Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: oSAD2IFPmnYqx+cHUk22a2Ukd91/o/Q7z0Z1HWjoXmg=
Subject key identifier: 99:83:43:44:0B:72:5A:99:99:0E:E5:47:8B:0D:91:87:4A:ED:75:51
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 01A13E26AFE6D5D0AB6B94EE1DBC0DAAAA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 06:01:24 +0000
Manifest this update: Thu 15 Oct 2026 06:01:24 +0000
Manifest next update: Fri 16 Oct 2026 06:01:24 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: kX3fCwFum4NBD5L2hL3unk1xJ4i6ge8C/nWySS0liVE=)
2: GD22NDKlkAh5bp67GRvvW84yHsU.roa (hash: LtP9pMPZerVqZeqzrIl5QfQhM+bLwsaU/FGis7xu4Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:af:e6:d5:d0:ab:6b:94:ee:1d:bc:0d:aa:aa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Oct 15 06:01:24 2026 GMT
Not After : Oct 16 06:01:24 2026 GMT
Subject: CN=998343440b725a99990ee5478b0d91874aed7551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:ba:8f:ce:38:23:fe:b1:e8:e6:d7:cd:0f:
a3:03:12:ea:52:e6:95:6c:65:78:d4:03:6d:7f:cc:
15:60:cd:f7:78:84:80:5c:54:31:e8:f5:f1:63:6b:
47:74:c1:31:5e:3f:b3:28:27:78:43:47:4d:9e:58:
76:e4:23:1d:95:6a:6a:d8:3e:07:2c:e2:c0:f8:62:
5d:fa:c5:9f:fe:e3:7f:a7:7f:9c:ad:9d:0d:e4:47:
e3:bd:ac:b1:67:45:77:a9:82:cc:a8:31:fd:93:5f:
d3:dc:77:d3:38:25:9a:8c:9b:cf:d2:b3:07:33:27:
d5:36:d1:c1:3e:cf:10:a1:6b:d3:bb:5d:d6:d9:a7:
c2:b8:15:65:db:b3:3d:49:89:61:a6:b9:48:c1:b7:
8c:f4:32:7a:18:8f:a2:bf:9e:f9:4a:f4:33:41:26:
62:e5:8f:eb:3c:0f:4d:bf:24:d6:b7:b6:66:53:0f:
11:06:ce:db:7e:a3:96:df:42:f8:bb:b8:ae:3e:49:
c2:f6:68:e9:b1:a7:5d:be:ea:d6:a9:c7:1f:dd:f2:
82:68:89:3c:40:c1:7a:32:7c:40:f0:a5:9b:59:0a:
86:a1:1f:a9:18:7e:d5:bc:e4:cb:d9:2f:43:2f:45:
3d:66:fa:f6:4d:8f:98:e6:4d:4b:24:a2:f0:b3:cb:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:43:44:0B:72:5A:99:99:0E:E5:47:8B:0D:91:87:4A:ED:75:51
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8a:47:24:4b:85:4d:92:b6:2a:dc:dd:e0:32:7a:93:3a:7f:
2d:72:be:d9:2e:75:e6:ca:63:06:a1:20:f6:dc:bb:69:a9:2e:
01:c3:2d:a4:b2:4d:99:1c:d1:d9:72:30:c1:ec:d9:04:60:c0:
89:a7:72:d0:66:ef:ef:1b:f3:10:87:5c:b3:30:23:79:22:07:
b6:ba:d4:8e:63:c9:54:b8:66:98:db:80:da:a6:6e:ce:5e:ee:
27:a6:16:e1:53:49:b9:50:bb:4d:3b:60:76:06:33:5d:a7:ea:
1f:ab:ba:8b:d8:ea:63:1c:56:90:96:83:c9:88:52:20:2b:0f:
6b:1b:66:f7:3f:75:a4:0e:1e:44:bb:e4:a4:9a:9e:68:5f:49:
ab:bd:72:3b:e7:bc:c7:65:f0:dd:a8:eb:66:3e:d1:e5:53:b2:
60:d0:27:8a:47:ea:53:05:2b:77:d6:81:a8:58:c5:51:ac:49:
e5:9f:4c:88:9b:67:47:a3:7e:f3:9f:de:b6:c9:79:93:6a:40:
90:4d:d9:10:a4:3a:1a:94:13:8d:2c:e9:05:98:10:45:23:28:
fc:19:f2:95:f4:39:ad:82:f8:38:6e:24:6c:c1:5d:30:ce:31:
df:4d:02:b4:3f:75:96:19:91:de:fd:51:0a:88:0f:a2:3f:be:
f6:65:64:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jq/m1dCra5TuHbwNqqqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwN2UwMDhkNmVkMjM4OGFkMzFiNzQyMjQyMzE1MmE5MmE1
NGRlNzEwHhcNMjYxMDE1MDYwMTI0WhcNMjYxMDE2MDYwMTI0WjAzMTEwLwYDVQQD
Eyg5OTgzNDM0NDBiNzI1YTk5OTkwZWU1NDc4YjBkOTE4NzRhZWQ3NTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyC6j844I/6x6ObXzQ+jAxLqUuaV
bGV41ANtf8wVYM33eISAXFQx6PXxY2tHdMExXj+zKCd4Q0dNnlh25CMdlWpq2D4H
LOLA+GJd+sWf/uN/p3+crZ0N5EfjvayxZ0V3qYLMqDH9k1/T3HfTOCWajJvP0rMH
MyfVNtHBPs8QoWvTu13W2afCuBVl27M9SYlhprlIwbeM9DJ6GI+iv575SvQzQSZi
5Y/rPA9NvyTWt7ZmUw8RBs7bfqOW30L4u7iuPknC9mjpsaddvurWqccf3fKCaIk8
QMF6MnxA8KWbWQqGoR+pGH7VvOTL2S9DL0U9Zvr2TY+Y5k1LJKLws8uBnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmDQ0QLclqZmQ7lR4sNkYdK7XVRMB8GA1UdIwQY
MBaAFOB+AI1u0jiK0xt0IkIxUqkqVN5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQt
MjcyNzI0N2FmMjEwLzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kNDc5Y2MtYTcxMi00YmMzLTgzMmQtMjcyNzI0N2FmMjEw
LzEvNEg0QWpXN1NPSXJURzNRaVFqRlNxU3BVM25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYpHJEuF
TZK2Ktzd4DJ6kzp/LXK+2S515spjBqEg9ty7aakuAcMtpLJNmRzR2XIwwezZBGDA
iady0Gbv7xvzEIdcszAjeSIHtrrUjmPJVLhmmNuA2qZuzl7uJ6YW4VNJuVC7TTtg
dgYzXafqH6u6i9jqYxxWkJaDyYhSICsPaxtm9z91pA4eRLvkpJqeaF9Jq71yO+e8
x2Xw3ajrZj7R5VOyYNAnikfqUwUrd9aBqFjFUaxJ5Z9MiJtnR6N+85/etsl5k2pA
kE3ZEKQ6GpQTjSzpBZgQRSMo/BnylfQ5rYL4OG4kbMFdMM4x300CtD91lhmR3v1R
CogPoj++9mVkeA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:09 2026 by rpki-client