Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
File: S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft (raw, json)
Hash identifier: mr/AwOGGZicUxG7ab+xm8nuxP6xId1Jratc8e0d/0dg=
Subject key identifier: D2:96:3E:D7:92:5E:CD:46:C0:DA:41:C7:A3:D1:1C:C3:70:F4:6B:8B
Authority key identifier: 4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
Certificate issuer: /CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Certificate serial: 01A17FCFC1AAF152D8B02D4C0452615AD6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
Manifest number: 0140
Signing time: Wed 28 Oct 2026 00:01:24 +0000
Manifest this update: Wed 28 Oct 2026 00:01:24 +0000
Manifest next update: Thu 29 Oct 2026 00:01:24 +0000
Files and hashes: 1: S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl (hash: OYtUmTpwbsiGRXgCYkNgJlwUw8SKsRuRISCpQ/d5LKo=)
2: X00WP5hL284UqAVGxLXaNNV_5EU.roa (hash: Qq8OZKKabuQ4bEnBcQSngOYJ+I2wL1Rk9O2ngy1HvwE=)
3: l-XkXuf9XggQYZxtWN0dMNbMQYA.roa (hash: VtVN/POmbvS7tbXroTKgBcOB9/D/3PdK83che1VmeOE=)
4: mT6v6jSgHIygycLQjCb9jIj1ZFo.roa (hash: 3STcbpvfvavXclx/IAHFXEuz539gDMyFZGfO/1xoJjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:c1:aa:f1:52:d8:b0:2d:4c:04:52:61:5a:d6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b905b92ceed0d4054fd96c7ccfd5de66d8f62ae
Validity
Not Before: Oct 28 00:01:24 2026 GMT
Not After : Oct 29 00:01:24 2026 GMT
Subject: CN=d2963ed7925ecd46c0da41c7a3d11cc370f46b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:51:73:84:b4:76:4b:19:4a:5f:04:27:81:
86:ba:63:e3:94:05:ea:b8:01:97:e3:d5:d4:a8:fb:
39:40:52:1f:e2:59:bf:2d:dc:71:44:b8:6f:62:da:
1c:39:41:49:1b:c9:a1:95:8c:1b:4f:7e:0c:d5:fe:
a9:50:29:37:9b:fa:8d:eb:c3:a9:cb:e5:a7:ed:97:
d6:80:5a:95:b4:20:c3:4d:00:3f:99:7a:85:98:20:
a5:ea:48:23:62:b9:f2:e9:ed:73:25:35:94:ff:67:
1c:4e:c4:eb:33:c2:aa:76:3b:3d:f4:f4:66:14:7a:
41:ea:2d:c9:2a:f1:5c:2f:46:3c:cb:4b:b2:c9:89:
8a:c0:cd:a4:a2:4a:7c:b1:48:90:c4:3d:44:db:8d:
e2:a5:d8:d3:93:78:b1:95:5f:de:9b:34:98:90:75:
98:0d:3a:2e:e6:33:d1:27:2c:9d:bc:ca:56:9f:e6:
38:e0:c1:6b:67:48:40:9b:54:13:eb:d3:a6:4d:b5:
bc:d3:cb:b5:90:74:16:1c:41:5f:06:af:7b:44:1e:
eb:2d:a5:cc:45:20:73:a7:6c:76:79:07:a3:70:e1:
9a:f3:7a:6b:ac:d0:2a:74:0a:9c:6c:65:ec:6d:06:
35:ea:05:16:4e:09:da:a0:8a:f5:98:18:8d:b7:6c:
07:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:96:3E:D7:92:5E:CD:46:C0:DA:41:C7:A3:D1:1C:C3:70:F4:6B:8B
X509v3 Authority Key Identifier:
