
Subject: CN=4805748864573c5cfe59f736bafdb46c1e3e897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:25:2a:7d:15:94:72:e4:cf:69:2b:d7:d6:
43:c6:1f:f9:cf:40:e0:11:ed:fc:ce:7e:a2:ad:40:
9e:52:0c:34:48:5e:0e:23:3d:11:39:c5:b4:60:66:
ea:7a:0d:fe:47:39:59:93:85:b4:85:fb:3f:93:7d:
c9:c0:bf:e2:45:ab:03:43:76:bc:d5:ce:4e:1d:b5:
ad:f9:22:43:1c:21:2d:d9:59:89:b1:87:9e:6c:a9:
32:e3:6b:10:d2:81:a8:a7:0c:0d:7a:cd:be:09:c4:
5b:cc:aa:de:7f:ee:a6:62:fd:f5:5f:ff:3a:cb:f7:
37:71:d0:42:41:f0:f7:32:01:09:56:17:f7:ab:06:
95:92:ce:4d:4f:4e:2b:1b:f0:73:7b:d0:0b:f9:ab:
97:d8:b9:7c:11:53:13:13:02:3b:3b:e1:e7:d0:ab:
a4:b5:0c:6f:70:6b:be:61:8f:c0:4a:f7:23:40:84:
ce:c4:a1:90:51:75:d5:2e:68:cc:91:fc:e3:2d:0e:
96:1f:3f:c3:b1:f2:28:f8:d0:4e:d9:38:ed:7e:6c:
8e:11:89:c8:f3:02:b5:44:82:1c:f5:0c:91:db:e1:
d0:70:d0:69:0b:df:94:b5:7b:ef:db:37:30:a5:44:
ab:98:15:0f:59:a0:c7:12:bc:9a:71:8b:aa:42:64:
fd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:05:74:88:64:57:3C:5C:FE:59:F7:36:BA:FD:B4:6C:1E:3E:89:7A
X509v3 Authority Key Identifier:
keyid:C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1e:2c:f4:b7:d2:84:78:00:f7:1f:31:94:16:3c:82:4a:15:
a2:ca:b4:d3:84:15:1c:89:c6:88:ab:90:b6:44:6c:6b:a7:ba:
3c:ce:04:07:ab:7d:84:ac:59:b6:b0:b5:02:5b:e2:1e:da:24:
bd:d6:a7:45:de:04:cc:f5:3e:4f:1e:ac:08:66:65:d0:40:a4:
34:06:8d:db:f5:37:68:c9:b6:4e:f3:03:d3:c9:6b:0a:21:d6:
21:0f:42:ea:0d:f7:da:90:6a:0d:67:61:e2:27:65:61:d0:d4:
32:39:4b:96:ea:d8:6d:53:1e:e1:33:53:c6:75:28:c6:36:12:
7d:26:7e:4d:d8:6a:a0:9f:b4:b1:3f:20:39:4a:8d:6c:cb:b5:
c7:5b:b6:bc:fe:a2:06:74:ce:7c:da:a3:f2:c4:fd:be:14:ce:
73:2f:cd:c0:c4:80:bb:f1:f3:6a:9b:85:ba:33:82:85:0b:de:
89:c1:b7:9d:ef:79:c3:0c:3a:04:34:ab:ed:f9:88:14:03:e8:
2d:e1:5d:8a:59:01:15:35:34:bb:1d:b0:8c:24:5d:66:68:fd:
67:a0:59:e0:36:50:b1:4b:a5:14:7e:92:7b:cc:04:31:92:9b:
c2:41:eb:2d:6c:04:ca:4b:56:07:3e:4f:b7:90:22:27:b5:c6:
c4:d5:0c:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omWyXRYGAYRL1SjeqyB5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3M2UxNjNhMzc4NzA1NDhkNjk2ZWYwMzMwNjQ2Yjg0MjUz
MjhmMjgwHhcNMjYwNzI4MTIwMDU0WhcNMjYwNzI5MTIwMDU0WjAzMTEwLwYDVQQD
Eyg0ODA1NzQ4ODY0NTczYzVjZmU1OWY3MzZiYWZkYjQ2YzFlM2U4OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy4lKn0VlHLkz2kr19ZDxh/5z0Dg
Ee38zn6irUCeUgw0SF4OIz0ROcW0YGbqeg3+RzlZk4W0hfs/k33JwL/iRasDQ3a8
1c5OHbWt+SJDHCEt2VmJsYeebKky42sQ0oGopwwNes2+CcRbzKref+6mYv31X/86
y/c3cdBCQfD3MgEJVhf3qwaVks5NT04rG/Bze9AL+auX2Ll8EVMTEwI7O+Hn0Kuk
tQxvcGu+YY/ASvcjQITOxKGQUXXVLmjMkfzjLQ6WHz/DsfIo+NBO2TjtfmyOEYnI
8wK1RIIc9QyR2+HQcNBpC9+UtXvv2zcwpUSrmBUPWaDHEryacYuqQmT9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgFdIhkVzxc/ln3Nrr9tGwePol6MB8GA1UdIwQY
MBaAFMc+Fjo3hwVI1pbvAzBka4QlMo8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHo0V09qZUhCVWpXbHU4RE1HUnJoQ1V5anlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3Yjkt
YTdlZGI3ZDNmNTM3LzEveHo0V09qZUhCVWpXbHU4RE1HUnJoQ1V5anlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mYzM5MmEtNmEzZS00ZGE1LWI3YjktYTdlZGI3ZDNmNTM3
LzEveHo0V09qZUhCVWpXbHU4RE1HUnJoQ1V5anlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADB4s9LfS
hHgA9x8xlBY8gkoVosq004QVHInGiKuQtkRsa6e6PM4EB6t9hKxZtrC1AlviHtok
vdanRd4EzPU+Tx6sCGZl0ECkNAaN2/U3aMm2TvMD08lrCiHWIQ9C6g332pBqDWdh
4idlYdDUMjlLlurYbVMe4TNTxnUoxjYSfSZ+TdhqoJ+0sT8gOUqNbMu1x1u2vP6i
BnTOfNqj8sT9vhTOcy/NwMSAu/HzapuFujOChQveicG3ne95www6BDSr7fmIFAPo
LeFdilkBFTU0ux2wjCRdZmj9Z6BZ4DZQsUulFH6Se8wEMZKbwkHrLWwEyktWBz5P
t5AiJ7XGxNUMJA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:36:37 2026 by rpki-client