Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: 79BvuzVSY+dsjlFRktsL/IlX0JVKN4iuAFbPmn+cxyI=
Subject key identifier: 90:86:65:37:FE:04:E5:D2:2E:95:FD:B6:6C:7E:22:FA:A2:80:C7:39
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019FA184212A71AFEDD5EDC933C88C11DBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 0187
Signing time: Mon 27 Jul 2026 03:00:18 +0000
Manifest this update: Mon 27 Jul 2026 03:00:18 +0000
Manifest next update: Tue 28 Jul 2026 03:00:18 +0000
Files and hashes: 1: TgSCC5KwM7742j8mJJTq-gFMwHE.roa (hash: +wOhWzlwLpRhzaq75+/ZOhGg3xC9QggYBfkia2ut1YM=)
2: jcRzJUg7IUVEUlfjHqL1NEbulJY.roa (hash: 043yV8J6dMsTpPpYvQ/xWssybIOO8FTRI8kOXFFcDXA=)
3: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: k9dIjLimSzDftobQsaYv4UZrmmfKC/clKxZ6ba4G4OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:21:2a:71:af:ed:d5:ed:c9:33:c8:8c:11:db:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Jul 27 03:00:18 2026 GMT
Not After : Jul 28 03:00:18 2026 GMT
Subject: CN=90866537fe04e5d22e95fdb66c7e22faa280c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:19:99:8b:46:54:fe:02:7e:d1:38:cf:58:
dd:1b:32:14:37:0c:bf:58:6a:97:80:69:5a:75:ff:
76:2c:d4:e9:91:68:01:b1:33:cb:37:9a:14:ae:78:
dc:45:04:2e:17:27:82:e9:5c:9c:c0:a9:28:29:76:
8d:19:c4:61:67:f7:49:9a:3f:ca:b0:86:eb:35:53:
a4:42:53:99:f4:42:24:ba:ad:f7:95:05:4b:6d:92:
c3:e0:f7:8f:0b:35:1a:51:6e:d8:3e:b9:cc:19:49:
4d:ec:26:fb:5d:f4:3b:f4:20:ef:d5:c0:7e:0e:01:
67:49:cc:61:e0:32:54:ec:e2:d1:88:40:f0:1e:14:
cb:67:75:e3:73:23:5c:3d:33:66:6e:8e:d9:06:9d:
24:18:c3:d6:c9:39:09:92:35:09:00:39:be:5d:8b:
59:15:e1:b3:85:bc:23:6d:d3:cf:72:d9:c0:a7:50:
24:be:57:d9:05:73:10:87:1f:17:5f:e8:a3:00:f8:
49:58:01:cf:b3:1f:9d:a5:e7:3c:6c:6f:a0:b2:25:
67:4b:95:7f:1e:76:63:ab:4c:55:f4:35:0c:36:19:
0f:c0:76:a2:8d:b0:8e:93:7d:2a:66:7f:1e:a9:0f:
3b:b8:e9:8c:81:57:8c:32:0f:45:c0:43:68:73:b7:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:86:65:37:FE:04:E5:D2:2E:95:FD:B6:6C:7E:22:FA:A2:80:C7:39
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0f:52:f5:8a:8b:52:d1:a4:40:3a:6b:ff:32:43:12:40:f4:
c1:5d:f2:c4:77:ae:08:c3:24:88:23:40:68:59:23:52:55:5d:
71:13:a1:de:e4:3f:54:3a:93:f5:71:02:a6:6c:2d:97:fe:a8:
89:1f:73:10:ce:cb:ea:04:de:ef:48:0c:5b:76:98:0f:be:7d:
d5:fc:e9:58:f7:ac:7b:3f:79:c2:25:19:a3:fc:07:0f:05:ec:
83:a9:4a:20:c2:2e:b7:a7:d0:98:fe:d3:26:ac:79:d3:94:14:
c3:32:36:17:ef:c1:90:a0:9e:67:d8:1d:ca:99:3a:ef:39:93:
ca:b2:3c:e2:da:fb:a6:2c:ab:61:3f:bd:e9:b4:03:9a:11:53:
5b:43:90:a4:c7:28:99:ce:7d:a2:a0:a0:7e:a5:0b:55:a9:5b:
9c:6b:65:26:e8:4a:b8:ad:c6:e9:be:2a:63:cc:2a:49:52:d8:
41:2f:f5:fb:c6:1e:1d:26:0e:24:f6:75:88:57:c8:92:79:22:
5f:45:48:4b:ef:c3:e4:a3:5f:14:f3:c6:a5:46:a2:6d:6d:3f:
20:b2:d1:70:70:d4:f3:17:b0:85:cf:1a:28:14:cf:0d:7b:38:
8e:fc:9f:09:01:8c:25:be:67:d8:b5:bf:53:52:b6:bd:cf:b5:
52:23:6d:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhCEqca/t1e3JM8iMEdvQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ODkwNDQwZGFmMWMzYWMzODc3M2U4NTIxNTExMmY3NGI3
MDYyMzIwHhcNMjYwNzI3MDMwMDE4WhcNMjYwNzI4MDMwMDE4WjAzMTEwLwYDVQQD
Eyg5MDg2NjUzN2ZlMDRlNWQyMmU5NWZkYjY2YzdlMjJmYWEyODBjNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLQZmYtGVP4CftE4z1jdGzIUNwy/
WGqXgGladf92LNTpkWgBsTPLN5oUrnjcRQQuFyeC6VycwKkoKXaNGcRhZ/dJmj/K
sIbrNVOkQlOZ9EIkuq33lQVLbZLD4PePCzUaUW7YPrnMGUlN7Cb7XfQ79CDv1cB+
DgFnScxh4DJU7OLRiEDwHhTLZ3XjcyNcPTNmbo7ZBp0kGMPWyTkJkjUJADm+XYtZ
FeGzhbwjbdPPctnAp1AkvlfZBXMQhx8XX+ijAPhJWAHPsx+dpec8bG+gsiVnS5V/
HnZjq0xV9DUMNhkPwHaijbCOk30qZn8eqQ87uOmMgVeMMg9FwENoc7dlpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCGZTf+BOXSLpX9tmx+IvqigMc5MB8GA1UdIwQY
MBaAFKeJBEDa8cOsOHc+hSFREvdLcGIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDkt
OGQ5N2U4Nzg1ZDRmLzEvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDktOGQ5N2U4Nzg1ZDRm
LzEvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeA9S9YqL
UtGkQDpr/zJDEkD0wV3yxHeuCMMkiCNAaFkjUlVdcROh3uQ/VDqT9XECpmwtl/6o
iR9zEM7L6gTe70gMW3aYD7591fzpWPesez95wiUZo/wHDwXsg6lKIMIut6fQmP7T
Jqx505QUwzI2F+/BkKCeZ9gdypk67zmTyrI84tr7piyrYT+96bQDmhFTW0OQpMco
mc59oqCgfqULValbnGtlJuhKuK3G6b4qY8wqSVLYQS/1+8YeHSYOJPZ1iFfIknki
X0VIS+/D5KNfFPPGpUaibW0/ILLRcHDU8xewhc8aKBTPDXs4jvyfCQGMJb5n2LW/
U1K2vc+1UiNtuw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:04:29 2026 by rpki-client