Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: UrBwWOp35GrUZYxW20n/fw9eR1womQiVyyPuVhwiyCY=
Subject key identifier: 5C:97:F0:3E:C0:CE:1D:3B:1F:F4:0D:FD:32:D6:69:97:2B:76:F3:63
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 01A176270FA9B8011AE71BB967DC01C12F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 0BEE
Signing time: Mon 26 Oct 2026 03:00:33 +0000
Manifest this update: Mon 26 Oct 2026 03:00:33 +0000
Manifest next update: Tue 27 Oct 2026 03:00:33 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: tg8GYreBH2EYVEW3QmOslhxd+aqDVuoC5vRzoDymo68=)
2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:0f:a9:b8:01:1a:e7:1b:b9:67:dc:01:c1:2f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Oct 26 03:00:33 2026 GMT
Not After : Oct 27 03:00:33 2026 GMT
Subject: CN=5c97f03ec0ce1d3b1ff40dfd32d669972b76f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:73:b5:00:15:12:91:ce:70:26:f6:80:01:
e7:32:c6:17:0f:e9:98:00:99:25:b8:84:21:7d:b3:
92:b9:e8:5a:64:c6:e8:f3:53:63:b4:aa:56:c1:00:
9c:cc:c9:77:f2:2b:dc:bc:cc:65:cb:0b:ee:1a:dc:
47:12:67:dd:2c:a8:6b:1e:93:92:61:ee:83:0f:4c:
d5:05:b2:27:83:dc:5e:78:50:01:d6:7c:1a:b1:9c:
21:6e:86:f4:a3:ac:6c:70:d1:83:09:9c:e3:10:3c:
e5:b6:65:db:85:c3:02:6e:e4:cd:ea:86:16:80:74:
aa:c1:3a:19:d3:da:13:ce:0f:52:ca:29:59:68:c7:
50:ba:30:70:17:82:d5:a9:6a:49:95:a9:d7:b9:6e:
ab:5a:04:d3:28:fb:b9:15:65:26:04:8d:45:3f:ee:
81:d0:84:27:9a:b0:75:e0:df:4c:49:a5:f5:38:31:
24:41:ee:2d:64:d0:ed:01:5c:7b:71:5e:47:df:f9:
8a:c6:b4:61:49:2b:ff:f1:01:94:c8:d2:89:e0:e6:
bd:f7:b4:2d:56:6d:0c:37:c5:c5:1f:6b:1a:cc:1e:
70:f4:0c:f0:ec:83:e5:30:dd:cd:b7:43:86:38:44:
3e:0c:29:a6:c8:af:31:80:84:69:d9:45:0d:1e:d6:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:97:F0:3E:C0:CE:1D:3B:1F:F4:0D:FD:32:D6:69:97:2B:76:F3:63
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d9:57:78:5f:e8:50:d4:bf:52:07:c1:fb:6e:28:0b:e7:d1:
7f:78:aa:f9:5a:75:2a:c4:98:64:90:08:01:17:0f:43:f8:c5:
d3:ba:76:cd:f0:ed:16:0a:7c:7e:e3:bf:4c:f5:7b:01:f6:a3:
3a:bc:f1:50:1a:2e:11:f4:c0:4d:7c:83:97:93:c6:63:22:a1:
72:db:61:d5:8d:43:7e:39:7e:33:e0:28:93:75:52:01:8c:ff:
bc:cd:10:63:98:ba:a2:fe:cc:3d:f7:d3:22:1c:94:92:97:4a:
42:7c:0b:96:f4:ac:4c:27:19:ef:9f:e0:95:27:3c:ef:57:ef:
95:eb:58:4a:1e:6c:fa:d0:18:0e:25:c1:79:9b:f1:78:2f:fd:
6c:af:b0:e4:b1:33:b7:bc:4f:7e:a7:93:51:ab:70:85:af:cd:
ee:ee:ad:37:9e:3d:e0:3e:1e:f6:c7:f5:05:0f:72:a4:16:b0:
f0:11:a1:60:5f:67:af:d6:13:42:7d:89:18:7e:57:1c:22:32:
73:66:36:3c:47:05:48:e4:91:e2:e0:f6:b4:ce:14:75:06:5a:
31:fb:83:c0:33:c7:66:0d:5c:89:19:c7:f5:8f:51:ca:a7:8e:
96:46:d9:62:5c:fe:f2:09:19:64:c1:f4:d0:e3:30:58:5c:25:
36:3d:71:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2Jw+puAEa5xu5Z9wBwS8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNmM4YWQyODUzOGVkZTBiNGM3ZTFhNzFlOWNhOTg5YTlm
MDNmMTAwHhcNMjYxMDI2MDMwMDMzWhcNMjYxMDI3MDMwMDMzWjAzMTEwLwYDVQQD
Eyg1Yzk3ZjAzZWMwY2UxZDNiMWZmNDBkZmQzMmQ2Njk5NzJiNzZmMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12JztQAVEpHOcCb2gAHnMsYXD+mY
AJkluIQhfbOSuehaZMbo81NjtKpWwQCczMl38ivcvMxlywvuGtxHEmfdLKhrHpOS
Ye6DD0zVBbIng9xeeFAB1nwasZwhbob0o6xscNGDCZzjEDzltmXbhcMCbuTN6oYW
gHSqwToZ09oTzg9SyilZaMdQujBwF4LVqWpJlanXuW6rWgTTKPu5FWUmBI1FP+6B
0IQnmrB14N9MSaX1ODEkQe4tZNDtAVx7cV5H3/mKxrRhSSv/8QGUyNKJ4Oa997Qt
Vm0MN8XFH2sazB5w9Azw7IPlMN3Nt0OGOEQ+DCmmyK8xgIRp2UUNHtaWIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyX8D7Azh07H/QN/TLWaZcrdvNjMB8GA1UdIwQY
MBaAFOBsitKFOO3gtMfhpx6cqYmp8D8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTkt
MzFiMmM2NjZiMmRjLzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9mMDAwNmYtNTY3MC00MmE2LTg1YTktMzFiMmM2NjZiMmRj
LzEvNEd5SzBvVTQ3ZUMweC1HbkhweXBpYW53UHhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwtlXeF/o
UNS/UgfB+24oC+fRf3iq+Vp1KsSYZJAIARcPQ/jF07p2zfDtFgp8fuO/TPV7Afaj
OrzxUBouEfTATXyDl5PGYyKhctth1Y1Dfjl+M+Aok3VSAYz/vM0QY5i6ov7MPffT
IhyUkpdKQnwLlvSsTCcZ75/glSc871fvletYSh5s+tAYDiXBeZvxeC/9bK+w5LEz
t7xPfqeTUatwha/N7u6tN5494D4e9sf1BQ9ypBaw8BGhYF9nr9YTQn2JGH5XHCIy
c2Y2PEcFSOSR4uD2tM4UdQZaMfuDwDPHZg1ciRnH9Y9RyqeOlkbZYlz+8gkZZMH0
0OMwWFwlNj1x+g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:13:15 2026 by rpki-client