Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
File: R4urL0xbYpNYFZNPSoH1YNLXMsg.mft (raw, json)
Hash identifier: ui2XlLAnQHAihudIypoG46+m483NWS8oVho876sDP58=
Subject key identifier: 96:4B:E4:C6:41:59:46:D7:9D:F7:AC:2D:18:74:BA:53:4E:52:23:08
Authority key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Certificate issuer: /CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Certificate serial: 01A164213C48BBAA2AD2DFB5C2D927F9132C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
Manifest number: 0187
Signing time: Thu 22 Oct 2026 15:01:01 +0000
Manifest this update: Thu 22 Oct 2026 15:01:01 +0000
Manifest next update: Fri 23 Oct 2026 15:01:01 +0000
Files and hashes: 1: OP4GnLmThCBFy87U3IPXWaJdkGA.roa (hash: CzHuhJNSL0fmMbMPkWZNZ3g6rBvAOQunuRNzTNwmsOk=)
2: R4urL0xbYpNYFZNPSoH1YNLXMsg.crl (hash: hF87VMFFcMSIuRwp5LF5PjpFeOHwhfahuF2er9mrw+Q=)
3: w9hMpn22nS31hORs4FbfAZ4nCN8.roa (hash: R5QWnTCvV96e97UtI23G1RgAIOStBivXSgOB+MvPMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:21:3c:48:bb:aa:2a:d2:df:b5:c2:d9:27:f9:13:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Validity
Not Before: Oct 22 15:01:01 2026 GMT
Not After : Oct 23 15:01:01 2026 GMT
Subject: CN=964be4c6415946d79df7ac2d1874ba534e522308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:39:40:04:e2:d3:5a:ac:a6:f2:e6:25:af:
c3:a9:6e:e2:97:af:ef:cd:ef:88:68:2d:e3:04:40:
f9:75:c5:72:80:52:fc:7a:d0:c9:02:ca:b0:cd:63:
e8:b2:b2:8c:ff:ef:2f:be:b6:62:d2:4d:fc:35:19:
66:0c:61:e9:e0:26:3c:31:b8:7b:56:19:7f:58:5a:
fc:ef:84:5b:20:de:e2:29:54:5a:60:02:8d:22:23:
b0:e1:07:99:d7:51:92:90:ba:b4:30:47:ec:23:6f:
98:58:29:ac:09:89:20:c5:40:2b:f5:c3:5b:28:be:
7d:6b:b4:27:b6:45:92:0d:66:c0:02:91:78:f4:8a:
26:97:bd:32:a5:f7:30:0e:0e:35:a0:46:dd:e6:57:
f5:54:fb:66:4d:7f:44:e5:9a:f5:f1:b4:b7:32:6a:
3e:33:1a:3e:b8:f6:f7:7a:ca:f7:15:bf:db:50:e6:
a1:e4:b0:90:49:5e:2b:16:e6:43:b9:d3:7e:2f:05:
28:43:99:e5:50:cd:8a:9a:2f:c5:41:84:17:80:16:
51:f9:4d:22:3b:98:7b:b8:a7:3c:c7:da:bc:26:0c:
7c:93:40:4d:6c:92:e9:7b:e3:92:fb:ac:09:18:c2:
e6:15:76:25:dc:6c:60:dc:30:6b:cf:ae:e5:54:bb:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:E4:C6:41:59:46:D7:9D:F7:AC:2D:18:74:BA:53:4E:52:23:08
X509v3 Authority Key Identifier:
keyid:47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5f:8b:8d:e8:ab:0f:3f:3b:31:69:1b:4e:b1:d8:50:08:20:
1a:69:ca:d2:d8:af:c8:89:73:77:ab:b6:74:71:16:93:e5:86:
58:8c:b1:e5:24:2d:1f:14:07:d5:eb:79:75:f8:89:9b:36:26:
7a:bd:ef:1f:30:13:6d:fd:65:3e:30:e4:ce:85:29:32:e4:cc:
1d:e1:a5:db:09:4d:64:b6:41:ca:e6:e0:eb:52:56:ee:96:b8:
4a:b3:62:c3:79:ec:46:55:89:f4:6f:cb:04:cd:e1:95:30:6a:
3c:cf:aa:50:56:32:b9:aa:f9:0e:92:d8:96:c4:f4:aa:84:8c:
30:42:bd:f0:8c:a5:74:3a:b3:65:e4:63:94:5e:c3:89:50:96:
3d:5d:12:d4:0c:cb:79:ca:e3:4a:53:5e:e6:b3:7f:eb:9e:be:
6e:17:79:91:23:9f:2e:d0:ec:d8:53:c0:e9:eb:02:39:f8:c9:
9a:a1:0a:27:b8:75:eb:58:d3:fd:b6:94:9b:1b:ac:e4:53:3b:
22:9a:71:e0:c0:92:95:7a:3c:67:e7:87:da:03:3d:e8:9e:ce:
b1:89:aa:48:36:f8:e7:0c:f8:be:c5:24:0c:01:47:a0:5a:05:
26:8b:59:3f:67:e6:58:43:bd:2b:1a:67:d7:9a:3b:c0:5d:ef:
04:48:f2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:30:16 2026 by rpki-client