Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: rAJrEINxv+GiWGlbDgaz6PkOx1F+9zAHPFU9451hX54=
Subject key identifier: 86:D0:86:45:68:F7:B6:F8:DC:70:8D:6A:13:D7:6A:8F:77:74:DC:7D
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 01A17D0564D8BDB7762E98CF44A14F465CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 06F4
Signing time: Tue 27 Oct 2026 11:01:07 +0000
Manifest this update: Tue 27 Oct 2026 11:01:07 +0000
Manifest next update: Wed 28 Oct 2026 11:01:07 +0000
Files and hashes: 1: L5BfioWz08XOKOc7LGuDTFScCDM.roa (hash: oJjcndnAKImb4AebXhMuHLKYhu0NzBboRQfoXDCNW0c=)
2: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
3: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: 7/TA2gfw52vad3tu6mjobP+5b27hV29dvqlpg1Sz3f0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:64:d8:bd:b7:76:2e:98:cf:44:a1:4f:46:5c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Oct 27 11:01:07 2026 GMT
Not After : Oct 28 11:01:07 2026 GMT
Subject: CN=86d0864568f7b6f8dc708d6a13d76a8f7774dc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:df:2c:23:72:33:12:09:cc:fa:ec:62:01:
af:6f:a9:9a:50:70:23:7d:f8:c5:a8:54:0d:df:07:
46:9a:34:ea:54:0b:30:f7:7b:3f:c9:cb:6c:59:4e:
21:6e:2a:f6:0a:d8:b1:ca:46:7c:d4:d2:10:12:56:
f9:50:49:f8:77:48:3f:58:e9:74:43:7a:83:48:71:
54:d1:3e:28:46:df:b8:fc:5a:64:18:9e:eb:bf:96:
74:a4:d3:85:11:8c:7d:5a:04:24:ba:cb:3e:c9:30:
61:2e:31:37:0d:7d:ea:a0:42:bc:f0:6c:27:38:f8:
12:08:50:85:e5:e4:92:ef:0f:d3:9e:34:47:ab:6d:
67:be:0a:4c:fa:95:a0:02:0d:cc:17:16:0f:64:4f:
4a:7a:cf:48:03:63:e8:5f:a4:44:7f:1c:8e:00:59:
06:04:ba:67:37:32:78:45:d7:e7:ee:02:86:d7:ee:
60:74:93:a5:28:c8:53:b3:e1:2e:87:f8:ff:cc:50:
da:a2:35:c6:0f:1c:69:75:dd:67:76:1a:c9:07:a6:
81:a1:a3:eb:cf:0c:e8:9d:55:23:23:c8:98:12:4f:
b4:af:b8:8c:a4:7a:e9:5c:ca:41:80:ae:be:6a:a2:
20:1c:16:07:23:6d:b4:30:da:e4:4c:6b:2d:bf:4c:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:86:45:68:F7:B6:F8:DC:70:8D:6A:13:D7:6A:8F:77:74:DC:7D
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e0:43:d3:a3:d4:cc:aa:c5:30:d8:24:a7:f3:a4:bc:5e:e5:
01:d4:60:6c:fa:62:c3:82:5e:35:4d:8b:1b:78:75:86:6a:e3:
04:e4:f2:b1:dd:c3:cf:02:0f:07:6d:b8:50:a2:a7:4c:47:f3:
d2:65:f1:e1:de:a3:6a:65:9f:b7:fb:62:a6:0b:a6:55:29:33:
d9:b8:22:8a:30:f7:18:02:df:dc:18:72:d2:70:e2:b7:29:a7:
ca:86:36:6d:89:9a:a9:69:c2:6e:91:1b:71:9a:52:5c:6d:8a:
83:c0:a1:f7:de:6f:a8:24:2d:13:d9:72:11:69:7d:e6:fd:1a:
96:07:5f:5f:1c:04:bc:32:db:bd:3d:c2:1a:25:fe:88:2e:c5:
8f:e2:08:0a:53:7f:b9:ac:6a:0f:ff:17:7a:d1:69:ae:f1:e3:
52:0c:98:20:16:61:56:65:5b:30:f9:f0:c6:f7:29:e5:48:cb:
e8:87:9b:7d:38:f5:53:dd:a2:84:6a:26:74:ca:65:db:b3:df:
0e:74:1c:15:c6:2b:d2:33:e6:2a:02:9c:d6:6f:51:ad:2c:6d:
6c:27:b8:51:f1:a3:78:5a:cf:7d:9f:45:67:f7:dd:d0:8d:0c:
fd:5a:29:d9:3f:8c:51:c9:38:2f:55:64:47:cb:9d:58:5c:74:
69:0f:cc:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9BWTYvbd2LpjPRKFPRlzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmODVlOTkwMzU0Mzk3ZTM2YzBjYTkwM2EwYzYyMGM3NzA5
ZWZkY2QwHhcNMjYxMDI3MTEwMTA3WhcNMjYxMDI4MTEwMTA3WjAzMTEwLwYDVQQD
Eyg4NmQwODY0NTY4ZjdiNmY4ZGM3MDhkNmExM2Q3NmE4Zjc3NzRkYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMTfLCNyMxIJzPrsYgGvb6maUHAj
ffjFqFQN3wdGmjTqVAsw93s/yctsWU4hbir2CtixykZ81NIQElb5UEn4d0g/WOl0
Q3qDSHFU0T4oRt+4/FpkGJ7rv5Z0pNOFEYx9WgQkuss+yTBhLjE3DX3qoEK88Gwn
OPgSCFCF5eSS7w/TnjRHq21nvgpM+pWgAg3MFxYPZE9Kes9IA2PoX6REfxyOAFkG
BLpnNzJ4Rdfn7gKG1+5gdJOlKMhTs+Euh/j/zFDaojXGDxxpdd1ndhrJB6aBoaPr
zwzonVUjI8iYEk+0r7iMpHrpXMpBgK6+aqIgHBYHI220MNrkTGstv0xBuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbQhkVo97b43HCNahPXao93dNx9MB8GA1UdIwQY
MBaAFH+F6ZA1Q5fjbAypA6DGIMdwnv3NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEt
OGM5ZDU4MjNiYWQ5LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80YWUxNzUtNTVkMC00ODRkLThkMTEtOGM5ZDU4MjNiYWQ5
LzEvZjRYcGtEVkRsLU5zREtrRG9NWWd4M0NlX2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauBD06PU
zKrFMNgkp/OkvF7lAdRgbPpiw4JeNU2LG3h1hmrjBOTysd3DzwIPB224UKKnTEfz
0mXx4d6jamWft/tipgumVSkz2bgiijD3GALf3Bhy0nDitymnyoY2bYmaqWnCbpEb
cZpSXG2Kg8Ch995vqCQtE9lyEWl95v0algdfXxwEvDLbvT3CGiX+iC7Fj+IIClN/
uaxqD/8XetFprvHjUgyYIBZhVmVbMPnwxvcp5UjL6IebfTj1U92ihGomdMpl27Pf
DnQcFcYr0jPmKgKc1m9RrSxtbCe4UfGjeFrPfZ9FZ/fd0I0M/Vop2T+MUck4L1Vk
R8udWFx0aQ/M3A==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:39:17 2026 by rpki-client