Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
File: R4urL0xbYpNYFZNPSoH1YNLXMsg.mft (raw, json)
Hash identifier: tXKbIKKnRdULQCW82JWGBHN4iUjkaYiXWgJPtHsxNNM=
Subject key identifier: FA:D1:6C:0B:B5:D5:EB:5C:18:B1:9D:7C:1D:E7:AC:BF:17:4E:F7:36
Authority key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Certificate issuer: /CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Certificate serial: 01A1569CC8298DB0CF5A81EDA7CF540619D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
Manifest number: 0180
Signing time: Tue 20 Oct 2026 00:01:17 +0000
Manifest this update: Tue 20 Oct 2026 00:01:17 +0000
Manifest next update: Wed 21 Oct 2026 00:01:17 +0000
Files and hashes: 1: OP4GnLmThCBFy87U3IPXWaJdkGA.roa (hash: CzHuhJNSL0fmMbMPkWZNZ3g6rBvAOQunuRNzTNwmsOk=)
2: R4urL0xbYpNYFZNPSoH1YNLXMsg.crl (hash: uQwva+Oz5pJ/fN9v/dPWRy8h3tuZP/iGNIIx3fv7tFE=)
3: w9hMpn22nS31hORs4FbfAZ4nCN8.roa (hash: R5QWnTCvV96e97UtI23G1RgAIOStBivXSgOB+MvPMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:9c:c8:29:8d:b0:cf:5a:81:ed:a7:cf:54:06:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Validity
Not Before: Oct 20 00:01:17 2026 GMT
Not After : Oct 21 00:01:17 2026 GMT
Subject: CN=fad16c0bb5d5eb5c18b19d7c1de7acbf174ef736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:d1:6b:5e:9e:43:18:e0:50:09:b0:16:1f:
eb:87:5e:22:57:95:e9:79:4b:10:f2:83:91:45:c3:
91:bb:77:ed:b0:5f:13:fd:64:03:b3:e4:7b:ab:b0:
42:44:de:b5:10:97:84:1a:d9:35:8b:96:78:83:80:
41:3c:6d:24:ff:8c:8d:a2:50:ef:ed:c1:e2:da:ef:
45:a1:64:1f:b1:72:73:0c:1a:f0:f3:7d:54:2e:4d:
d5:0c:67:28:be:d7:75:5f:41:bc:e2:ff:f8:8f:57:
60:69:29:d0:ad:75:07:6e:18:34:fe:67:b3:04:f3:
ca:cf:66:04:31:9c:33:66:7e:34:c0:cd:ea:39:bb:
6e:d1:6a:87:7f:b5:30:51:3d:c4:12:62:81:ca:18:
b8:eb:a5:5c:25:5c:f8:34:80:e8:00:15:64:42:51:
b5:21:fb:50:89:bc:57:df:ea:ee:d0:8c:a6:e4:3c:
36:1a:6d:aa:25:12:67:b1:40:68:c7:48:64:ab:20:
c3:e9:10:15:e6:8e:94:1d:82:96:1f:cb:e6:94:18:
c2:5e:d7:d5:b7:f9:37:d0:84:31:08:35:89:07:88:
52:4c:95:88:d1:72:e0:c6:1c:57:ac:0f:13:be:51:
21:13:04:56:bd:68:fe:8e:2a:f7:6c:76:f2:7a:3e:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D1:6C:0B:B5:D5:EB:5C:18:B1:9D:7C:1D:E7:AC:BF:17:4E:F7:36
X509v3 Authority Key Identifier:
keyid:47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:57:35:3d:1b:cd:cf:3d:77:32:b0:77:0f:25:d0:a4:06:76:
2a:e8:7d:27:c7:50:e8:65:dd:9f:39:fb:fa:97:c6:35:d7:88:
ec:a6:ed:6d:d7:57:39:d3:9b:8f:5c:68:a8:3f:25:c3:9d:03:
0c:60:39:7b:a2:9e:e6:2b:b1:29:ea:d7:44:1b:e4:80:96:f0:
59:19:4d:21:50:22:23:5f:26:92:32:b5:1c:36:75:fb:02:2d:
f0:e4:b7:9a:fb:08:26:d4:3d:96:bc:72:eb:82:b3:aa:60:26:
4a:25:03:2a:fa:91:97:44:ca:2d:b3:d7:b5:1b:2b:3d:c8:87:
ef:3c:4a:d7:31:58:40:f0:f6:f5:76:7f:c3:fb:68:1d:2a:d6:
25:a7:41:cc:48:e8:17:83:02:e6:d3:b3:a5:9c:44:8c:b6:fd:
30:34:8b:69:3d:c3:dc:a0:70:08:fc:02:26:7b:0f:3e:47:41:
68:0d:e6:45:5a:3e:e9:53:cc:5f:06:41:a0:a3:2d:ee:f7:7c:
1c:a6:ff:31:31:5f:42:fb:9d:88:23:6f:e2:8b:1b:d2:9b:d8:
21:7d:8e:6f:e4:29:50:1d:64:f7:76:ed:5f:9c:74:40:47:11:
5f:46:3e:4a:e7:04:f3:e0:35:f1:13:d4:ac:48:ca:70:6a:ce:
70:89:da:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:58:29 2026 by rpki-client