Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File: 4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier: +d6qfVwavL64JKECksbSravU7e5uSeqRz8T9/eYO6hQ=
Subject key identifier: 19:51:D3:C1:3C:0C:47:A7:62:82:A0:04:2B:E2:00:B1:87:70:20:6A
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 01A17C2948179E5CC4366C65DEC88B544CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number: 1AD0
Signing time: Tue 27 Oct 2026 07:00:42 +0000
Manifest this update: Tue 27 Oct 2026 07:00:42 +0000
Manifest next update: Wed 28 Oct 2026 07:00:42 +0000
Files and hashes: 1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: C2z0zY6zbp8NQ2tiY8ZpxmCXuArvwsVGLbGzC1fa/XY=)
2: Wi5MJkqvObCqrjZBlo0JDmeXkfI.roa (hash: 99QCRcjIbmAy7NXYDozY/LitcvyDVNBk3XTYfLTEqtM=)
3: X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa (hash: U8BCAKAOabJXvpxRbVFDeRvoLuUy39ScZ8CQFXOkfKo=)
4: bRn03FRlSzZThZNkviNVTHKQJGs.roa (hash: xEDx54ik3RAUzg+a27rbqvQuS4hz986uk0RMqkm7R+M=)
5: el7Foe7CpoESR0E_lBDRq_2Ohz8.roa (hash: /kLAJJz2VIOJRlWwXrYI0vRC2jlyRUsDvBRbglDgwCs=)
6: mccsr8m8ho2_mF3Ywy_9oaBImlk.roa (hash: 8fr0OzT5KHo+mYjffMlKzkDxAz4/c/4/JdZVWTqaEVk=)
7: pY-w966p6TcVCR_ceh3iqo8tBvM.roa (hash: 9v8cY+ONlAQ5plK0CUQaAsntXexrpXKvoAQArC1anGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:48:17:9e:5c:c4:36:6c:65:de:c8:8b:54:4c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Oct 27 07:00:42 2026 GMT
Not After : Oct 28 07:00:42 2026 GMT
Subject: CN=1951d3c13c0c47a76282a0042be200b18770206a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:71:4d:14:18:bf:10:b7:f2:30:d9:f0:be:
27:ae:e2:47:06:0e:5a:9a:1a:5e:54:0d:ae:fa:1a:
5e:04:4d:8e:dd:16:fb:39:7f:66:50:cc:a7:71:d4:
f3:f8:87:bc:89:13:e3:75:11:02:43:18:97:8e:bd:
2e:2c:9f:69:e3:16:9a:fb:99:13:d2:61:0e:fd:3b:
c3:49:54:79:a0:ca:29:c7:bf:2a:c2:4b:ec:2b:c1:
d2:d5:eb:b7:70:a3:77:c7:b4:77:db:d9:dd:c1:0e:
6a:ab:32:29:29:91:37:6e:f6:02:49:8f:bd:f8:e3:
32:5a:1c:c8:cc:20:aa:43:0f:e9:a4:e1:f4:78:a7:
af:21:43:c6:94:de:1d:45:99:2b:7c:c6:e0:ab:6b:
66:c2:0b:48:d6:10:5a:1f:2a:b4:4a:48:bd:b7:95:
6a:22:72:69:8d:fa:99:83:80:5b:6d:45:ac:4c:4d:
e8:2c:c9:8e:e7:04:cb:f4:62:9a:17:ff:e5:7a:e7:
3e:6c:55:bd:da:a2:b9:d3:d5:a2:5e:54:87:f9:91:
e1:1d:35:80:12:09:05:d0:21:99:a9:a6:15:27:ff:
66:ed:c7:cd:d0:56:75:3b:85:e3:f2:fa:3b:ca:45:
