Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File: V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier: Snq2hPUHOA3uAxSghzW1P2SB/F3Bt03XLwI1mnGlE9I=
Subject key identifier: 46:BD:75:EC:59:76:3A:C0:0F:D9:52:98:D0:3C:D4:2E:10:48:68:A7
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer: /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial: 01A03E5F9B747067AB85796ABC426199ABC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number: 1A2A
Signing time: Wed 26 Aug 2026 14:00:48 +0000
Manifest this update: Wed 26 Aug 2026 14:00:48 +0000
Manifest next update: Thu 27 Aug 2026 14:00:48 +0000
Files and hashes: 1: Qm8uhcNnRTaqoYGKrdrNLc_aZD8.roa (hash: hvZBXvz5QZfJbWaG3RcO8weSJZHMPwQu8jySYopR30I=)
2: RataKp-3hJPq9aEAGgDmde3zb30.asa (hash: JW64/lKsxtyL7zoTPdssRrCZ9GkLw7W77oAu2rYglVk=)
3: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: KBSPOV5KA4wc6elpVUGL1uCOf7VuhjhY29r5WslhNRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:9b:74:70:67:ab:85:79:6a:bc:42:61:99:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Validity
Not Before: Aug 26 14:00:48 2026 GMT
Not After : Aug 27 14:00:48 2026 GMT
Subject: CN=46bd75ec59763ac00fd95298d03cd42e104868a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:fe:fb:77:ee:7f:dd:1c:1f:de:a0:8f:55:
f0:f4:03:6f:71:dc:14:4c:ad:36:9e:ad:19:0e:59:
32:00:7e:d9:a6:73:6c:82:04:bb:21:8b:f7:90:0a:
74:3e:9b:ae:8c:b6:a6:99:16:5d:95:e3:fc:69:4f:
3d:14:75:44:80:76:3f:3b:07:1e:a0:2e:70:5b:78:
fb:39:b9:c6:f8:c2:19:36:5d:07:b9:93:f7:19:71:
b0:3f:41:a7:fe:9b:36:1c:c6:f6:02:06:64:1b:5e:
2f:8a:d8:f2:ec:20:9f:33:c1:9e:75:19:5e:db:d8:
01:53:f8:3d:e3:43:d9:68:86:46:db:f2:e8:1a:51:
33:59:d4:38:19:b6:d7:55:07:d3:31:0c:96:7e:84:
5e:a1:7e:66:14:ff:ee:25:24:2d:0a:97:3b:34:8d:
c1:d6:2f:b9:f0:7f:10:65:a4:94:df:4e:8a:91:c2:
27:19:7c:f2:4d:32:55:74:ed:34:0c:bb:0c:1a:0d:
24:13:ee:91:36:d7:70:c1:d8:50:8d:51:75:50:cd:
04:03:6e:aa:96:1d:fa:22:6e:90:db:1c:5d:2a:53:
73:d0:a1:1b:22:b0:76:04:fe:86:ce:97:8c:7e:03:
43:7c:70:0a:1c:c0:92:4f:9c:fa:73:37:c4:05:1e:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:75:EC:59:76:3A:C0:0F:D9:52:98:D0:3C:D4:2E:10:48:68:A7
X509v3 Authority Key Identifier:
keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d1:5b:a7:cb:d7:28:29:6e:54:4f:a1:5c:da:36:51:b4:75:
0b:9a:71:c3:05:58:43:9f:bd:22:c4:a2:85:73:1b:7c:a0:c9:
a4:7e:cf:60:8e:0a:c9:62:ca:1b:1b:10:07:08:eb:e1:13:67:
c2:3e:34:4d:67:ff:23:82:a4:15:3c:7b:bf:36:7d:02:b1:6f:
0b:30:b3:f6:f4:10:0a:26:a6:36:17:d0:e8:a6:0a:7d:d1:2a:
5a:ad:ce:70:7e:35:9c:a2:aa:7a:c3:f3:60:3f:98:a3:21:96:
35:fc:dd:75:28:30:98:d3:ff:21:a7:97:48:8c:b3:b6:35:be:
e2:35:eb:06:a7:85:a2:a3:ed:52:5f:5d:f8:0f:97:40:1d:05:
0f:26:99:0d:56:b3:ee:64:77:08:49:95:c1:87:3d:05:e8:c9:
3a:06:c8:e4:ea:e1:d5:96:49:7f:67:b8:a7:2b:a8:f9:56:7d:
ca:8b:4c:b3:86:4f:c6:67:fa:6e:ff:1c:87:5d:35:4b:42:47:
b0:f0:50:3f:cb:26:8f:13:0a:2d:57:e5:fd:6c:84:d7:ce:20:
fa:fb:2a:0d:4f:b6:dc:42:6a:48:42:e5:ab:b0:e5:c4:a7:c4:
cc:d1:1e:e5:fd:55:e5:ed:36:27:ea:4b:f1:5c:15:24:da:50:
b2:21:6d:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+X5t0cGerhXlqvEJhmavJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGUyNWExNmU1ZDNhYTExMGFjNWU4MzM1Zjg4ZjYzZTU0
YjQyZjEwHhcNMjYwODI2MTQwMDQ4WhcNMjYwODI3MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg0NmJkNzVlYzU5NzYzYWMwMGZkOTUyOThkMDNjZDQyZTEwNDg2OGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ef++3fuf90cH96gj1Xw9ANvcdwU
TK02nq0ZDlkyAH7ZpnNsggS7IYv3kAp0PpuujLammRZdleP8aU89FHVEgHY/Owce
oC5wW3j7ObnG+MIZNl0HuZP3GXGwP0Gn/ps2HMb2AgZkG14vitjy7CCfM8GedRle
29gBU/g940PZaIZG2/LoGlEzWdQ4GbbXVQfTMQyWfoReoX5mFP/uJSQtCpc7NI3B
1i+58H8QZaSU306KkcInGXzyTTJVdO00DLsMGg0kE+6RNtdwwdhQjVF1UM0EA26q
lh36Im6Q2xxdKlNz0KEbIrB2BP6GzpeMfgNDfHAKHMCST5z6czfEBR4l9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa9dexZdjrAD9lSmNA81C4QSGinMB8GA1UdIwQY
MBaAFFdOJaFuXTqhEKxegzX4j2PlS0LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEt
NTcxYWYwNjZjZjFlLzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNDI5MmYtZjEwNC00MTdjLWFjZGEtNTcxYWYwNjZjZjFl
LzEvVjA0bG9XNWRPcUVRckY2RE5maVBZLVZMUXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdFbp8vX
KCluVE+hXNo2UbR1C5pxwwVYQ5+9IsSihXMbfKDJpH7PYI4KyWLKGxsQBwjr4RNn
wj40TWf/I4KkFTx7vzZ9ArFvCzCz9vQQCiamNhfQ6KYKfdEqWq3OcH41nKKqesPz
YD+YoyGWNfzddSgwmNP/IaeXSIyztjW+4jXrBqeFoqPtUl9d+A+XQB0FDyaZDVaz
7mR3CEmVwYc9BejJOgbI5Orh1ZZJf2e4pyuo+VZ9yotMs4ZPxmf6bv8ch101S0JH
sPBQP8smjxMKLVfl/WyE184g+vsqDU+23EJqSELlq7DlxKfEzNEe5f1V5e02J+pL
8VwVJNpQsiFtmw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:26:13 2026 by rpki-client