Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: ARSFiJ+iwDVp8V2Ulff37m/AtgrEuWGQaMtbCYw7ITo=
Subject key identifier: F1:D6:93:D3:12:0E:52:1C:2B:36:DF:95:06:25:30:85:F2:9E:AA:5D
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 01A002B8CBFCEEF2D86F829B2E19CD702376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 00:01:00 +0000
Manifest this update: Sat 15 Aug 2026 00:01:00 +0000
Manifest next update: Sun 16 Aug 2026 00:01:00 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: 13WoKEQdLciuB2q+eNWucCHW78aULHZCNajtaAQBD8E=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:cb:fc:ee:f2:d8:6f:82:9b:2e:19:cd:70:23:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Aug 15 00:01:00 2026 GMT
Not After : Aug 16 00:01:00 2026 GMT
Subject: CN=f1d693d3120e521c2b36df9506253085f29eaa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:fb:53:31:7f:b3:d9:13:77:63:12:0d:67:
57:84:82:48:f1:26:d1:aa:e9:56:7e:e3:cc:57:c2:
73:0d:bd:5d:c5:a0:54:43:30:6c:89:6e:92:8e:27:
b0:bc:e8:3c:4d:1d:4d:33:a2:cf:42:87:8a:d9:da:
b4:8f:37:81:ae:75:91:39:28:c3:96:e3:55:38:7e:
2f:25:86:59:54:29:0b:36:16:69:c7:1d:88:ad:3e:
59:a4:cb:86:b2:50:ad:e3:f6:9f:08:fd:50:f6:78:
87:0f:26:42:93:ff:70:3e:05:f7:28:f5:39:42:29:
35:ec:33:a7:4b:34:d1:73:e1:1f:08:d9:50:5c:26:
c4:22:c9:54:bd:cf:76:dd:3a:d4:c0:c8:3c:b9:c0:
40:b0:9f:56:0f:3f:46:5a:e3:bf:18:3b:e2:4e:21:
17:90:af:f1:27:3f:1a:ba:65:43:59:b1:81:e4:fc:
25:35:78:72:87:3f:3e:39:36:b9:f9:d8:b4:6f:c1:
30:25:73:bb:20:ba:49:77:14:55:08:31:6e:c9:65:
d1:b4:14:c2:06:cd:5b:5c:97:b3:49:a5:6a:92:72:
f2:13:55:4f:df:c8:7d:b6:70:ae:e4:cf:f8:bc:69:
fe:4e:29:26:d7:d7:0b:16:b0:9c:b8:db:2e:c7:bd:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D6:93:D3:12:0E:52:1C:2B:36:DF:95:06:25:30:85:F2:9E:AA:5D
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1f:fb:f6:62:c8:fa:93:b1:f5:e7:33:c4:f4:de:05:69:5b:
71:38:b8:90:0b:52:9e:c8:06:8d:8d:cc:7a:04:ab:49:15:65:
eb:0e:04:c1:9d:30:ca:1f:b1:74:25:8b:f5:ce:45:05:50:a3:
1a:80:2d:a8:18:4b:a0:b9:8b:19:58:d5:84:a3:05:cf:b9:96:
11:95:71:0e:94:8b:74:b7:d9:85:cb:7a:70:2d:0b:fd:76:67:
a5:2e:37:0e:5f:92:c0:68:89:f7:d1:28:47:ef:cc:aa:13:7e:
28:de:d9:dd:da:12:7a:94:98:96:97:43:af:97:2e:f1:5a:ba:
78:c4:76:aa:56:33:9a:85:2a:f3:47:3d:52:0e:bc:bf:cc:2b:
e2:d8:4f:d0:3f:e4:e0:e3:c9:78:b5:ea:b7:e2:92:42:74:7a:
de:86:14:0b:39:72:6e:8b:4b:1f:9a:8b:1d:c0:51:50:b1:fc:
66:52:6b:44:6d:9f:d4:66:a8:84:09:14:4f:a3:cd:bc:76:0c:
59:0c:bd:f2:7e:cd:4b:81:a9:9a:9e:89:4b:a2:9f:9a:f0:c5:
66:ad:0e:6c:43:3d:8f:2f:78:71:14:46:a8:7e:24:e3:33:49:
40:ff:03:ce:50:74:24:87:ec:5d:0d:9c:8d:ae:43:de:a4:5a:
f3:6d:9f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuMv87vLYb4KbLhnNcCN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDU0YzQ1NmNlNjhiYThmZWNhZDU0MmFhYjk2MTBiMWVj
YzEyZTIwHhcNMjYwODE1MDAwMTAwWhcNMjYwODE2MDAwMTAwWjAzMTEwLwYDVQQD
EyhmMWQ2OTNkMzEyMGU1MjFjMmIzNmRmOTUwNjI1MzA4NWYyOWVhYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzn7UzF/s9kTd2MSDWdXhIJI8SbR
qulWfuPMV8JzDb1dxaBUQzBsiW6SjiewvOg8TR1NM6LPQoeK2dq0jzeBrnWROSjD
luNVOH4vJYZZVCkLNhZpxx2IrT5ZpMuGslCt4/afCP1Q9niHDyZCk/9wPgX3KPU5
Qik17DOnSzTRc+EfCNlQXCbEIslUvc923TrUwMg8ucBAsJ9WDz9GWuO/GDviTiEX
kK/xJz8aumVDWbGB5PwlNXhyhz8+OTa5+di0b8EwJXO7ILpJdxRVCDFuyWXRtBTC
Bs1bXJezSaVqknLyE1VP38h9tnCu5M/4vGn+Tikm19cLFrCcuNsux70JQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHWk9MSDlIcKzbflQYlMIXynqpdMB8GA1UdIwQY
MBaAFOJFTEVs5ouo/srVQqq5YQsezBLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQt
OWY5N2IwZmM0ODMyLzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS82NGVkNjItYThlZi00ODAyLWExYjQtOWY5N2IwZmM0ODMy
LzEvNGtWTVJXem1pNmoteXRWQ3FybGhDeDdNRXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhh/79mLI
+pOx9eczxPTeBWlbcTi4kAtSnsgGjY3MegSrSRVl6w4EwZ0wyh+xdCWL9c5FBVCj
GoAtqBhLoLmLGVjVhKMFz7mWEZVxDpSLdLfZhct6cC0L/XZnpS43Dl+SwGiJ99Eo
R+/MqhN+KN7Z3doSepSYlpdDr5cu8Vq6eMR2qlYzmoUq80c9Ug68v8wr4thP0D/k
4OPJeLXqt+KSQnR63oYUCzlybotLH5qLHcBRULH8ZlJrRG2f1GaohAkUT6PNvHYM
WQy98n7NS4Gpmp6JS6KfmvDFZq0ObEM9jy94cRRGqH4k4zNJQP8DzlB0JIfsXQ2c
ja5D3qRa822f+w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:26:59 2026 by rpki-client