Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: 9ahVhKMhpe4ChOhxLYWcDKleJqcgXMo7pvqKGkwF0JU=
Subject key identifier: 62:27:51:BE:87:B0:4F:5F:02:9A:E2:41:7E:CE:AB:62:FA:B5:60:88
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 01A14015CA7DBF974897868833BBE5798023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 15:02:12 +0000
Manifest this update: Thu 15 Oct 2026 15:02:12 +0000
Manifest next update: Fri 16 Oct 2026 15:02:12 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: g+R5X+1W0Q/EeevoElRH9urn+HEQVF8UOz3K9wxjuzs=)
2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:ca:7d:bf:97:48:97:86:88:33:bb:e5:79:80:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Oct 15 15:02:12 2026 GMT
Not After : Oct 16 15:02:12 2026 GMT
Subject: CN=622751be87b04f5f029ae2417eceab62fab56088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:31:5a:f6:b4:3a:63:c8:a2:f1:53:34:1f:
f3:69:a6:a6:a7:0b:5e:ea:ec:e5:9a:2a:54:71:d6:
29:41:d9:a5:2a:99:71:05:1d:2a:1c:02:dd:11:02:
84:11:45:fd:63:a5:c8:19:68:eb:85:7d:93:54:a5:
be:e0:6c:20:7c:b3:7f:f8:ad:70:4a:f6:ed:95:d1:
e8:b3:6b:d3:4b:40:7d:33:4c:fc:72:bc:71:ec:e5:
2e:f9:66:d2:43:94:36:90:5b:c6:2f:c9:8d:b8:01:
90:86:c4:98:6d:f7:77:6a:29:cc:ce:89:de:3c:a9:
64:77:db:4c:29:b6:26:c1:bc:01:d3:0d:fc:c2:dc:
9e:7a:51:b7:b7:b2:81:60:e4:1c:a5:76:08:80:51:
31:c6:44:f2:2d:e4:f8:a2:0b:d8:28:21:73:41:58:
0c:d5:f0:d2:f7:9a:5e:88:85:ce:f0:ab:6d:e2:41:
2b:f2:88:a5:e8:9c:e3:58:02:42:25:4c:67:a0:09:
2c:00:c5:bc:03:f7:7a:fb:6b:40:ca:f2:e5:c4:47:
a0:19:f0:4b:88:4e:cb:9f:51:ac:ff:e5:05:df:60:
36:22:c7:f5:b7:d6:7b:e6:cd:c7:23:9b:11:d3:b1:
6c:7f:f4:f9:3c:04:1c:1c:f9:42:a7:46:72:48:14:
a6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:27:51:BE:87:B0:4F:5F:02:9A:E2:41:7E:CE:AB:62:FA:B5:60:88
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:45:fa:ae:29:56:9b:e4:87:4b:f6:0f:36:a7:00:d6:64:df:
b6:ee:cf:55:6a:c4:3f:eb:9f:78:a3:26:11:d0:55:22:21:9a:
14:da:1a:4b:2f:a0:29:b3:9f:62:50:50:cb:eb:13:c3:67:28:
66:88:6c:a2:c2:02:fc:d2:2f:9a:d2:57:e7:63:21:fb:f5:e7:
d7:ed:72:07:0c:d1:7e:8c:2d:e1:43:2c:a5:32:0e:e4:72:54:
c5:7f:20:5a:ad:6c:cb:74:79:73:09:09:ef:06:2d:ea:05:be:
c0:cb:4d:9f:e9:26:5f:ad:65:25:ab:16:79:ee:88:23:f2:46:
2b:cc:5d:0c:39:d7:51:ac:c9:2b:90:b9:de:a6:c9:ba:14:ee:
48:a0:cb:41:c8:be:a4:2c:d7:b3:57:5c:ab:e4:31:8c:d3:8f:
01:1a:3b:ba:75:a1:c4:23:10:34:4f:89:a1:55:cc:6a:d3:38:
fe:06:b5:4d:59:59:62:c4:35:5b:11:6a:b7:bd:f3:50:d9:84:
f2:b9:2d:2b:5e:2a:9a:72:34:03:e0:3a:f3:31:3c:14:28:72:
a9:a3:54:b0:6c:26:60:d2:ab:b4:c3:a2:06:ef:92:ef:d3:1f:
1d:e3:2b:ff:e8:7a:e6:da:f4:09:34:41:7b:81:0c:59:8c:31:
04:f5:7c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFcp9v5dIl4aIM7vleYAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzhjZDY4MTFkY2UyZWQ0ZjQyNjE0M2MzZmM4NDU3YjFi
NDM0YmIwHhcNMjYxMDE1MTUwMjEyWhcNMjYxMDE2MTUwMjEyWjAzMTEwLwYDVQQD
Eyg2MjI3NTFiZTg3YjA0ZjVmMDI5YWUyNDE3ZWNlYWI2MmZhYjU2MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXgxWva0OmPIovFTNB/zaaampwte
6uzlmipUcdYpQdmlKplxBR0qHALdEQKEEUX9Y6XIGWjrhX2TVKW+4GwgfLN/+K1w
SvbtldHos2vTS0B9M0z8crxx7OUu+WbSQ5Q2kFvGL8mNuAGQhsSYbfd3ainMzone
PKlkd9tMKbYmwbwB0w38wtyeelG3t7KBYOQcpXYIgFExxkTyLeT4ogvYKCFzQVgM
1fDS95peiIXO8Ktt4kEr8oil6JzjWAJCJUxnoAksAMW8A/d6+2tAyvLlxEegGfBL
iE7Ln1Gs/+UF32A2Isf1t9Z75s3HI5sR07Fsf/T5PAQcHPlCp0ZySBSmyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGInUb6HsE9fApriQX7Oq2L6tWCIMB8GA1UdIwQY
MBaAFOM4zWgR3OLtT0JhQ8P8hFextDS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYt
MmViMGFmM2FjNzgxLzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYtMmViMGFmM2FjNzgx
LzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0X6rilW
m+SHS/YPNqcA1mTftu7PVWrEP+ufeKMmEdBVIiGaFNoaSy+gKbOfYlBQy+sTw2co
ZohsosIC/NIvmtJX52Mh+/Xn1+1yBwzRfowt4UMspTIO5HJUxX8gWq1sy3R5cwkJ
7wYt6gW+wMtNn+kmX61lJasWee6II/JGK8xdDDnXUazJK5C53qbJuhTuSKDLQci+
pCzXs1dcq+QxjNOPARo7unWhxCMQNE+JoVXMatM4/ga1TVlZYsQ1WxFqt73zUNmE
8rktK14qmnI0A+A68zE8FChyqaNUsGwmYNKrtMOiBu+S79MfHeMr/+h65tr0CTRB
e4EMWYwxBPV8Fg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:50 2026 by rpki-client