Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: i3pcFGC5MBbS/IFMyHsKP+ZD/HtyvOqyGh5q72r/bUc=
Subject key identifier: AF:E3:BF:30:1C:2B:B7:2C:1F:10:1B:85:8D:47:3E:0E:EA:2A:31:9F
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 01A000CAAF9C88237CC83BAF4A4EF790F593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 15:01:18 +0000
Manifest this update: Fri 14 Aug 2026 15:01:18 +0000
Manifest next update: Sat 15 Aug 2026 15:01:18 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: yBANJ4KhnGH4VRFqMqfDD99QiE/z0lpQX7B65FJ4+p8=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:af:9c:88:23:7c:c8:3b:af:4a:4e:f7:90:f5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Aug 14 15:01:18 2026 GMT
Not After : Aug 15 15:01:18 2026 GMT
Subject: CN=afe3bf301c2bb72c1f101b858d473e0eea2a319f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:57:20:3a:b2:f1:12:7a:4a:cd:f9:35:99:
a1:41:4d:f5:4e:ed:09:5b:2d:82:f8:be:95:0f:ff:
3e:69:a4:50:d4:a7:8c:40:24:a8:b9:54:37:cf:b6:
76:43:9b:ec:55:d1:f3:7e:45:1d:25:89:72:48:76:
95:e6:9e:92:ef:b9:79:fe:b1:b8:8e:ed:63:e4:43:
4d:22:e7:a6:fc:17:6e:df:62:55:5e:ef:2d:8e:d7:
6d:75:71:28:a3:78:ad:f9:c5:90:18:82:48:94:71:
5e:96:d5:91:08:72:8e:6a:26:bb:1f:d5:25:48:a5:
c5:da:16:62:16:5c:84:1c:cd:f0:87:4f:d0:07:8c:
b2:69:47:c5:37:43:fd:0e:8e:13:b4:7a:e3:29:c0:
5d:90:3d:3c:4f:cd:e6:00:8f:90:68:a0:ec:93:9a:
df:15:75:cc:60:f8:53:26:06:b6:91:b1:e0:9d:31:
c1:4e:58:7d:d5:e3:c5:18:2e:f7:9b:e8:58:62:4a:
9f:36:25:c7:ca:5e:96:78:3c:e9:b7:64:fd:22:15:
7e:f8:f7:6a:ec:ff:5f:8d:2a:ab:7a:3e:bb:1a:10:
3f:20:60:f6:23:32:6a:84:5a:da:b4:19:2f:22:9f:
43:09:4a:ec:7b:ef:11:16:96:7d:10:4e:c9:40:6c:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E3:BF:30:1C:2B:B7:2C:1F:10:1B:85:8D:47:3E:0E:EA:2A:31:9F
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7b:d0:36:2c:86:47:b9:ba:34:d3:f4:5a:f8:00:2b:f1:42:
7b:93:86:da:bd:1c:3f:01:97:43:83:62:68:cf:1f:de:44:1d:
08:18:55:00:7d:46:4e:d1:e3:84:66:6c:e3:13:95:a1:09:20:
22:6e:70:3c:12:28:4f:89:8c:89:d4:88:ae:0e:83:30:1d:49:
a5:05:1b:44:01:9c:46:c3:2c:6e:7f:6e:2d:a1:51:96:60:df:
71:74:78:ae:ee:ab:2d:4a:c3:c4:a1:39:2a:0c:d8:d2:d3:96:
50:9f:b6:96:cd:98:a4:6b:cf:61:8f:73:79:8b:0b:3f:61:ce:
47:d5:2b:3f:04:8e:c9:20:43:b9:e5:27:0c:ae:af:30:11:9d:
8a:d8:1f:e5:51:d2:68:cc:e6:a6:b4:4c:d4:38:8a:94:c7:9a:
18:d7:b8:dc:72:73:a8:3b:81:5f:2b:00:f9:d4:3e:01:90:07:
d6:46:65:67:46:75:03:70:42:c1:01:00:18:c1:8e:aa:68:53:
0b:12:3d:53:d0:84:a7:f5:23:86:56:df:35:bd:30:4c:d6:f0:
5e:71:8b:53:11:8a:1d:a8:9b:0f:5e:06:db:11:cc:59:77:6c:
d7:2a:c4:c1:11:51:aa:d8:ee:31:b3:72:bb:6c:e7:87:d1:10:
59:62:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:46 2026 by rpki-client