Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: 6UTpA2EczI3Wd6JW8fUMnolBejbBy1UJtZQtUWRIU0k=
Subject key identifier: 12:AA:86:9D:92:65:19:29:3A:DC:D8:48:D3:2D:8D:C5:EC:58:1C:CC
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 01A13CDCC562DCA421E471AFBE56B8F4EFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0D0B
Signing time: Thu 15 Oct 2026 00:01:03 +0000
Manifest this update: Thu 15 Oct 2026 00:01:03 +0000
Manifest next update: Fri 16 Oct 2026 00:01:03 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: URl1Mi+2JaP6kiTcPcOuzUOrlkOhrre3SOLcaAfTru0=)
2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:c5:62:dc:a4:21:e4:71:af:be:56:b8:f4:ef:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Oct 15 00:01:03 2026 GMT
Not After : Oct 16 00:01:03 2026 GMT
Subject: CN=12aa869d926519293adcd848d32d8dc5ec581ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dc:ee:fa:01:e1:f1:83:d6:4c:65:6b:90:45:
c5:07:ef:26:28:89:75:90:94:ee:9d:03:bd:c1:44:
58:c8:8d:90:68:b4:f1:63:d8:b4:5e:0a:f4:e2:30:
ad:78:46:9a:ec:cd:a9:6b:3f:29:23:ba:a3:e6:75:
78:3c:dc:2f:2b:ef:68:e0:28:91:41:2b:19:b3:6c:
1e:17:29:74:87:37:29:cc:7f:17:6e:85:28:6a:67:
13:62:d4:60:9d:02:bd:72:77:78:c5:ea:8a:b7:94:
da:23:03:07:e0:b1:29:14:a5:1f:0b:68:5a:e0:b8:
51:29:c3:c6:fd:e6:97:60:8a:ff:74:57:ff:a9:01:
4e:df:67:01:51:9a:14:a2:49:da:02:d0:aa:75:2f:
11:34:1b:52:30:86:5d:af:c0:ec:87:86:63:64:7d:
ad:2d:f2:b3:ff:5b:d1:ac:b3:59:99:c8:88:d3:ae:
1a:fa:5a:ee:60:4c:4a:56:9f:1c:b1:a4:c8:dc:46:
12:bc:72:fb:fd:73:62:73:6d:cf:bc:8e:8e:d5:00:
3e:85:52:fa:dd:8d:be:62:33:2c:64:1e:bb:6d:19:
83:23:5b:a5:e0:13:bd:8a:94:4b:e9:13:f0:16:bd:
c8:d1:fe:5c:87:77:18:19:05:69:2b:9c:c1:57:34:
76:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AA:86:9D:92:65:19:29:3A:DC:D8:48:D3:2D:8D:C5:EC:58:1C:CC
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7c:e3:51:c3:5d:b1:17:36:2e:c9:31:95:e1:f8:57:c6:a8:
59:47:1a:5f:a6:a7:a1:53:71:e6:9d:19:a3:03:63:f4:72:53:
74:47:d9:6a:1e:c9:86:12:82:54:f2:8b:7d:d6:cf:14:56:5b:
8c:2b:8f:56:85:a1:f8:55:87:ac:30:50:72:0c:dd:5d:48:c7:
61:d0:49:d5:a6:cb:34:88:8e:f2:dc:45:bf:ca:66:dc:f5:e6:
b3:77:19:73:52:89:bc:9e:1d:1b:e5:a6:ac:35:b3:19:1d:e4:
ac:ea:35:1b:93:16:70:02:1b:d3:36:09:62:4e:54:f9:e5:24:
eb:c7:0e:55:b1:a7:e0:10:46:2e:9f:c1:5a:00:d9:90:8a:c6:
d4:18:41:5f:01:b1:f3:b5:48:fe:bb:40:74:a4:d9:cd:9c:23:
84:3c:cb:4e:12:7b:55:bf:23:ea:e3:fd:f2:57:2e:69:d3:0f:
ac:cb:14:29:73:c9:a4:e6:bc:8c:56:86:e8:a5:ed:42:94:b8:
c2:3b:1d:70:99:a3:ba:88:36:cd:5c:83:a3:03:c1:ac:ca:30:
91:bc:79:bf:e4:e5:45:9f:d7:01:51:8f:81:6d:f4:39:d8:cd:
dd:01:c9:d7:5d:88:ce:54:41:35:43:f5:e8:f8:33:fc:c9:41:
1c:32:47:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83MVi3KQh5HGvvla49O/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxN2ExYTYyMjQ4ZGY4NzkxMzNjMDczYWQ1NjJhZDAzYTJi
OTJmZGMwHhcNMjYxMDE1MDAwMTAzWhcNMjYxMDE2MDAwMTAzWjAzMTEwLwYDVQQD
EygxMmFhODY5ZDkyNjUxOTI5M2FkY2Q4NDhkMzJkOGRjNWVjNTgxY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNzu+gHh8YPWTGVrkEXFB+8mKIl1
kJTunQO9wURYyI2QaLTxY9i0Xgr04jCteEaa7M2paz8pI7qj5nV4PNwvK+9o4CiR
QSsZs2weFyl0hzcpzH8XboUoamcTYtRgnQK9cnd4xeqKt5TaIwMH4LEpFKUfC2ha
4LhRKcPG/eaXYIr/dFf/qQFO32cBUZoUoknaAtCqdS8RNBtSMIZdr8Dsh4ZjZH2t
LfKz/1vRrLNZmciI064a+lruYExKVp8csaTI3EYSvHL7/XNic23PvI6O1QA+hVL6
3Y2+YjMsZB67bRmDI1ul4BO9ipRL6RPwFr3I0f5ch3cYGQVpK5zBVzR28QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKqhp2SZRkpOtzYSNMtjcXsWBzMMB8GA1UdIwQY
MBaAFOF6GmIkjfh5EzwHOtVirQOiuS/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2Qt
NWZkYzg3ZTZkMmEwLzEvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xMzBmZmYtOTdlMy00YWMwLWJkY2QtNWZkYzg3ZTZkMmEw
LzEvNFhvYVlpU04tSGtUUEFjNjFXS3RBNks1TDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnzjUcNd
sRc2LskxleH4V8aoWUcaX6anoVNx5p0ZowNj9HJTdEfZah7JhhKCVPKLfdbPFFZb
jCuPVoWh+FWHrDBQcgzdXUjHYdBJ1abLNIiO8txFv8pm3PXms3cZc1KJvJ4dG+Wm
rDWzGR3krOo1G5MWcAIb0zYJYk5U+eUk68cOVbGn4BBGLp/BWgDZkIrG1BhBXwGx
87VI/rtAdKTZzZwjhDzLThJ7Vb8j6uP98lcuadMPrMsUKXPJpOa8jFaG6KXtQpS4
wjsdcJmjuog2zVyDowPBrMowkbx5v+TlRZ/XAVGPgW30OdjN3QHJ112IzlRBNUP1
6Pgz/MlBHDJHsg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:37 2026 by rpki-client