Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: HIOK6tLLGeJJRjmFRTZnpL/LuWu6VooLOpqjzS3X61w=
Subject key identifier: EE:6A:01:56:2E:9D:98:AE:23:19:2D:0A:21:A5:4B:78:D1:A0:0D:42
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 01A17DAA57EAF08114948C55B982DB8FD374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 1AD1
Signing time: Tue 27 Oct 2026 14:01:17 +0000
Manifest this update: Tue 27 Oct 2026 14:01:17 +0000
Manifest next update: Wed 28 Oct 2026 14:01:17 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: R0ZIj2Ua76IWcj3CSqHUY6wyHULfY6ddEbJKn83xTso=)
2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
3: BpG08GkHB-QsJpL9txO9DOn8Gqo.roa (hash: qk9A6y/PVuHMQUNTyaAzAHkiLugBm0Npe2/tYgpiKkw=)
4: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
5: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
6: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
7: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
8: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:57:ea:f0:81:14:94:8c:55:b9:82:db:8f:d3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Oct 27 14:01:17 2026 GMT
Not After : Oct 28 14:01:17 2026 GMT
Subject: CN=ee6a01562e9d98ae23192d0a21a54b78d1a00d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:4b:7b:25:1d:42:84:0f:f7:39:91:d7:b4:
a8:48:7b:e6:59:72:e1:c2:4c:49:79:49:7d:a8:c9:
6d:66:16:a4:92:50:be:21:1d:44:78:44:6b:5e:d1:
af:ff:8b:c9:d7:70:74:5a:85:e0:d9:d7:01:1f:72:
77:43:b2:de:42:7a:a6:28:d8:51:d6:4c:cc:91:85:
61:b0:45:14:84:d6:22:06:fc:cc:99:b5:50:bd:09:
07:0c:16:eb:dc:22:94:ca:59:69:50:98:68:29:6e:
2b:5d:b9:7f:b1:a2:3a:16:c3:61:a1:73:60:3c:ea:
94:38:4d:58:e6:94:c6:e6:64:e5:72:34:4a:10:e6:
63:69:04:f3:eb:2d:91:6e:d6:64:e8:1a:99:38:72:
52:6f:8b:fa:54:cd:64:24:17:e1:a0:f8:42:4b:bf:
52:64:8f:5b:21:15:d6:be:c6:5f:eb:2e:c9:b8:7a:
d2:2d:01:32:44:24:12:e6:af:74:e4:b5:e7:d8:74:
4a:6b:ce:40:3c:82:c4:df:96:d0:20:e6:94:d8:ba:
85:fd:37:cf:21:21:fb:a2:47:66:8a:74:c8:9f:be:
47:02:e3:93:e1:a9:41:97:02:75:a9:77:76:a7:48:
c0:69:ac:a9:33:d4:92:00:d4:40:08:33:1c:47:9f:
d1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:01:56:2E:9D:98:AE:23:19:2D:0A:21:A5:4B:78:D1:A0:0D:42
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:65:aa:dd:21:7d:ff:39:d0:3a:84:cd:bb:7e:6f:db:e8:3b:
2d:71:0a:a2:0a:7f:90:1d:38:98:91:d9:86:df:47:3d:68:c1:
a6:3d:7b:24:cb:90:b1:2c:6c:1f:8c:5f:7d:ee:96:ac:1b:d8:
80:25:bc:ca:81:76:02:f3:a4:19:5d:a6:86:9c:0c:b6:08:7d:
7c:37:20:01:54:0a:65:82:3e:f7:c1:6e:7c:bc:13:d8:d4:17:
51:82:3f:fd:c5:4f:9d:fa:5a:74:12:e6:d6:7d:66:2e:6b:e7:
c4:f2:e0:e0:6a:e9:ae:b7:59:75:a8:4c:2e:6c:84:55:d5:a3:
35:83:b4:e8:fd:9c:4c:b1:7b:12:29:4e:98:40:1e:a0:2f:b1:
ab:87:12:a5:9f:f7:4b:13:78:e9:c9:51:1d:29:07:6b:a6:cf:
57:30:df:39:25:20:fa:20:a8:e6:ef:cf:ce:e9:f4:92:a7:b5:
f7:90:cd:4a:85:9b:af:53:b1:8d:0f:09:84:7e:bc:f3:a8:05:
17:12:3a:3a:5e:c8:c3:47:ed:dc:4c:04:93:2d:26:01:45:d8:
44:98:39:fe:df:5c:58:f7:e1:15:df:0b:f4:ba:3a:0a:9e:21:
f8:1a:be:d7:05:80:0d:db:df:04:2b:2f:57:4f:72:fd:55:fe:
61:ab:f3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9qlfq8IEUlIxVuYLbj9N0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxY2FkYzhhNDIxYzFmMjJmMWUyOTA0Y2NmZGJiY2VjNWRi
ZTFiMTEwHhcNMjYxMDI3MTQwMTE3WhcNMjYxMDI4MTQwMTE3WjAzMTEwLwYDVQQD
EyhlZTZhMDE1NjJlOWQ5OGFlMjMxOTJkMGEyMWE1NGI3OGQxYTAwZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0pLeyUdQoQP9zmR17SoSHvmWXLh
wkxJeUl9qMltZhakklC+IR1EeERrXtGv/4vJ13B0WoXg2dcBH3J3Q7LeQnqmKNhR
1kzMkYVhsEUUhNYiBvzMmbVQvQkHDBbr3CKUyllpUJhoKW4rXbl/saI6FsNhoXNg
POqUOE1Y5pTG5mTlcjRKEOZjaQTz6y2RbtZk6BqZOHJSb4v6VM1kJBfhoPhCS79S
ZI9bIRXWvsZf6y7JuHrSLQEyRCQS5q905LXn2HRKa85APILE35bQIOaU2LqF/TfP
ISH7okdminTIn75HAuOT4alBlwJ1qXd2p0jAaaypM9SSANRACDMcR5/R/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5qAVYunZiuIxktCiGlS3jRoA1CMB8GA1UdIwQY
MBaAFOHK3IpCHB8i8eKQTM/bvOxdvhsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQt
NzQyZGMwYzk3MGMwLzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQtNzQyZGMwYzk3MGMw
LzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWWq3SF9
/znQOoTNu35v2+g7LXEKogp/kB04mJHZht9HPWjBpj17JMuQsSxsH4xffe6WrBvY
gCW8yoF2AvOkGV2mhpwMtgh9fDcgAVQKZYI+98FufLwT2NQXUYI//cVPnfpadBLm
1n1mLmvnxPLg4GrprrdZdahMLmyEVdWjNYO06P2cTLF7EilOmEAeoC+xq4cSpZ/3
SxN46clRHSkHa6bPVzDfOSUg+iCo5u/Pzun0kqe195DNSoWbr1OxjQ8JhH6886gF
FxI6Ol7Iw0ft3EwEky0mAUXYRJg5/t9cWPfhFd8L9Lo6Cp4h+Bq+1wWADdvfBCsv
V09y/VX+YavzzQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:41 2026 by rpki-client