Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: hR71mg6rh5iXrjzldA3vWFI/8+x882HNmhxqKDDnm1Y=
Subject key identifier: AF:8E:85:6A:A8:DD:4F:5C:89:07:3E:94:87:73:6B:F0:33:4A:9C:4F
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 01A0009324AD39CE4893681544044529761F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 14:00:38 +0000
Manifest this update: Fri 14 Aug 2026 14:00:38 +0000
Manifest next update: Sat 15 Aug 2026 14:00:38 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: E+/fmz89AzyNYCnHVu2Zn88WURRFEzShJYny7U5OP+Y=)
2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:24:ad:39:ce:48:93:68:15:44:04:45:29:76:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Aug 14 14:00:38 2026 GMT
Not After : Aug 15 14:00:38 2026 GMT
Subject: CN=af8e856aa8dd4f5c89073e9487736bf0334a9c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:46:fe:12:f2:48:7a:62:02:36:cb:eb:12:
d0:9b:fd:60:fc:71:3f:c8:5b:a0:e5:2e:42:b8:30:
50:c8:bc:58:a9:56:32:2e:0a:50:da:6f:07:5c:1a:
13:59:0f:45:e5:3c:95:f8:4b:ef:c6:dc:b1:20:e3:
82:80:16:67:d1:18:a4:f4:b6:9e:6b:b8:48:ec:6b:
12:12:bd:10:17:f0:62:94:26:3e:58:c4:a7:f9:f3:
c9:42:1c:f9:17:78:04:f6:2f:ef:3d:28:8c:0b:9c:
86:f9:f6:40:e3:27:85:ab:ce:43:07:f4:16:30:a8:
37:c3:f5:d6:ff:b8:1c:fe:b7:33:e2:3f:28:bc:53:
1f:ba:c8:17:2c:92:0d:f8:92:f8:78:d5:fc:99:e1:
92:8d:80:86:48:50:04:5a:91:03:1c:45:7f:3b:3a:
35:de:e4:bd:98:f5:17:10:de:0c:6f:df:16:15:9d:
64:8e:e8:a2:bc:0f:fb:a5:ff:b8:bc:35:de:da:57:
25:5c:db:61:85:20:36:16:76:1b:4f:ce:27:ba:91:
b2:e9:aa:7b:e6:8b:c6:ed:ef:34:0e:f6:5f:55:06:
cc:8c:d7:50:07:55:8a:33:75:28:d5:2c:4c:f1:e7:
5d:5a:be:3a:e6:34:6b:fa:0e:23:54:b4:b4:c8:74:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:85:6A:A8:DD:4F:5C:89:07:3E:94:87:73:6B:F0:33:4A:9C:4F
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:78:ee:a3:05:7b:e0:19:76:31:90:fe:a4:66:02:39:e6:1d:
d6:4c:92:c6:75:9e:10:26:2e:ec:8e:bc:7e:32:48:7a:88:81:
28:58:a4:b5:ca:15:42:71:94:f8:ee:f1:99:11:57:3c:7a:bf:
1c:b4:ea:50:9e:65:d9:ba:df:5e:1d:b5:36:d9:d8:66:e3:6b:
b5:95:dd:1c:c7:4e:4d:18:2d:2e:67:61:a6:8f:be:20:52:7f:
ab:e8:6c:11:e2:cd:a1:dd:45:07:af:61:71:b3:82:a0:e3:ca:
1a:74:56:d8:5c:49:5d:22:91:03:b2:42:cb:b2:d2:80:e2:72:
6f:15:cd:07:b1:a9:38:0e:71:12:7d:5b:ed:b9:c7:c9:df:63:
7b:3b:0e:ca:d0:53:af:c5:e4:4b:1a:fa:cb:64:a6:65:c9:dc:
48:29:10:4f:19:8d:ad:f7:57:66:33:5b:19:59:2b:71:94:68:
0e:97:2f:a8:e6:c3:8c:00:46:38:98:79:54:bd:42:43:12:9a:
2d:7d:09:5d:d9:e8:59:55:60:aa:cf:49:da:07:38:76:43:73:
95:78:ee:97:15:34:b4:bf:87:02:51:bd:fb:6d:f9:bc:d2:12:
ce:ac:85:4a:ab:c3:8a:13:ba:d4:04:35:00:48:0a:fc:e4:cd:
e6:87:ef:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAkyStOc5Ik2gVRARFKXYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1
YjBkYTgwHhcNMjYwODE0MTQwMDM4WhcNMjYwODE1MTQwMDM4WjAzMTEwLwYDVQQD
EyhhZjhlODU2YWE4ZGQ0ZjVjODkwNzNlOTQ4NzczNmJmMDMzNGE5YzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyNG/hLySHpiAjbL6xLQm/1g/HE/
yFug5S5CuDBQyLxYqVYyLgpQ2m8HXBoTWQ9F5TyV+EvvxtyxIOOCgBZn0Rik9Lae
a7hI7GsSEr0QF/BilCY+WMSn+fPJQhz5F3gE9i/vPSiMC5yG+fZA4yeFq85DB/QW
MKg3w/XW/7gc/rcz4j8ovFMfusgXLJIN+JL4eNX8meGSjYCGSFAEWpEDHEV/Ozo1
3uS9mPUXEN4Mb98WFZ1kjuiivA/7pf+4vDXe2lclXNthhSA2FnYbT84nupGy6ap7
5ovG7e80DvZfVQbMjNdQB1WKM3Uo1SxM8eddWr465jRr+g4jVLS0yHRySwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+OhWqo3U9ciQc+lIdza/AzSpxPMB8GA1UdIwQY
MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut
ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5
LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnjuowV7
4Bl2MZD+pGYCOeYd1kySxnWeECYu7I68fjJIeoiBKFiktcoVQnGU+O7xmRFXPHq/
HLTqUJ5l2brfXh21NtnYZuNrtZXdHMdOTRgtLmdhpo++IFJ/q+hsEeLNod1FB69h
cbOCoOPKGnRW2FxJXSKRA7JCy7LSgOJybxXNB7GpOA5xEn1b7bnHyd9jezsOytBT
r8XkSxr6y2SmZcncSCkQTxmNrfdXZjNbGVkrcZRoDpcvqObDjABGOJh5VL1CQxKa
LX0JXdnoWVVgqs9J2gc4dkNzlXjulxU0tL+HAlG9+235vNISzqyFSqvDihO61AQ1
AEgK/OTN5ofvVA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:04 2026 by rpki-client