08:a1:3b:89:88:49:69:00:30:7f:03:67:d6:ac:82:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:51:D3:C1:3C:0C:47:A7:62:82:A0:04:2B:E2:00:B1:87:70:20:6A
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:95:1b:e5:1e:74:84:03:43:26:45:cb:21:1c:06:c9:dc:0b:
8c:75:b2:0d:6a:83:b3:45:c4:88:ca:6d:43:86:28:c7:65:95:
f2:e0:ce:32:cf:1c:d3:e6:27:45:a8:de:4b:d1:f3:49:73:95:
f0:34:db:fb:49:fa:1e:fd:59:e7:8e:77:b1:df:b1:19:98:59:
db:cc:26:b3:38:13:1d:03:50:ab:f2:89:f2:9e:67:7a:82:df:
0a:9b:f3:ab:78:5b:ad:db:7f:0d:6f:d3:9c:de:41:1e:e9:47:
06:58:26:bd:23:27:8f:40:cd:ec:b9:d0:22:87:7a:4d:2d:11:
db:00:81:07:15:b8:bc:ff:8d:65:11:9f:a4:0a:0d:17:ac:17:
ac:02:09:ae:a2:79:da:41:41:9c:0c:c5:72:24:cb:1a:74:d1:
91:67:f2:1c:76:d1:96:61:55:9d:88:8a:d7:98:80:18:51:61:
e3:40:ca:af:6f:e4:8a:86:73:f0:ef:8c:24:e3:7a:ef:23:2a:
18:8e:f6:4d:0a:d8:8a:b7:fc:51:47:e5:e6:5b:ac:37:8c:dd:
84:5b:9d:33:2b:71:8b:ae:38:58:ad:d9:c6:0f:f1:0d:4e:ae:
0a:bc:8d:b1:90:56:56:76:c0:dc:d1:f7:9f:74:39:ab:56:31:
97:10:ce:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KUgXnlzENmxl3siLVEzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi
YmZmMjAwHhcNMjYxMDI3MDcwMDQyWhcNMjYxMDI4MDcwMDQyWjAzMTEwLwYDVQQD
EygxOTUxZDNjMTNjMGM0N2E3NjI4MmEwMDQyYmUyMDBiMTg3NzAyMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7NxTRQYvxC38jDZ8L4nruJHBg5a
mhpeVA2u+hpeBE2O3Rb7OX9mUMyncdTz+Ie8iRPjdRECQxiXjr0uLJ9p4xaa+5kT
0mEO/TvDSVR5oMopx78qwkvsK8HS1eu3cKN3x7R329ndwQ5qqzIpKZE3bvYCSY+9
+OMyWhzIzCCqQw/ppOH0eKevIUPGlN4dRZkrfMbgq2tmwgtI1hBaHyq0Ski9t5Vq
InJpjfqZg4BbbUWsTE3oLMmO5wTL9GKaF//leuc+bFW92qK509WiXlSH+ZHhHTWA
EgkF0CGZqaYVJ/9m7cfN0FZ1O4Xj8vo7ykUIoTuJiElpADB/A2fWrIKzXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlR08E8DEenYoKgBCviALGHcCBqMB8GA1UdIwQY
MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt
OGQ4MWZkYzZmMTcwLzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw
LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5Ub5R50
hANDJkXLIRwGydwLjHWyDWqDs0XEiMptQ4Yox2WV8uDOMs8c0+YnRajeS9HzSXOV
8DTb+0n6Hv1Z5453sd+xGZhZ28wmszgTHQNQq/KJ8p5neoLfCpvzq3hbrdt/DW/T
nN5BHulHBlgmvSMnj0DN7LnQIod6TS0R2wCBBxW4vP+NZRGfpAoNF6wXrAIJrqJ5
2kFBnAzFciTLGnTRkWfyHHbRlmFVnYiK15iAGFFh40DKr2/kioZz8O+MJON67yMq
GI72TQrYirf8UUfl5lusN4zdhFudMytxi644WK3Zxg/xDU6uCryNsZBWVnbA3NH3
n3Q5q1YxlxDO+A==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:08 2026 by rpki-client