Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: fnpIya0NDDDwt97fZIZ9X1q87aARVjoXiqFWdg6e+sY=
Subject key identifier: 8E:14:82:A9:0A:46:D9:6B:1E:39:C5:DC:3C:52:E0:72:5A:DE:DF:F2
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 01A143F18FBF80A043A96C6646E914ADE9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 176D
Signing time: Fri 16 Oct 2026 09:01:06 +0000
Manifest this update: Fri 16 Oct 2026 09:01:06 +0000
Manifest next update: Sat 17 Oct 2026 09:01:06 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: qLhuMC+RPfPTfHAxxUrOlWlUR2r81nSK9Y1E2gQGOaQ=)
2: n7tDB9WVKLvlzbrTHI3vLNe5dIs.roa (hash: BfpWIrEApwHB8saHvg5FCOOfhPalX/1cWv3N79uY4jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:f1:8f:bf:80:a0:43:a9:6c:66:46:e9:14:ad:e9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Oct 16 09:01:06 2026 GMT
Not After : Oct 17 09:01:06 2026 GMT
Subject: CN=8e1482a90a46d96b1e39c5dc3c52e0725adedff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:bd:d6:cb:3f:40:60:d6:fd:26:53:91:86:
cd:c9:45:ae:d7:33:e0:09:87:f6:dd:4a:7d:a5:08:
d2:9c:66:a7:a7:f3:cd:be:23:d8:18:0f:a2:d2:1a:
c2:85:41:a5:89:c6:a8:48:42:2c:94:5e:e8:3b:1d:
c3:82:b1:fd:93:27:00:f0:69:6c:82:20:5d:87:65:
e6:ae:71:c0:6b:fa:ca:90:87:66:f5:0f:28:e9:5d:
da:43:73:9b:51:ef:e9:8a:41:cd:88:8f:4b:88:fc:
81:21:2e:33:03:e9:b8:70:41:4c:eb:67:49:f4:2c:
16:81:b7:a2:cb:29:c8:61:30:60:c4:1e:2e:b0:3a:
f0:1a:98:f0:e0:e7:97:ac:26:3f:16:b6:8c:bb:6b:
a0:b0:ad:8c:7d:0c:c8:2e:2a:dd:44:07:c4:41:7f:
c8:d0:03:ae:e3:d6:04:50:be:bb:9b:8d:3e:0a:d0:
d5:c7:82:4c:84:a3:3b:95:a0:89:0d:0b:94:0f:4f:
95:5f:69:ab:b0:be:ad:1f:5b:14:3d:79:25:d2:bb:
82:4a:df:cc:58:5a:14:58:51:b6:28:62:5b:f0:55:
d0:fc:9d:d4:63:5e:b2:e2:b7:81:7e:80:66:91:a9:
8e:40:08:42:a0:da:c2:8b:b6:f6:69:3b:17:58:2e:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:82:A9:0A:46:D9:6B:1E:39:C5:DC:3C:52:E0:72:5A:DE:DF:F2
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0a:32:20:61:6c:7f:13:93:df:5c:a4:48:4c:33:09:cb:4c:
c0:0b:d0:dc:20:8d:8e:75:eb:63:a3:ea:cd:49:f2:af:14:39:
a1:9d:8f:36:12:0d:bd:98:61:02:8b:78:4f:f3:a0:63:58:28:
bd:b9:8e:1b:8f:e6:a0:b2:2f:31:45:93:51:7f:95:a3:04:b0:
7a:a0:d8:27:b3:21:15:d2:c4:2d:8f:0a:6b:e9:36:82:d8:6b:
4e:2c:04:db:2b:ed:03:a5:0f:55:9c:9f:fc:dc:96:7c:d3:de:
fd:53:33:c2:bc:48:04:6a:08:10:65:f2:f6:99:9f:d9:29:7f:
96:05:ca:bc:f7:9d:b2:54:4b:f4:90:c1:ef:94:6a:bc:ef:88:
94:28:26:96:bc:32:de:c3:3f:d6:34:ab:2a:24:05:3b:8c:74:
a7:51:03:89:1d:2c:83:8b:c2:56:54:d0:56:d5:c4:0c:60:bd:
c6:04:6a:36:6f:ef:ab:d8:dd:8b:e8:29:69:21:63:95:16:ff:
e6:e3:3b:f2:e3:1b:d2:1d:c6:6c:ce:72:81:43:db:f0:4c:03:
1d:28:e8:97:52:d7:3c:66:ca:e4:fd:71:e7:0e:22:90:d9:76:
aa:d2:3d:ac:71:aa:fd:30:f9:74:e9:9e:66:80:7b:db:28:ac:
79:e2:fe:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFD8Y+/gKBDqWxmRukUrem9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTc4NzI0MDM0NTJmM2UwMDhhYjc5ODA0NzM0MmRiMjRl
ZGIzNWEwHhcNMjYxMDE2MDkwMTA2WhcNMjYxMDE3MDkwMTA2WjAzMTEwLwYDVQQD
Eyg4ZTE0ODJhOTBhNDZkOTZiMWUzOWM1ZGMzYzUyZTA3MjVhZGVkZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+691ss/QGDW/SZTkYbNyUWu1zPg
CYf23Up9pQjSnGanp/PNviPYGA+i0hrChUGlicaoSEIslF7oOx3DgrH9kycA8Gls
giBdh2XmrnHAa/rKkIdm9Q8o6V3aQ3ObUe/pikHNiI9LiPyBIS4zA+m4cEFM62dJ
9CwWgbeiyynIYTBgxB4usDrwGpjw4OeXrCY/FraMu2ugsK2MfQzILirdRAfEQX/I
0AOu49YEUL67m40+CtDVx4JMhKM7laCJDQuUD0+VX2mrsL6tH1sUPXkl0ruCSt/M
WFoUWFG2KGJb8FXQ/J3UY16y4reBfoBmkamOQAhCoNrCi7b2aTsXWC57JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4UgqkKRtlrHjnF3DxS4HJa3t/yMB8GA1UdIwQY
MBaAFOAXhyQDRS8+AIq3mARzQtsk7bNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMt
ODc3ZTBlODY2YjI0LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80Y2MxNDUtOTY3ZC00ZDhkLWFmNWMtODc3ZTBlODY2YjI0
LzEvNEJlSEpBTkZMejRBaXJlWUJITkMyeVR0czFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwoyIGFs
fxOT31ykSEwzCctMwAvQ3CCNjnXrY6PqzUnyrxQ5oZ2PNhINvZhhAot4T/OgY1go
vbmOG4/moLIvMUWTUX+VowSweqDYJ7MhFdLELY8Ka+k2gthrTiwE2yvtA6UPVZyf
/NyWfNPe/VMzwrxIBGoIEGXy9pmf2Sl/lgXKvPedslRL9JDB75RqvO+IlCgmlrwy
3sM/1jSrKiQFO4x0p1EDiR0sg4vCVlTQVtXEDGC9xgRqNm/vq9jdi+gpaSFjlRb/
5uM78uMb0h3GbM5ygUPb8EwDHSjol1LXPGbK5P1x5w4ikNl2qtI9rHGq/TD5dOme
ZoB72yiseeL+Ww==
-----END CERTIFICATE-----
Generated at Fri Oct 16 15:27:58 2026 by rpki-client