Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File: 4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier: DghpCUSg6c6yqiHo0gF0zEB5fzF6OozmyNEmEU3S9iQ=
Subject key identifier: 30:2D:FA:9A:86:1E:A8:31:1A:21:4B:4A:E9:C5:F5:63:B1:45:47:EB
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer: /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial: 01A000C9FF7697522A0BE5C3AE0EBE36F184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number: 1748
Signing time: Fri 14 Aug 2026 15:00:33 +0000
Manifest this update: Fri 14 Aug 2026 15:00:33 +0000
Manifest next update: Sat 15 Aug 2026 15:00:33 +0000
Files and hashes: 1: 0gIiALe6pz1IQicIRlap9JpEjvk.roa (hash: a8WIdauJpV7mniv+m0G3DWtScZS35ac1cb7lSAK0pD4=)
2: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: lZZuKBAhGNcOETL/nlATkVt8NS01kojz54yRfPCWI68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:c9:ff:76:97:52:2a:0b:e5:c3:ae:0e:be:36:f1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
Validity
Not Before: Aug 14 15:00:33 2026 GMT
Not After : Aug 15 15:00:33 2026 GMT
Subject: CN=302dfa9a861ea8311a214b4ae9c5f563b14547eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:04:37:93:3d:06:15:bf:c5:d1:72:19:1e:
e1:2c:14:d7:9b:2c:62:5f:3b:3e:1b:f7:2c:e3:b8:
83:0a:a5:7b:05:bf:2b:77:e2:08:b9:09:3b:b6:62:
c1:88:20:8b:43:36:9c:68:03:10:92:71:63:03:b4:
ef:f3:c1:b6:b4:ac:df:34:36:22:24:a9:b9:8a:fb:
a6:f6:9e:06:8e:69:0d:24:5e:0a:fe:4e:a6:35:5e:
cc:b0:bc:ab:39:15:34:48:08:ff:33:bc:2f:14:5d:
d4:99:a7:09:e0:cc:ec:e1:9f:19:c9:fc:57:52:a3:
47:d3:c3:8a:08:3d:f2:c9:56:30:49:3e:fe:ca:a4:
78:ef:a3:f5:43:0e:f0:dd:dc:43:7e:b5:c1:df:7d:
d5:c4:df:5a:02:9e:b3:d1:8d:5e:bd:4f:88:67:4d:
36:45:5e:fe:dd:e4:61:7b:2a:8e:0d:4d:84:0b:e6:
9e:42:2f:c1:fe:8d:aa:47:06:88:6f:33:ff:d2:77:
62:a1:d4:3d:dc:be:d7:28:85:3e:1f:96:e4:4b:6a:
f1:35:b8:b5:a8:77:51:5d:92:75:91:42:b5:1b:ec:
2d:09:32:d0:87:e7:0e:bf:5a:dc:f2:3a:c4:ce:60:
f9:df:41:43:31:cc:9a:5f:70:a7:15:3f:4e:c0:86:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:FA:9A:86:1E:A8:31:1A:21:4B:4A:E9:C5:F5:63:B1:45:47:EB
X509v3 Authority Key Identifier:
keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:91:21:8b:d6:d9:a1:d9:d7:12:be:b5:af:c1:6d:90:19:c4:
a1:18:f7:b2:55:90:a8:94:ce:2f:eb:54:14:71:99:d9:dc:e4:
ff:6e:99:5e:d2:4c:be:eb:5f:5d:5e:84:b7:c9:76:5f:06:a6:
75:4f:64:0c:59:7a:bf:0c:5c:99:30:43:9d:1b:cf:88:60:6b:
82:6c:2c:05:c4:dc:31:3c:09:01:d1:11:5c:84:1e:35:aa:82:
63:39:ec:e8:95:5f:27:98:60:f7:18:1f:2f:f1:6c:3b:58:0f:
c3:3d:0e:72:c0:15:d7:15:4d:a8:7c:a0:6a:a0:9f:65:6e:e8:
25:b1:87:3b:d0:66:68:19:7f:44:03:1a:ab:a2:51:ee:a4:08:
c4:e7:fb:58:f6:98:c1:d7:2d:e2:9f:9d:36:ca:8f:da:2d:5a:
5a:42:fe:ac:53:2e:e8:4d:7f:fb:05:f5:28:25:6c:57:31:8b:
9e:19:14:8e:a4:3f:0e:40:f6:72:64:56:8b:87:63:3d:91:f3:
2b:15:7a:c0:df:64:a6:9e:9b:62:59:e7:b2:41:19:99:06:1b:
a2:62:5e:ac:8e:19:92:2f:0a:33:8f:73:24:53:85:6e:b6:5b:
c0:fb:0c:09:21:5e:3c:c0:87:90:c5:78:7a:f0:85:ee:21:8b:
fc:b8:1e:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyf92l1IqC+XDrg6+NvGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTEwZGU2ZmZhZTU5MDQyNzI0NGEwMzM0M2RiNjZhYzU2
NDI3NWEwHhcNMjYwODE0MTUwMDMzWhcNMjYwODE1MTUwMDMzWjAzMTEwLwYDVQQD
EygzMDJkZmE5YTg2MWVhODMxMWEyMTRiNGFlOWM1ZjU2M2IxNDU0N2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfkEN5M9BhW/xdFyGR7hLBTXmyxi
Xzs+G/cs47iDCqV7Bb8rd+IIuQk7tmLBiCCLQzacaAMQknFjA7Tv88G2tKzfNDYi
JKm5ivum9p4GjmkNJF4K/k6mNV7MsLyrORU0SAj/M7wvFF3UmacJ4Mzs4Z8ZyfxX
UqNH08OKCD3yyVYwST7+yqR476P1Qw7w3dxDfrXB333VxN9aAp6z0Y1evU+IZ002
RV7+3eRheyqODU2EC+aeQi/B/o2qRwaIbzP/0ndiodQ93L7XKIU+H5bkS2rxNbi1
qHdRXZJ1kUK1G+wtCTLQh+cOv1rc8jrEzmD530FDMcyaX3CnFT9OwIbXKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAt+pqGHqgxGiFLSunF9WOxRUfrMB8GA1UdIwQY
MBaAFOKhDeb/rlkEJyRKAzQ9tmrFZCdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hOGJiNTctYzE4MS00Njk1LTliZTct
NTc1NTQwNTg2MjBiLzEvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hOGJiNTctYzE4MS00Njk1LTliZTctNTc1NTQwNTg2MjBi
LzEvNHFFTjV2LXVXUVFuSkVvRE5EMjJhc1ZrSjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwZEhi9bZ
odnXEr61r8FtkBnEoRj3slWQqJTOL+tUFHGZ2dzk/26ZXtJMvutfXV6Et8l2Xwam
dU9kDFl6vwxcmTBDnRvPiGBrgmwsBcTcMTwJAdERXIQeNaqCYzns6JVfJ5hg9xgf
L/FsO1gPwz0OcsAV1xVNqHygaqCfZW7oJbGHO9BmaBl/RAMaq6JR7qQIxOf7WPaY
wdct4p+dNsqP2i1aWkL+rFMu6E1/+wX1KCVsVzGLnhkUjqQ/DkD2cmRWi4djPZHz
KxV6wN9kpp6bYlnnskEZmQYbomJerI4Zki8KM49zJFOFbrZbwPsMCSFePMCHkMV4
evCF7iGL/LgeIg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:48 2026 by rpki-client