keyid:4B:90:5B:92:CE:ED:0D:40:54:FD:96:C7:CC:FD:5D:E6:6D:8F:62:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/S5Bbks7tDUBU_ZbHzP1d5m2PYq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bb:fb:83:dd:44:46:bc:a3:b1:02:f5:b6:56:47:43:01:3a:
00:ed:bd:46:4c:a1:e7:fc:15:f8:3f:15:de:f8:cb:3e:2b:11:
d2:d2:18:bb:e6:49:66:17:ca:e6:6e:f1:95:93:0e:76:f9:94:
50:81:13:f0:aa:b7:84:b2:4b:69:4a:db:ca:ce:cf:a4:67:27:
52:29:42:74:f6:28:d9:d9:5e:31:86:d1:32:2a:b1:55:86:f0:
73:4a:8d:3d:53:65:7f:5f:96:87:08:b4:12:12:c9:7d:a1:98:
a0:b1:ee:0a:8d:01:29:41:59:dc:3f:58:b0:08:17:76:4d:4b:
86:2f:fa:36:67:58:cb:7d:db:04:b8:2b:72:41:17:28:55:c0:
98:8c:1d:55:ae:f5:84:19:0f:3a:35:ce:7b:dd:a4:7f:27:ba:
b6:77:c8:d9:e7:b1:a5:e0:b2:0d:28:b1:b3:5c:37:ea:c7:c9:
2d:3d:86:7d:42:36:83:c2:68:93:e7:78:27:15:a4:10:94:ce:
31:83:6b:7d:7a:de:5f:8d:a5:15:f6:d7:7c:a0:c9:5f:cd:3d:
49:dc:99:f2:0d:00:50:9f:11:14:c0:32:0d:b2:6b:ee:79:2c:
fa:ef:fd:0f:06:a7:36:79:e5:75:6a:0b:66:f6:fb:cf:ee:79:
c2:d6:07:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/z8Gq8VLYsC1MBFJhWtbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTA1YjkyY2VlZDBkNDA1NGZkOTZjN2NjZmQ1ZGU2NmQ4
ZjYyYWUwHhcNMjYxMDI4MDAwMTI0WhcNMjYxMDI5MDAwMTI0WjAzMTEwLwYDVQQD
EyhkMjk2M2VkNzkyNWVjZDQ2YzBkYTQxYzdhM2QxMWNjMzcwZjQ2YjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkNRc4S0dksZSl8EJ4GGumPjlAXq
uAGX49XUqPs5QFIf4lm/LdxxRLhvYtocOUFJG8mhlYwbT34M1f6pUCk3m/qN68Op
y+Wn7ZfWgFqVtCDDTQA/mXqFmCCl6kgjYrny6e1zJTWU/2ccTsTrM8Kqdjs99PRm
FHpB6i3JKvFcL0Y8y0uyyYmKwM2kokp8sUiQxD1E243ipdjTk3ixlV/emzSYkHWY
DTou5jPRJyydvMpWn+Y44MFrZ0hAm1QT69OmTbW808u1kHQWHEFfBq97RB7rLaXM
RSBzp2x2eQejcOGa83prrNAqdAqcbGXsbQY16gUWTgnaoIr1mBiNt2wHrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKWPteSXs1GwNpBx6PRHMNw9GuLMB8GA1UdIwQY
MBaAFEuQW5LO7Q1AVP2Wx8z9XeZtj2KuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVCYmtzN3REVUJVX1piSHpQMWQ1bTJQWXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt
YzAzZjNmZGRkNGFjLzEvUzVCYmtzN3REVUJVX1piSHpQMWQ1bTJQWXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj
LzEvUzVCYmtzN3REVUJVX1piSHpQMWQ1bTJQWXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7v7g91E
RryjsQL1tlZHQwE6AO29Rkyh5/wV+D8V3vjLPisR0tIYu+ZJZhfK5m7xlZMOdvmU
UIET8Kq3hLJLaUrbys7PpGcnUilCdPYo2dleMYbRMiqxVYbwc0qNPVNlf1+Whwi0
EhLJfaGYoLHuCo0BKUFZ3D9YsAgXdk1Lhi/6NmdYy33bBLgrckEXKFXAmIwdVa71
hBkPOjXOe92kfye6tnfI2eexpeCyDSixs1w36sfJLT2GfUI2g8Jok+d4JxWkEJTO
MYNrfXreX42lFfbXfKDJX809SdyZ8g0AUJ8RFMAyDbJr7nks+u/9DwanNnnldWoL
Zvb7z+55wtYHIA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:40:49 2026 by rpki-client