Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: RffM0tjc6u+XZVTHae8plU4VF54O6e8Ks8Zy+xgFc1o=
Subject key identifier: F7:11:6A:14:2D:E0:0E:B4:8E:A9:C7:F1:61:84:8F:B7:63:78:18:02
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 01A14ACF721EA228E6D9689049B431EA7264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 1AAB
Signing time: Sat 17 Oct 2026 17:01:11 +0000
Manifest this update: Sat 17 Oct 2026 17:01:11 +0000
Manifest next update: Sun 18 Oct 2026 17:01:11 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: +1KxSQ8BB/K5sd0HqE3nwXKUp3GC7UrTLIe0V3kXZEE=)
2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:cf:72:1e:a2:28:e6:d9:68:90:49:b4:31:ea:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Oct 17 17:01:11 2026 GMT
Not After : Oct 18 17:01:11 2026 GMT
Subject: CN=f7116a142de00eb48ea9c7f161848fb763781802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:1f:af:ee:44:05:19:96:85:2e:6b:dd:c5:
f5:fe:38:0e:0c:31:a3:02:5a:cb:06:07:ef:f3:bb:
c4:c1:91:11:f3:c7:ce:57:05:31:d9:8a:fd:71:b8:
89:2a:7a:a3:be:74:f0:64:e1:3e:27:c6:f4:d9:8e:
ae:a9:d4:38:a1:70:f6:44:58:d4:ab:ed:c6:16:3d:
2f:53:48:d0:fa:ef:84:3f:51:c1:5e:40:73:2b:e3:
0b:e9:0c:63:86:6b:92:3e:ac:06:a2:23:90:6a:69:
af:51:7b:6d:a9:21:28:1a:9d:a3:48:c6:93:30:5f:
50:ca:1a:ee:66:a6:cc:0c:f1:9f:67:c1:fd:64:05:
f0:06:cd:c8:25:83:d0:3f:42:7a:ae:91:2e:7d:78:
37:f6:8a:fe:2c:18:64:83:8c:ab:a8:46:25:42:89:
82:a3:93:78:4c:e6:0e:8d:f9:a9:d0:38:77:d2:7c:
24:61:d7:ca:eb:c0:28:dc:69:a7:6c:e7:3d:0f:84:
43:1d:8a:e7:2a:2a:4d:5b:da:16:fc:61:cb:59:1b:
eb:65:5a:a0:a1:74:a7:94:e9:a8:69:4b:65:cd:b6:
bc:4b:37:6e:e0:13:8d:81:ef:25:3f:a2:f5:5a:db:
e5:a6:b7:14:d6:f9:18:d3:49:dc:21:1d:37:3e:8b:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:11:6A:14:2D:E0:0E:B4:8E:A9:C7:F1:61:84:8F:B7:63:78:18:02
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:16:ea:e5:b2:7e:dd:c4:a2:18:91:cc:7d:2f:3e:5e:38:7d:
f3:cf:c1:4d:08:88:20:71:ad:c4:52:2b:0c:4f:15:0f:9c:2e:
f2:86:17:1d:b9:48:e6:bf:93:db:9e:b1:cb:55:db:12:36:b3:
b5:4f:02:0c:a8:ca:1b:4a:fa:f4:3b:e2:44:ce:d1:fb:62:25:
5e:dd:4c:f6:a3:2d:a5:0b:19:e0:78:4b:2a:8b:80:b8:9f:8a:
98:de:de:c8:19:d4:89:78:39:65:4d:18:1a:2e:1f:b7:23:b2:
03:70:f4:09:02:f4:66:89:ce:53:6c:5b:17:93:9e:17:a7:31:
66:00:72:1d:b5:aa:3d:71:7c:27:d2:a9:b4:5c:88:34:8e:55:
c2:6e:8c:c4:17:3f:63:de:01:8e:89:93:ae:8d:54:f0:40:d4:
ac:39:dc:d6:4e:28:ba:cc:93:03:3c:41:11:cf:c0:48:f5:c3:
eb:52:fe:d5:7c:72:7e:cc:44:91:ec:5e:6e:4f:77:51:cb:be:
9f:d3:70:9a:82:f2:bd:82:35:e8:ea:ae:ab:62:46:20:25:d1:
c8:fb:80:48:ac:c5:b4:5f:24:4a:9e:16:88:48:62:f0:a5:77:
a1:2d:27:0e:9b:62:c2:da:fb:b8:ea:06:9a:50:6b:6f:e2:33:
79:69:9e:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFKz3Ieoijm2WiQSbQx6nJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1
YjBkYTgwHhcNMjYxMDE3MTcwMTExWhcNMjYxMDE4MTcwMTExWjAzMTEwLwYDVQQD
EyhmNzExNmExNDJkZTAwZWI0OGVhOWM3ZjE2MTg0OGZiNzYzNzgxODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJAfr+5EBRmWhS5r3cX1/jgODDGj
AlrLBgfv87vEwZER88fOVwUx2Yr9cbiJKnqjvnTwZOE+J8b02Y6uqdQ4oXD2RFjU
q+3GFj0vU0jQ+u+EP1HBXkBzK+ML6QxjhmuSPqwGoiOQammvUXttqSEoGp2jSMaT
MF9QyhruZqbMDPGfZ8H9ZAXwBs3IJYPQP0J6rpEufXg39or+LBhkg4yrqEYlQomC
o5N4TOYOjfmp0Dh30nwkYdfK68Ao3GmnbOc9D4RDHYrnKipNW9oW/GHLWRvrZVqg
oXSnlOmoaUtlzba8Szdu4BONge8lP6L1WtvlprcU1vkY00ncIR03PovmRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcRahQt4A60jqnH8WGEj7djeBgCMB8GA1UdIwQY
MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut
ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5
LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRbq5bJ+
3cSiGJHMfS8+Xjh988/BTQiIIHGtxFIrDE8VD5wu8oYXHblI5r+T256xy1XbEjaz
tU8CDKjKG0r69DviRM7R+2IlXt1M9qMtpQsZ4HhLKouAuJ+KmN7eyBnUiXg5ZU0Y
Gi4ftyOyA3D0CQL0ZonOU2xbF5OeF6cxZgByHbWqPXF8J9KptFyINI5Vwm6MxBc/
Y94BjomTro1U8EDUrDnc1k4ousyTAzxBEc/ASPXD61L+1XxyfsxEkexebk93Ucu+
n9NwmoLyvYI16Oquq2JGICXRyPuASKzFtF8kSp4WiEhi8KV3oS0nDptiwtr7uOoG
mlBrb+IzeWmeKw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 19:26:45 2026 by rpki-client