Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: /WKVPKPhbSEGaWVory8smjpHjPbEYRzc2yDdE1reIgY=
Subject key identifier: C8:26:C4:DC:B6:0C:98:B4:C6:95:D1:AE:2B:33:3D:3B:10:2B:94:33
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 01A13D814905CE3275B26CF0851866DC0BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 03:00:45 +0000
Manifest this update: Thu 15 Oct 2026 03:00:45 +0000
Manifest next update: Fri 16 Oct 2026 03:00:45 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: CDKgz3j/i7NcnDBA0NQLZ/Lv+r6CmwMtYLl0Fuydyls=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:49:05:ce:32:75:b2:6c:f0:85:18:66:dc:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Oct 15 03:00:45 2026 GMT
Not After : Oct 16 03:00:45 2026 GMT
Subject: CN=c826c4dcb60c98b4c695d1ae2b333d3b102b9433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:02:29:30:51:c8:3c:86:ce:5a:87:46:55:
a9:44:dd:8b:2f:13:dd:5f:5e:a2:ef:ce:2f:dd:7f:
2f:86:bb:c2:c8:01:35:29:46:a2:f0:1d:97:6f:d3:
e3:0b:b9:6c:18:ef:6a:51:91:bb:8b:9f:22:25:95:
27:3d:85:80:22:18:f9:44:83:8f:63:f4:85:f1:fe:
2f:2f:f2:3b:92:70:7a:a5:15:47:ce:75:90:54:0b:
37:67:62:d4:14:0c:91:1d:d7:24:51:87:aa:14:b9:
e6:22:de:15:5d:8e:22:72:bc:ab:d1:e7:43:db:40:
1b:74:d0:08:1e:bb:ab:eb:2f:c8:0c:be:d3:2d:e4:
e1:f5:cf:9f:fa:09:fd:b5:f8:a9:58:bf:08:a7:7b:
99:a3:d7:ff:65:96:9e:d8:dd:1d:f8:b9:f1:7f:cb:
2a:3c:f2:d8:79:94:7d:b9:84:cb:34:e1:42:76:ee:
11:b3:92:68:f5:4c:96:2d:c5:d6:e2:24:57:99:2b:
a9:db:6f:73:ad:15:5e:29:72:c2:f3:67:10:c7:90:
71:1a:a0:38:5d:3a:ef:f2:2e:4a:d5:b1:ac:c6:8e:
c1:3d:0a:d2:17:55:a4:80:90:8a:21:80:e9:11:2a:
3f:47:39:9a:37:c3:8e:8f:67:aa:2a:ce:8d:c6:81:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:26:C4:DC:B6:0C:98:B4:C6:95:D1:AE:2B:33:3D:3B:10:2B:94:33
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:be:e9:fd:6a:d0:91:45:78:0b:bf:70:81:67:42:16:fc:2b:
82:8a:80:1f:46:64:b8:a6:fd:04:8e:9a:95:17:60:b8:70:98:
45:6f:cd:94:34:37:65:16:98:1e:c9:d7:ff:9a:fc:a1:4e:8a:
63:e1:08:26:6e:eb:7f:89:13:37:9a:e1:30:0a:73:03:39:dd:
c5:47:a7:b0:0c:d7:b6:f7:ec:2e:59:a6:24:ed:66:cf:3e:0a:
c2:08:32:f5:5e:cc:d7:a3:60:ec:e2:90:e1:68:a2:43:cf:16:
3f:05:5a:ee:b3:43:03:9d:94:09:b5:b3:27:ef:d1:5a:64:47:
d5:f3:41:00:6e:11:b8:33:b0:d5:e1:e5:0c:12:2a:e6:4f:8c:
cc:2e:73:d9:3b:2f:60:90:e6:f5:a0:1f:db:df:4c:00:eb:ae:
98:2f:e1:5e:ef:52:c3:0d:84:4f:e3:f4:b7:f6:61:b3:f1:e5:
19:b9:9e:8c:03:ef:e7:b5:c4:8b:91:85:81:32:ea:28:cf:4b:
a1:77:1c:9b:3a:a1:92:17:f0:2a:6b:97:27:84:45:d4:ed:ba:
0e:ec:07:3b:8e:5e:3b:0a:7e:9b:ba:73:98:46:b5:e4:ae:75:
b4:35:8f:0a:1d:2d:8e:66:a3:0d:00:e3:0c:ac:fd:fd:bf:2f:
5f:0e:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:01 2026 by rpki-client