Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File: 4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier: lAhUWjRWENmVI/ufdL5PcCu8Q3gVvq7MUHVB7sc2+YA=
Subject key identifier: 26:82:5D:45:55:85:3A:B6:04:2E:C8:F7:3B:53:46:13:FE:92:B2:3A
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer: /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial: 01A13D80EED13B224E85FAEFF544E74E1E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number: 17EC
Signing time: Thu 15 Oct 2026 03:00:22 +0000
Manifest this update: Thu 15 Oct 2026 03:00:22 +0000
Manifest next update: Fri 16 Oct 2026 03:00:22 +0000
Files and hashes: 1: 0gIiALe6pz1IQicIRlap9JpEjvk.roa (hash: a8WIdauJpV7mniv+m0G3DWtScZS35ac1cb7lSAK0pD4=)
2: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: AZKpcjTs2CM8OPnEEwK8UCahMv3bD4atfz80GziLDZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:ee:d1:3b:22:4e:85:fa:ef:f5:44:e7:4e:1e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
Validity
Not Before: Oct 15 03:00:22 2026 GMT
Not After : Oct 16 03:00:22 2026 GMT
Subject: CN=26825d4555853ab6042ec8f73b534613fe92b23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:0a:08:b4:ed:70:18:cd:93:f2:e1:76:27:
fb:60:0c:b9:dc:6b:5b:f2:ae:1d:24:82:25:16:8a:
6b:d3:2e:8b:90:fa:14:c6:3b:13:8f:f6:e6:81:74:
61:57:1b:7f:02:38:88:50:a5:e8:56:70:e7:23:5e:
9a:29:69:f0:26:c4:b2:34:0f:9b:d7:64:f6:7a:3a:
03:bf:8d:82:31:5f:f6:ea:fa:06:cf:36:aa:65:c0:
40:e8:8a:29:a7:f5:57:b3:c4:01:2b:60:4b:22:aa:
75:0d:ec:55:0b:79:dd:e6:db:01:a4:e1:7d:3d:60:
9c:3e:dc:58:5a:e0:2d:6d:b6:03:97:3d:a5:eb:6e:
48:8a:be:bb:d2:57:29:fa:00:20:cc:4a:f3:30:37:
05:7c:ef:31:e7:5e:2a:07:38:3a:ff:3f:84:5d:2d:
6c:fd:4a:76:29:f8:08:3c:ca:5d:fe:7e:ad:aa:cb:
22:8c:e3:22:2a:d4:8a:b5:53:0c:4e:0f:4a:4f:8d:
a5:4a:72:8b:9c:d2:6e:5c:69:39:88:bc:dc:d4:92:
3d:44:c1:6e:99:62:36:cd:30:c8:cf:ac:9f:da:aa:
cd:b2:24:0d:fb:06:35:57:7e:ba:cb:72:81:48:d9:
e3:b0:3f:50:74:3b:d4:d0:01:28:fe:bf:7f:3a:41:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:5D:45:55:85:3A:B6:04:2E:C8:F7:3B:53:46:13:FE:92:B2:3A
X509v3 Authority Key Identifier:
keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1f:bc:fd:5f:df:9a:ca:35:2c:08:c5:b8:d2:6c:74:3f:f7:
8c:2a:e1:79:7d:ca:06:7b:50:be:8e:b9:37:e4:71:ed:34:43:
b6:bd:04:3c:a1:a8:5f:17:b9:4a:a3:6b:23:47:d7:6e:93:a6:
1b:10:2f:66:cd:9c:b5:86:7c:3e:36:e1:99:95:af:b1:91:2a:
36:cb:36:d7:dc:35:96:76:57:9c:ca:22:ab:51:a4:2c:b1:8d:
e3:11:e4:15:84:6b:a1:1c:0a:92:fe:48:86:33:51:16:2a:8d:
f8:c0:3d:51:c1:d1:e3:ed:ff:9b:21:cc:55:8c:dd:93:07:98:
3c:a9:52:bb:46:95:12:31:58:75:b3:ba:df:da:a5:59:d2:d0:
73:30:64:a5:55:cf:29:e8:6d:9a:5a:8b:55:f5:36:a9:0e:39:
14:0f:ab:9c:9d:7f:7e:89:c7:9a:86:cc:c8:47:80:f2:74:bf:
30:6c:b1:64:8c:16:81:7f:19:f7:d6:36:f9:4c:9d:85:08:46:
ac:63:fb:84:14:6c:3d:be:2c:c3:c1:3e:9b:5c:ac:f2:9f:74:
80:4b:19:8d:dd:a0:d1:0a:5f:50:e7:93:bf:d6:44:5e:30:36:
d3:a9:7e:21:c3:68:d8:a1:0f:64:fd:65:8b:4e:55:f9:eb:19:
fa:79:61:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gO7ROyJOhfrv9UTnTh5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTEwZGU2ZmZhZTU5MDQyNzI0NGEwMzM0M2RiNjZhYzU2
NDI3NWEwHhcNMjYxMDE1MDMwMDIyWhcNMjYxMDE2MDMwMDIyWjAzMTEwLwYDVQQD
EygyNjgyNWQ0NTU1ODUzYWI2MDQyZWM4ZjczYjUzNDYxM2ZlOTJiMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunoKCLTtcBjNk/Lhdif7YAy53Gtb
8q4dJIIlFopr0y6LkPoUxjsTj/bmgXRhVxt/AjiIUKXoVnDnI16aKWnwJsSyNA+b
12T2ejoDv42CMV/26voGzzaqZcBA6Iopp/VXs8QBK2BLIqp1DexVC3nd5tsBpOF9
PWCcPtxYWuAtbbYDlz2l625Iir670lcp+gAgzErzMDcFfO8x514qBzg6/z+EXS1s
/Up2KfgIPMpd/n6tqssijOMiKtSKtVMMTg9KT42lSnKLnNJuXGk5iLzc1JI9RMFu
mWI2zTDIz6yf2qrNsiQN+wY1V366y3KBSNnjsD9QdDvU0AEo/r9/OkHF0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaCXUVVhTq2BC7I9ztTRhP+krI6MB8GA1UdIwQY
MBaAFOKhDeb/rlkEJyRKAzQ9tmrFZCdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hOGJiNTctYzE4MS00Njk1LTliZTct
NTc1NTQwNTg2MjBiLzEvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hOGJiNTctYzE4MS00Njk1LTliZTctNTc1NTQwNTg2MjBi
LzEvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKR+8/V/f
mso1LAjFuNJsdD/3jCrheX3KBntQvo65N+Rx7TRDtr0EPKGoXxe5SqNrI0fXbpOm
GxAvZs2ctYZ8PjbhmZWvsZEqNss219w1lnZXnMoiq1GkLLGN4xHkFYRroRwKkv5I
hjNRFiqN+MA9UcHR4+3/myHMVYzdkweYPKlSu0aVEjFYdbO639qlWdLQczBkpVXP
KehtmlqLVfU2qQ45FA+rnJ1/fonHmobMyEeA8nS/MGyxZIwWgX8Z99Y2+UydhQhG
rGP7hBRsPb4sw8E+m1ys8p90gEsZjd2g0QpfUOeTv9ZEXjA206l+IcNo2KEPZP1l
i05V+esZ+nlh2w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:44:34 2026 by rpki-client