Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: HHHhOZFrkbuBRAhDh0/6gUBAWVVgc7ALSILNWNQHAx8=
Subject key identifier: 8B:6F:61:A0:C8:87:00:E2:83:20:A2:4A:DB:0C:E6:7D:E4:83:B5:D2
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 01A000CA12A16E26F6D2A38EE05AB0CA8D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 1992
Signing time: Fri 14 Aug 2026 15:00:37 +0000
Manifest this update: Fri 14 Aug 2026 15:00:37 +0000
Manifest next update: Sat 15 Aug 2026 15:00:37 +0000
Files and hashes: 1: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (hash: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y=)
2: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: k8KIdXg4GPqgC3y+H6z0NUOffciriB/DDRMnqoHrBiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:12:a1:6e:26:f6:d2:a3:8e:e0:5a:b0:ca:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Aug 14 15:00:37 2026 GMT
Not After : Aug 15 15:00:37 2026 GMT
Subject: CN=8b6f61a0c88700e28320a24adb0ce67de483b5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:a4:c8:90:6e:87:dc:00:cf:28:91:84:83:
f0:82:6d:20:c3:fb:68:6b:df:e1:59:46:da:29:99:
78:8f:03:20:6e:2a:41:c4:90:20:49:71:79:25:59:
8f:e5:fa:ae:e9:da:fd:94:aa:81:63:d9:86:20:c2:
55:34:3f:38:8e:52:ce:ba:ae:f2:e8:45:18:50:3a:
ad:9c:09:4b:28:89:d5:ee:12:55:9c:4e:50:f2:e4:
f3:28:03:c0:5f:c9:82:2d:25:81:35:91:5c:5d:5d:
82:56:d4:c0:4f:8b:f7:6c:2d:6e:00:63:5e:a6:9b:
bf:5b:be:af:0c:26:db:2e:f0:ee:86:83:a3:e5:87:
8f:ce:41:e9:93:26:a4:9c:5d:31:e4:05:2f:d1:7a:
88:74:e4:e6:09:20:aa:79:55:8c:46:66:1d:db:ac:
01:bb:2c:f2:1e:17:45:c5:8c:04:85:ca:2c:e0:a1:
d2:c5:d3:d3:a1:45:c5:20:64:9a:63:f4:8e:5d:f4:
24:b5:b1:6a:fa:36:18:8c:88:b8:69:68:af:3f:72:
0e:12:ff:3c:35:0b:49:06:70:28:2c:41:07:a7:7d:
f8:55:3f:d6:05:22:4e:4c:88:c0:46:91:2a:07:1b:
d1:77:d4:db:f7:1e:67:60:bb:ee:2c:6b:0f:34:b5:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6F:61:A0:C8:87:00:E2:83:20:A2:4A:DB:0C:E6:7D:E4:83:B5:D2
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5f:6b:ec:94:47:db:02:ab:aa:cf:ee:9d:27:19:34:e8:12:
e6:43:02:62:93:94:f8:a0:ee:f7:56:a7:fc:79:8c:19:71:2b:
7b:c7:d5:bc:9b:d9:84:92:c8:4c:78:f8:72:9e:5a:b6:90:72:
9e:63:48:e6:ef:39:3a:4d:d1:2a:f9:6a:7a:48:6b:87:ff:05:
c4:a7:48:42:78:b2:7a:54:0b:aa:da:1c:3e:b4:50:d0:0f:ab:
69:27:50:37:c7:a5:b5:4f:bf:c2:a5:90:93:12:ef:c2:aa:a0:
b6:90:35:28:eb:df:2f:41:d6:0a:9b:79:46:63:6c:ac:2c:c0:
6b:c2:5a:5b:b0:17:54:b0:18:7b:b7:22:dc:e0:fc:fe:84:fd:
8b:a7:41:ed:ed:b6:ce:74:fe:74:58:9f:d5:e3:87:d7:d6:4f:
4c:2d:fb:32:4c:6c:09:e0:ea:32:28:33:3a:a1:f6:69:53:5a:
b0:58:79:94:9b:7f:dd:01:6b:d2:70:ca:57:ae:54:6c:f8:1b:
62:e5:30:5e:40:0c:7e:17:62:96:56:11:a7:e8:c0:8d:70:24:
43:c2:83:52:6d:72:5a:1f:a8:e4:14:8b:7c:b5:f1:37:f2:35:
dc:a0:22:ca:bd:6a:6d:78:64:40:86:1f:d2:28:39:48:1c:47:
fa:ac:b1:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyhKhbib20qOO4Fqwyo0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw
NjMxYjkwHhcNMjYwODE0MTUwMDM3WhcNMjYwODE1MTUwMDM3WjAzMTEwLwYDVQQD
Eyg4YjZmNjFhMGM4ODcwMGUyODMyMGEyNGFkYjBjZTY3ZGU0ODNiNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGakyJBuh9wAzyiRhIPwgm0gw/to
a9/hWUbaKZl4jwMgbipBxJAgSXF5JVmP5fqu6dr9lKqBY9mGIMJVND84jlLOuq7y
6EUYUDqtnAlLKInV7hJVnE5Q8uTzKAPAX8mCLSWBNZFcXV2CVtTAT4v3bC1uAGNe
ppu/W76vDCbbLvDuhoOj5YePzkHpkyaknF0x5AUv0XqIdOTmCSCqeVWMRmYd26wB
uyzyHhdFxYwEhcos4KHSxdPToUXFIGSaY/SOXfQktbFq+jYYjIi4aWivP3IOEv88
NQtJBnAoLEEHp334VT/WBSJOTIjARpEqBxvRd9Tb9x5nYLvuLGsPNLWXmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItvYaDIhwDigyCiStsM5n3kg7XSMB8GA1UdIwQY
MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt
ZjhhZTBkYmM1ZGYyLzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy
LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcV9r7JRH
2wKrqs/unScZNOgS5kMCYpOU+KDu91an/HmMGXEre8fVvJvZhJLITHj4cp5atpBy
nmNI5u85Ok3RKvlqekhrh/8FxKdIQniyelQLqtocPrRQ0A+raSdQN8eltU+/wqWQ
kxLvwqqgtpA1KOvfL0HWCpt5RmNsrCzAa8JaW7AXVLAYe7ci3OD8/oT9i6dB7e22
znT+dFif1eOH19ZPTC37MkxsCeDqMigzOqH2aVNasFh5lJt/3QFr0nDKV65UbPgb
YuUwXkAMfhdillYRp+jAjXAkQ8KDUm1yWh+o5BSLfLXxN/I13KAiyr1qbXhkQIYf
0ig5SBxH+qyxhg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:05 2026 by rpki-client