Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: b7B5+Ub0i0OIVsqoKTcrIhAE3xdh0/KhQ4lotYhLJxg=
Subject key identifier: DE:03:8E:03:85:19:C2:C3:65:01:3B:16:2A:0F:B9:9F:68:A2:82:42
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 01A1464E0F407F315A2E8BFC1992D82B5C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1AAA
Signing time: Fri 16 Oct 2026 20:01:23 +0000
Manifest this update: Fri 16 Oct 2026 20:01:23 +0000
Manifest next update: Sat 17 Oct 2026 20:01:23 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: VmeD/GNhN/eUmfTaQIfF43XtOg6N+IXfyRF04dK6O0w=)
2: HQvqu0FyNTgLxOCtIkfc5EdcDj0.roa (hash: 130FHhBXUMCrMDc50ZJnqMVOCj69/WSdEuG7otm6jac=)
3: JDb5A2keqNNHHn7egHMcEGsac60.roa (hash: ArdL/hAkNPkcLPWJJnXPFWGPHSAOP/P5AYcbgtu+Yug=)
4: MbiryQPvDhyE4fWE2RUNJytt6AY.roa (hash: OrXM+BXuK0a9EBtLr+v3zOe94bGU/tMcOd4waL7ij94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4e:0f:40:7f:31:5a:2e:8b:fc:19:92:d8:2b:5c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Oct 16 20:01:23 2026 GMT
Not After : Oct 17 20:01:23 2026 GMT
Subject: CN=de038e038519c2c365013b162a0fb99f68a28242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:97:42:e9:70:c5:7b:b3:5c:26:ea:0d:36:
3d:db:7a:33:c0:46:79:63:18:15:75:ee:02:f8:e2:
b2:36:6c:af:57:06:1d:e7:08:34:69:f8:c8:b3:39:
74:78:73:f2:c1:ec:e1:12:ea:78:6b:02:a4:95:6a:
64:6c:d1:cd:5a:7d:1e:07:ee:14:6a:8a:4c:fc:30:
8c:45:d8:11:c4:77:ad:bf:c1:e0:4f:36:d6:2c:3c:
d7:cd:2e:e0:8f:a5:69:77:e8:3d:66:1e:32:bb:7e:
d1:89:9a:f5:ae:d0:a6:1b:8b:92:71:23:3f:1e:a2:
82:69:88:f0:d1:d8:58:94:96:21:b7:70:d5:54:2d:
e0:66:bf:a7:0b:93:5a:1b:91:63:8f:3f:aa:19:09:
50:04:0c:39:3d:aa:06:89:ec:5f:b5:0a:42:94:1c:
a6:21:eb:4b:18:8e:14:37:1a:57:75:a5:d5:a5:85:
69:dd:b7:70:1d:10:de:c4:2f:01:74:e8:4f:31:b9:
bb:05:49:56:3c:9c:54:07:e6:73:f8:c0:aa:f8:20:
20:cb:91:98:13:a4:60:25:d0:82:25:f4:44:83:3e:
98:12:93:ed:2c:3d:ed:49:96:a8:0a:26:fd:bc:cd:
86:a4:80:cb:1c:72:bb:15:21:96:e7:78:98:a6:40:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:03:8E:03:85:19:C2:C3:65:01:3B:16:2A:0F:B9:9F:68:A2:82:42
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:86:98:45:21:e8:85:32:7d:ac:cb:65:7f:f9:63:c2:8f:05:
c2:e1:12:57:68:fc:3a:ff:2d:f7:39:06:76:d6:ad:71:6d:22:
86:3b:b1:e2:4b:3c:bf:8d:39:53:7f:2b:4e:3d:f7:55:8f:ac:
63:a6:01:2a:98:cf:ab:eb:f6:9c:c8:02:ac:4d:70:90:d7:8e:
ea:9c:43:60:01:b2:92:80:2f:ec:55:0d:f2:c4:9e:01:aa:fb:
c5:89:09:28:ec:58:2e:36:31:fa:59:45:d1:4c:36:a7:e2:9d:
6d:53:f4:52:61:a5:aa:20:c8:c8:09:1d:bf:54:a8:8b:f0:88:
7e:a2:19:4a:b3:4c:7d:12:86:8c:9a:07:5d:3a:d7:97:ca:94:
2d:8e:fb:da:cf:e7:f8:49:63:a5:81:6e:c3:4d:60:5f:36:14:
f9:9a:53:57:60:a6:d1:99:85:0a:46:60:94:57:fb:19:85:94:
04:69:fd:eb:23:1c:af:3e:6e:e8:91:cc:3e:fa:04:b9:33:ed:
1b:cd:d2:29:ed:ff:fc:7f:5e:b6:39:2b:45:94:4b:6c:53:20:
53:c5:77:c0:96:5d:89:88:2f:06:6c:be:04:70:92:6c:a2:ce:
26:75:c5:56:d3:45:86:83:ec:a8:d7:ff:b8:2b:40:a1:06:1b:
98:90:9e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFGTg9AfzFaLov8GZLYK1wwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDQzNTc4NGRhOGMyMThlMGZmMTA3Y2RjZmUyNGNhNDU2
OWM5NDkwHhcNMjYxMDE2MjAwMTIzWhcNMjYxMDE3MjAwMTIzWjAzMTEwLwYDVQQD
EyhkZTAzOGUwMzg1MTljMmMzNjUwMTNiMTYyYTBmYjk5ZjY4YTI4MjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowWXQulwxXuzXCbqDTY923ozwEZ5
YxgVde4C+OKyNmyvVwYd5wg0afjIszl0eHPywezhEup4awKklWpkbNHNWn0eB+4U
aopM/DCMRdgRxHetv8HgTzbWLDzXzS7gj6Vpd+g9Zh4yu37RiZr1rtCmG4uScSM/
HqKCaYjw0dhYlJYht3DVVC3gZr+nC5NaG5Fjjz+qGQlQBAw5PaoGiexftQpClBym
IetLGI4UNxpXdaXVpYVp3bdwHRDexC8BdOhPMbm7BUlWPJxUB+Zz+MCq+CAgy5GY
E6RgJdCCJfREgz6YEpPtLD3tSZaoCib9vM2GpIDLHHK7FSGW53iYpkAv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4DjgOFGcLDZQE7FioPuZ9oooJCMB8GA1UdIwQY
MBaAFODUNXhNqMIY4P8QfNz+JMpFaclJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzct
ZWQ0MmQzYTYyNWE0LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMDVlYmEtOWQ4NS00ODliLWFlYzctZWQ0MmQzYTYyNWE0
LzEvNE5RMWVFMm93aGpnX3hCODNQNGt5a1ZweVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIaYRSHo
hTJ9rMtlf/ljwo8FwuESV2j8Ov8t9zkGdtatcW0ihjux4ks8v405U38rTj33VY+s
Y6YBKpjPq+v2nMgCrE1wkNeO6pxDYAGykoAv7FUN8sSeAar7xYkJKOxYLjYx+llF
0Uw2p+KdbVP0UmGlqiDIyAkdv1Soi/CIfqIZSrNMfRKGjJoHXTrXl8qULY772s/n
+EljpYFuw01gXzYU+ZpTV2Cm0ZmFCkZglFf7GYWUBGn96yMcrz5u6JHMPvoEuTPt
G83SKe3//H9etjkrRZRLbFMgU8V3wJZdiYgvBmy+BHCSbKLOJnXFVtNFhoPsqNf/
uCtAoQYbmJCebw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:36 2026 by rpki-client