Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier: 5sOqJ64ZktlDcF5W/DVQVtbaNx7AgO8+ZMhGGKJRZFE=
Subject key identifier: 17:69:C1:A1:26:F1:72:E1:21:39:C5:21:7D:6A:6A:F1:CB:2E:1F:89
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer: /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial: 01A17816431C42F7BA3DABFF810BEC55C2F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number: 02B7
Signing time: Mon 26 Oct 2026 12:01:27 +0000
Manifest this update: Mon 26 Oct 2026 12:01:27 +0000
Manifest next update: Tue 27 Oct 2026 12:01:27 +0000
Files and hashes: 1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: CTO1bj9Mgr4BtB6DlaLDOgfOLMpsB+fjNz/Pj3dCWzc=)
2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:43:1c:42:f7:ba:3d:ab:ff:81:0b:ec:55:c2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Validity
Not Before: Oct 26 12:01:27 2026 GMT
Not After : Oct 27 12:01:27 2026 GMT
Subject: CN=1769c1a126f172e12139c5217d6a6af1cb2e1f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a2:bd:69:80:2c:e7:9e:75:35:06:1f:2e:4c:
7e:1f:af:89:63:41:b9:68:81:90:28:5c:0e:89:5f:
58:9f:d7:1e:65:be:79:ac:a4:b5:98:9e:a7:8a:7c:
ca:9b:63:5c:26:1e:dd:e5:50:97:02:28:d8:d9:db:
e8:a5:cb:de:70:9d:08:f7:a2:6f:66:d5:c5:1c:72:
a5:20:46:57:c4:9d:97:f7:d9:28:c9:d5:15:a0:ea:
b4:47:d8:63:96:05:d0:ca:67:93:d3:11:3c:68:67:
2b:22:21:1a:62:78:bb:ba:ff:f0:b8:56:53:77:58:
bc:46:e2:8d:7c:d7:62:a2:60:a9:25:70:8a:ac:86:
9f:21:b6:15:62:f2:45:ca:4f:27:3c:4f:ea:dd:2e:
91:88:bd:31:bf:f5:ca:9d:a3:5e:ce:c7:f9:b8:54:
67:30:7c:34:26:ac:c1:18:c9:15:1f:85:fb:06:c7:
c7:02:cb:96:22:f8:c4:10:88:66:95:72:b1:be:65:
0a:6e:5a:bc:60:18:ca:da:d8:d8:ff:cd:45:28:86:
16:8c:0f:53:4f:ec:bf:54:33:c9:11:1c:05:17:f9:
1a:a3:d1:14:41:bd:b9:07:75:a5:92:31:a2:d9:3f:
8f:4b:d6:80:b9:26:96:39:ec:c2:f6:6a:17:bf:b3:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:69:C1:A1:26:F1:72:E1:21:39:C5:21:7D:6A:6A:F1:CB:2E:1F:89
X509v3 Authority Key Identifier:
keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4a:93:af:d6:85:34:18:74:74:da:d2:a1:20:ce:e9:bd:d5:
c4:39:38:c6:12:dc:04:7a:50:88:90:9f:a8:65:b2:72:fe:35:
81:1a:d4:9c:98:ca:aa:0f:57:2e:7b:21:07:f0:f0:45:c9:4a:
a3:dd:f9:e2:26:9d:97:eb:b9:ec:8b:5b:b0:26:08:2f:21:78:
57:3a:e9:6f:1b:75:f2:3e:b9:dc:fd:bc:9d:95:4f:45:1b:38:
87:49:73:37:c7:47:1e:b3:cd:42:7c:03:39:af:64:27:be:d4:
f7:42:2c:5f:13:cc:2a:c9:9f:0e:41:4d:fd:96:c4:12:7a:42:
c5:e4:b4:01:c4:bc:ee:99:ea:6f:20:1b:a6:7f:33:ca:5c:13:
76:4d:3d:76:71:b2:3e:e3:e8:b2:2b:a0:87:5e:b0:e6:77:75:
bd:2e:f6:b0:b6:9b:ee:c0:9f:28:ea:ec:db:f4:71:d0:dd:22:
40:3d:e8:a2:96:00:b8:77:6e:31:6f:02:42:c2:76:3e:ee:0b:
f5:2c:02:14:eb:ed:df:3e:49:1a:78:df:75:17:72:a3:b0:9d:
23:9a:5d:cf:eb:0e:f6:a2:7d:30:47:74:77:b7:3e:9e:1c:bc:
9e:05:c3:d7:b3:97:6a:7a:84:13:23:38:80:35:d3:d9:11:c7:
85:4c:1e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4FkMcQve6Pav/gQvsVcL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOGIwZGNiNzlmZTBhZTQ4YmE4MzI2OWVjMTI4Mzg0NzBj
YWU5MGEwHhcNMjYxMDI2MTIwMTI3WhcNMjYxMDI3MTIwMTI3WjAzMTEwLwYDVQQD
EygxNzY5YzFhMTI2ZjE3MmUxMjEzOWM1MjE3ZDZhNmFmMWNiMmUxZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KK9aYAs5551NQYfLkx+H6+JY0G5
aIGQKFwOiV9Yn9ceZb55rKS1mJ6ninzKm2NcJh7d5VCXAijY2dvopcvecJ0I96Jv
ZtXFHHKlIEZXxJ2X99koydUVoOq0R9hjlgXQymeT0xE8aGcrIiEaYni7uv/wuFZT
d1i8RuKNfNdiomCpJXCKrIafIbYVYvJFyk8nPE/q3S6RiL0xv/XKnaNezsf5uFRn
MHw0JqzBGMkVH4X7BsfHAsuWIvjEEIhmlXKxvmUKblq8YBjK2tjY/81FKIYWjA9T
T+y/VDPJERwFF/kao9EUQb25B3WlkjGi2T+PS9aAuSaWOezC9moXv7ORJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdpwaEm8XLhITnFIX1qavHLLh+JMB8GA1UdIwQY
MBaAFD+LDct5/grki6gyaewSg4RwyukKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRzTnkzbi1DdVNMcURKcDdCS0RoSERLNlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOTA2ZDUtNjNkOC00MWZhLWEyY2Yt
NWMzN2NhN2E1N2E1LzEvUDRzTnkzbi1DdVNMcURKcDdCS0RoSERLNlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mOTA2ZDUtNjNkOC00MWZhLWEyY2YtNWMzN2NhN2E1N2E1
LzEvUDRzTnkzbi1DdVNMcURKcDdCS0RoSERLNlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0qTr9aF
NBh0dNrSoSDO6b3VxDk4xhLcBHpQiJCfqGWycv41gRrUnJjKqg9XLnshB/DwRclK
o9354iadl+u57ItbsCYILyF4Vzrpbxt18j653P28nZVPRRs4h0lzN8dHHrPNQnwD
Oa9kJ77U90IsXxPMKsmfDkFN/ZbEEnpCxeS0AcS87pnqbyAbpn8zylwTdk09dnGy
PuPosiugh16w5nd1vS72sLab7sCfKOrs2/Rx0N0iQD3oopYAuHduMW8CQsJ2Pu4L
9SwCFOvt3z5JGnjfdRdyo7CdI5pdz+sO9qJ9MEd0d7c+nhy8ngXD17OXanqEEyM4
gDXT2RHHhUweOg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:38 2026 by rpki-client