Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: g0GKxbLncctaB7bO+/eUrkb3RQaex6caBUkFkqw7qzU=
Subject key identifier: 2F:8D:21:F7:98:01:BE:B0:46:47:EB:E5:DD:DF:53:A9:D0:49:B1:E5
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 01A13F025A488DC67C20F3C54F9A23AFE4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 1A78
Signing time: Thu 15 Oct 2026 10:01:21 +0000
Manifest this update: Thu 15 Oct 2026 10:01:21 +0000
Manifest next update: Fri 16 Oct 2026 10:01:21 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: Dz2qdTTJrLqHhZp3PkQ8dZNmRZIkP2UKkqD69XuSkic=)
2: bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa (hash: z7weft+bC6v8Gp+CtsE+ZYXb+kZuusFeVfZLKQMSX24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:5a:48:8d:c6:7c:20:f3:c5:4f:9a:23:af:e4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Oct 15 10:01:21 2026 GMT
Not After : Oct 16 10:01:21 2026 GMT
Subject: CN=2f8d21f79801beb04647ebe5dddf53a9d049b1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:3d:c7:2f:7b:9f:2e:56:65:ea:ab:ad:89:
43:a2:9b:18:10:d8:a3:e3:a4:3e:f7:2d:14:a2:54:
97:5c:1e:39:a9:b2:f9:4d:04:26:60:c1:8b:30:bb:
24:df:87:98:47:eb:a0:ff:3a:38:c2:3f:8e:f9:ff:
b9:71:09:93:ab:34:d2:67:6c:c9:8a:eb:da:c1:62:
b5:c5:0e:fb:1c:91:64:47:97:b1:f7:64:19:04:64:
35:75:c7:da:a1:d6:84:a5:a5:e5:57:f9:75:93:7c:
53:27:ca:fa:3f:c5:0d:44:8c:cc:24:70:af:71:e8:
1e:fb:ea:bd:95:73:d6:3b:ff:79:3c:22:38:55:93:
fc:73:14:28:28:7d:f1:80:e9:5e:b3:54:04:e5:e1:
9a:f3:c0:0d:23:29:a2:51:47:d6:37:b8:0d:0b:f2:
f2:74:28:db:8a:90:3a:c0:15:e4:9c:65:d5:3c:4f:
4a:ef:ab:1d:51:f7:50:c4:96:91:6a:98:a5:5e:2c:
bd:58:57:7e:6f:d9:df:96:91:2c:22:55:fd:e9:bb:
c9:99:40:ab:5c:e3:8b:11:44:16:98:8c:ab:70:43:
cc:c5:45:cc:2e:6d:70:13:a2:75:30:5a:fc:7a:66:
62:63:a9:53:87:68:aa:08:23:f4:1e:51:60:94:7a:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8D:21:F7:98:01:BE:B0:46:47:EB:E5:DD:DF:53:A9:D0:49:B1:E5
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:02:23:ba:b9:ed:5a:fc:0f:dd:ad:ed:61:82:91:11:5b:19:
e7:a2:75:c7:1a:2c:d6:f0:f4:4d:b0:5a:c8:1e:46:88:04:5b:
27:b6:6e:68:d9:36:05:69:7e:56:dd:0a:50:84:d5:b7:33:a1:
2a:ca:2f:d1:d1:36:b3:27:53:3e:2d:89:40:dd:e3:7f:ed:20:
6b:36:cb:17:63:4a:0a:9b:7b:89:74:ab:dc:ee:71:a3:7c:f1:
4f:85:a0:94:47:dd:55:70:3b:af:ec:0f:0b:ee:38:53:e6:1b:
8c:ec:fb:8c:7d:65:8e:6b:b1:b1:c1:c6:6d:b0:44:2d:ac:4f:
1b:cf:5a:ae:84:2c:d4:7a:76:21:36:e9:45:28:76:e9:8d:de:
22:66:63:62:52:11:62:c1:b4:71:14:7a:70:f6:ce:d8:1a:9e:
72:55:a4:58:ca:1a:8a:3f:ce:01:e5:76:e8:b3:47:5b:ff:4c:
f1:13:65:eb:79:c0:5f:2b:15:ac:92:11:a7:82:d6:0f:d0:aa:
f0:17:f8:6d:ed:45:44:5f:76:34:37:80:fe:2d:e4:8a:b2:73:
03:f8:5f:1c:64:8f:81:3d:74:ef:8e:71:d8:db:38:7e:25:2e:
5c:c2:2f:4b:17:59:1e:6c:53:db:9a:64:26:02:34:19:4e:fb:
1e:3c:29:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/AlpIjcZ8IPPFT5ojr+TUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmJjNzA2N2Y4YTdjNTdkNjg2ZDY3NWViNDY4ZTk5Yjg2
YmQ2MmQwHhcNMjYxMDE1MTAwMTIxWhcNMjYxMDE2MTAwMTIxWjAzMTEwLwYDVQQD
EygyZjhkMjFmNzk4MDFiZWIwNDY0N2ViZTVkZGRmNTNhOWQwNDliMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw89xy97ny5WZeqrrYlDopsYENij
46Q+9y0UolSXXB45qbL5TQQmYMGLMLsk34eYR+ug/zo4wj+O+f+5cQmTqzTSZ2zJ
iuvawWK1xQ77HJFkR5ex92QZBGQ1dcfaodaEpaXlV/l1k3xTJ8r6P8UNRIzMJHCv
cege++q9lXPWO/95PCI4VZP8cxQoKH3xgOles1QE5eGa88ANIymiUUfWN7gNC/Ly
dCjbipA6wBXknGXVPE9K76sdUfdQxJaRapilXiy9WFd+b9nflpEsIlX96bvJmUCr
XOOLEUQWmIyrcEPMxUXMLm1wE6J1MFr8emZiY6lTh2iqCCP0HlFglHoxSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+NIfeYAb6wRkfr5d3fU6nQSbHlMB8GA1UdIwQY
MBaAFOK7xwZ/inxX1obWdetGjpm4a9YtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUt
MWRhMmFjYzc2ZTExLzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUtMWRhMmFjYzc2ZTEx
LzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQIjurnt
WvwP3a3tYYKREVsZ56J1xxos1vD0TbBayB5GiARbJ7ZuaNk2BWl+Vt0KUITVtzOh
Ksov0dE2sydTPi2JQN3jf+0gazbLF2NKCpt7iXSr3O5xo3zxT4WglEfdVXA7r+wP
C+44U+YbjOz7jH1ljmuxscHGbbBELaxPG89aroQs1Hp2ITbpRSh26Y3eImZjYlIR
YsG0cRR6cPbO2BqeclWkWMoaij/OAeV26LNHW/9M8RNl63nAXysVrJIRp4LWD9Cq
8Bf4be1FRF92NDeA/i3kirJzA/hfHGSPgT10745x2Ns4fiUuXMIvSxdZHmxT25pk
JgI0GU77HjwpJg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:54:56 2026 by rpki-client