Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: yVR72WXXNcyxRjgnb6GAIyncs6Re3Y3anlFrL+FtIY0=
Subject key identifier: 6A:75:B6:B6:8E:37:2D:72:C7:C4:5F:4E:40:C1:58:8F:F0:24:34:B9
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 01A1279E5F6774B1232D22F57ED0CC94DA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 1489
Signing time: Sat 10 Oct 2026 21:00:52 +0000
Manifest this update: Sat 10 Oct 2026 21:00:52 +0000
Manifest next update: Sun 11 Oct 2026 21:00:52 +0000
Files and hashes: 1: 0nQ5HrpSfmi0t1lgfzKwG4GEEHA.roa (hash: rFJp94wINDC3ecjBHnwWODJLBayKpyALDaZAihUD5C4=)
2: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
3: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
4: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: +yk2ztORfoTeqqSed/dCsuYc+O16NXyVxQnRwU8Y13E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:5f:67:74:b1:23:2d:22:f5:7e:d0:cc:94:da:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Oct 10 21:00:52 2026 GMT
Not After : Oct 11 21:00:52 2026 GMT
Subject: CN=6a75b6b68e372d72c7c45f4e40c1588ff02434b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4a:01:09:b4:a0:16:c8:d1:07:d6:28:44:27:
34:bf:86:59:6f:1a:f1:56:1b:3d:e5:82:2e:6c:10:
8e:6e:d7:f0:fa:7e:c8:1b:6f:bb:af:0e:17:b1:74:
16:54:4e:f4:d7:d3:38:8e:b2:00:c7:57:96:4f:b5:
28:df:63:dd:c2:92:a0:c6:47:85:c1:4c:44:f9:3d:
29:c2:5c:bb:05:54:40:4b:9f:ec:80:a9:33:e4:f6:
99:fc:16:82:6d:f3:05:3e:98:c6:63:08:8c:d0:31:
61:48:9b:f0:0b:d3:cb:9f:0e:f8:85:4c:0b:d1:5a:
ae:d8:06:d7:de:24:e9:11:4d:7f:ff:f3:fb:f3:c7:
26:98:f6:90:a0:12:5d:a8:8e:46:22:09:0d:bb:8d:
b6:97:90:28:17:40:d7:aa:1e:5c:7f:5b:88:25:6b:
1e:99:4e:47:3b:65:26:a1:1d:03:01:05:d5:e5:8f:
98:67:e8:73:c2:f6:bc:d5:96:2a:5c:ef:20:e7:3f:
1b:53:67:33:81:63:7f:02:09:42:db:eb:e8:3e:c9:
7a:f7:2c:fa:4c:1a:ff:a2:93:1f:e7:5d:6a:28:eb:
1b:0b:30:e5:6c:b8:60:fc:fe:d1:8a:ea:92:29:55:
ad:22:cc:6b:73:63:25:0d:d3:71:43:02:21:5d:3d:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:75:B6:B6:8E:37:2D:72:C7:C4:5F:4E:40:C1:58:8F:F0:24:34:B9
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e2:1e:b1:a8:07:6f:c8:48:c7:57:f3:48:f9:14:3f:ca:bb:
f1:92:e4:d3:fc:b8:45:12:16:84:6a:7e:6d:8f:9e:91:e0:70:
5f:95:ca:24:31:b4:15:ba:ef:5a:08:45:99:52:8d:67:dc:55:
b1:31:f9:7a:30:25:88:3d:af:f1:14:50:8f:ec:98:9b:ae:8b:
1e:b0:d5:0a:89:0e:99:36:73:48:3f:6b:f1:6d:20:60:72:4d:
e8:20:5d:35:07:5f:52:b0:49:c5:59:40:85:76:3a:03:58:0f:
be:d3:f3:d2:68:33:69:a5:6e:95:cf:06:ae:d3:77:74:a8:34:
70:a4:07:c1:44:b1:c6:15:d4:24:a6:4e:29:e7:95:28:0b:8c:
97:76:d0:03:45:0c:92:41:89:13:54:bc:46:53:4f:43:c1:7f:
e0:d1:73:91:20:bf:ed:16:e5:38:cc:be:d8:96:a5:a0:f1:fb:
e6:4c:5d:4b:a1:86:8a:f6:61:69:33:e2:ad:f6:0e:02:22:01:
91:07:6e:fc:68:57:0c:38:c4:58:7a:6f:55:a9:31:d8:a4:dc:
ec:83:20:32:39:df:c9:8a:f1:49:50:ca:8d:f3:e4:eb:a1:56:
1c:9f:bc:84:6d:b0:db:75:ba:9f:88:96:bf:d8:31:ee:7d:08:
fc:00:e5:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEnnl9ndLEjLSL1ftDMlNobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl
OTVjYWYwHhcNMjYxMDEwMjEwMDUyWhcNMjYxMDExMjEwMDUyWjAzMTEwLwYDVQQD
Eyg2YTc1YjZiNjhlMzcyZDcyYzdjNDVmNGU0MGMxNTg4ZmYwMjQzNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EoBCbSgFsjRB9YoRCc0v4ZZbxrx
Vhs95YIubBCObtfw+n7IG2+7rw4XsXQWVE7019M4jrIAx1eWT7Uo32PdwpKgxkeF
wUxE+T0pwly7BVRAS5/sgKkz5PaZ/BaCbfMFPpjGYwiM0DFhSJvwC9PLnw74hUwL
0Vqu2AbX3iTpEU1///P788cmmPaQoBJdqI5GIgkNu422l5AoF0DXqh5cf1uIJWse
mU5HO2UmoR0DAQXV5Y+YZ+hzwva81ZYqXO8g5z8bU2czgWN/AglC2+voPsl69yz6
TBr/opMf511qKOsbCzDlbLhg/P7RiuqSKVWtIsxrc2MlDdNxQwIhXT2WsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGp1traONy1yx8RfTkDBWI/wJDS5MB8GA1UdIwQY
MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt
MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3
LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOIesagH
b8hIx1fzSPkUP8q78ZLk0/y4RRIWhGp+bY+ekeBwX5XKJDG0FbrvWghFmVKNZ9xV
sTH5ejAliD2v8RRQj+yYm66LHrDVCokOmTZzSD9r8W0gYHJN6CBdNQdfUrBJxVlA
hXY6A1gPvtPz0mgzaaVulc8GrtN3dKg0cKQHwUSxxhXUJKZOKeeVKAuMl3bQA0UM
kkGJE1S8RlNPQ8F/4NFzkSC/7RblOMy+2JaloPH75kxdS6GGivZhaTPirfYOAiIB
kQdu/GhXDDjEWHpvVakx2KTc7IMgMjnfyYrxSVDKjfPk66FWHJ+8hG2w23W6n4iW
v9gx7n0I/ADlwA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:55 2026 by rpki-client