Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: RjF/bIrz2CmgukVFETQ1pIqRAoWabS8eGibmwe9Un9A=
Subject key identifier: 95:50:2B:7C:90:A4:6F:9C:FB:3D:EB:2C:17:A2:24:D7:EA:D8:35:05
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 01A001DCF9B9FC90B672F1476775C7F7525F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 13F0
Signing time: Fri 14 Aug 2026 20:00:54 +0000
Manifest this update: Fri 14 Aug 2026 20:00:54 +0000
Manifest next update: Sat 15 Aug 2026 20:00:54 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: kwUKVtTKVG1XnMUuv/Ml62rv91eiepXHakK9GyXR7Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:f9:b9:fc:90:b6:72:f1:47:67:75:c7:f7:52:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Aug 14 20:00:54 2026 GMT
Not After : Aug 15 20:00:54 2026 GMT
Subject: CN=95502b7c90a46f9cfb3deb2c17a224d7ead83505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:38:8a:23:44:b5:f4:9f:b5:15:e3:e8:c7:
1b:28:e5:86:4d:50:77:f2:10:b2:dc:48:8a:cf:27:
cf:15:ce:7b:72:69:3b:10:19:05:ac:bc:ae:04:a3:
09:bd:c8:e5:73:fb:be:81:99:5f:d6:14:ec:76:c7:
e0:52:e7:e0:dc:27:04:e0:aa:ca:2f:84:71:f8:30:
e6:de:ce:5c:62:99:eb:0d:9a:19:d0:e2:d4:d4:f8:
b9:76:e1:f4:09:ab:9d:d8:03:f3:2a:eb:22:42:1d:
22:7b:b2:76:3c:a6:49:ed:0c:09:6e:3a:3b:95:6a:
a8:42:7a:a1:47:7f:f5:32:b6:53:bb:77:1e:b2:0e:
83:c2:42:e0:13:21:36:7e:8e:1e:41:1c:3e:e4:d4:
c3:7d:39:12:5f:26:01:aa:78:a9:bc:af:22:66:4f:
dd:13:67:88:0f:2d:22:03:08:53:d1:3d:f3:87:44:
6c:dd:4e:76:f2:41:3b:db:00:89:32:8d:7d:db:dd:
84:4f:05:c3:8d:ac:82:e7:f2:e9:95:12:cf:d4:7b:
98:3d:1a:a2:76:62:de:a0:67:31:43:1a:9d:5d:c9:
8a:04:bc:15:ed:ba:dc:d4:eb:25:c7:c7:f2:12:b2:
d7:25:3a:34:05:f5:18:56:4b:79:99:d1:7a:bb:eb:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:2B:7C:90:A4:6F:9C:FB:3D:EB:2C:17:A2:24:D7:EA:D8:35:05
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:08:8b:8e:49:0a:36:36:21:1f:ae:d8:f9:de:33:6a:a4:3a:
f7:49:46:68:b0:e8:68:30:ce:22:16:90:13:c2:ab:92:32:08:
3a:8e:59:71:42:41:aa:1d:6f:c7:96:41:a3:68:54:0d:54:a2:
b2:89:10:80:f8:ad:3a:20:c2:f6:15:b0:25:7b:32:81:8f:fb:
d5:ec:05:a5:0a:21:94:19:7c:4a:5f:83:de:53:56:9e:87:c8:
42:6c:3e:80:72:40:9d:1c:3e:c6:19:8b:38:88:ef:b2:cb:8c:
62:7f:ad:27:07:08:20:4d:05:aa:78:5d:7b:ee:dc:1f:60:57:
14:9c:54:77:5f:8e:f0:bb:93:2e:18:f4:c1:94:ca:8d:ff:50:
98:d8:35:93:35:0a:0c:15:d9:78:6d:44:75:93:22:42:40:cb:
54:8e:39:82:1a:d6:40:61:36:c0:c5:0f:70:81:fe:26:66:d6:
3b:25:bc:09:d0:7c:6a:ba:0b:44:63:02:96:55:b3:27:41:bd:
85:47:ac:2a:04:dd:ae:4c:a5:35:49:0d:5d:cd:56:3e:4a:5b:
a5:4e:a5:3c:0e:c1:0a:ff:ee:e3:ad:a0:36:c3:0f:95:d7:35:
f4:17:24:38:8d:bf:e1:d5:f3:d1:65:41:ed:c4:43:10:e1:f4:
03:a0:53:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3Pm5/JC2cvFHZ3XH91JfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl
OTVjYWYwHhcNMjYwODE0MjAwMDU0WhcNMjYwODE1MjAwMDU0WjAzMTEwLwYDVQQD
Eyg5NTUwMmI3YzkwYTQ2ZjljZmIzZGViMmMxN2EyMjRkN2VhZDgzNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA04iiNEtfSftRXj6McbKOWGTVB3
8hCy3EiKzyfPFc57cmk7EBkFrLyuBKMJvcjlc/u+gZlf1hTsdsfgUufg3CcE4KrK
L4Rx+DDm3s5cYpnrDZoZ0OLU1Pi5duH0Caud2APzKusiQh0ie7J2PKZJ7QwJbjo7
lWqoQnqhR3/1MrZTu3cesg6DwkLgEyE2fo4eQRw+5NTDfTkSXyYBqnipvK8iZk/d
E2eIDy0iAwhT0T3zh0Rs3U528kE72wCJMo19292ETwXDjayC5/LplRLP1HuYPRqi
dmLeoGcxQxqdXcmKBLwV7brc1Oslx8fyErLXJTo0BfUYVkt5mdF6u+vtGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVQK3yQpG+c+z3rLBeiJNfq2DUFMB8GA1UdIwQY
MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt
MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3
LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQiLjkkK
NjYhH67Y+d4zaqQ690lGaLDoaDDOIhaQE8KrkjIIOo5ZcUJBqh1vx5ZBo2hUDVSi
sokQgPitOiDC9hWwJXsygY/71ewFpQohlBl8Sl+D3lNWnofIQmw+gHJAnRw+xhmL
OIjvssuMYn+tJwcIIE0Fqnhde+7cH2BXFJxUd1+O8LuTLhj0wZTKjf9QmNg1kzUK
DBXZeG1EdZMiQkDLVI45ghrWQGE2wMUPcIH+JmbWOyW8CdB8aroLRGMCllWzJ0G9
hUesKgTdrkylNUkNXc1WPkpbpU6lPA7BCv/u462gNsMPldc19BckOI2/4dXz0WVB
7cRDEOH0A6BTpw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:50 2026 by rpki-client