
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: zV5qEinnPbCAKCxrCkWrFRs5xhJFWNllrOg3vhyRrrQ=
Subject key identifier: 38:68:D7:10:3D:CD:8D:A2:94:77:F3:64:5C:B0:5B:23:F5:02:00:7A
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 01A11D50F99AB1193E480426CD8989912C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0F0B
Signing time: Thu 08 Oct 2026 21:00:08 +0000
Manifest this update: Thu 08 Oct 2026 21:00:08 +0000
Manifest next update: Fri 09 Oct 2026 21:00:08 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: RUhhcpIgP/md3sW89CkeOp4QJNvngN0nbv3zO9pUpiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 21:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:50:f9:9a:b1:19:3e:48:04:26:cd:89:89:91:2c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Oct 8 21:00:08 2026 GMT
Not After : Oct 9 21:00:08 2026 GMT
Subject: CN=3868d7103dcd8da29477f3645cb05b23f502007a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:11:b6:44:fa:43:b8:94:aa:be:d4:23:db:14:
4b:fa:a9:fd:1a:73:04:86:84:68:c0:d6:db:38:c3:
e4:2f:56:f1:c2:bb:cc:27:72:5f:c9:f3:6a:f5:e7:
d7:fd:e2:57:66:13:62:8f:13:a8:6d:e3:bd:c8:c2:
ef:d3:95:04:a3:1f:15:f3:dd:d2:77:0a:40:10:01:
f3:6d:e3:87:6f:44:4d:a9:8b:85:b3:4b:f2:26:f6:
06:0d:a3:e3:9a:bd:0a:8b:83:fa:52:9f:2c:c1:45:
9b:f1:8c:e1:2c:95:31:92:d3:5b:f8:32:37:82:70:
a8:3f:ec:c4:66:aa:6b:72:94:18:53:e4:9c:08:91:
9a:1a:5c:eb:9e:68:72:86:55:2a:cd:e3:f3:7c:6f:
15:cd:24:d5:b0:c3:87:d1:7c:80:fe:d1:3f:6d:8c:
52:d9:39:81:1c:74:38:02:74:93:ee:4b:96:20:1d:
d4:74:64:99:64:eb:d9:6d:51:1d:92:7e:89:45:e2:
07:2d:4c:11:12:b4:a8:bb:c1:91:e4:32:0b:8c:65:
26:af:3c:35:6b:ef:59:a9:5d:7b:e9:fe:1d:92:66:
98:ed:e7:5b:16:a5:e8:e3:65:86:44:89:61:80:dd:
e5:cc:84:35:51:1a:59:9f:46:9a:7b:91:33:a1:8e:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:D7:10:3D:CD:8D:A2:94:77:F3:64:5C:B0:5B:23:F5:02:00:7A
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:02:94:ef:e0:91:6b:88:d7:e8:24:6c:cb:cb:bf:39:e3:89:
5b:3b:16:5f:d1:ba:c2:ad:2e:3b:d5:05:e1:c5:aa:d4:a3:2c:
c6:f2:11:c4:c7:d1:4c:66:50:91:89:c3:dd:cc:7c:8a:74:a8:
6e:38:c5:19:67:96:e4:bb:1c:7d:cd:e5:8e:78:8f:36:78:bb:
e1:55:3e:5d:4b:23:04:7a:f2:1f:08:b6:d4:b5:3c:7e:5b:ef:
7b:09:42:18:67:7f:37:57:2e:5c:9c:a2:b7:1e:62:36:81:6d:
2d:61:0c:6d:94:04:64:0a:ca:9f:94:47:31:4d:3e:86:e2:e0:
24:c2:37:1f:7c:be:11:d9:3e:c3:70:88:c3:88:8d:26:ad:00:
09:f2:bb:60:9d:87:f5:1f:44:1c:79:69:4b:6a:84:c0:f8:ae:
8b:f6:5c:65:27:ff:0b:d4:d0:31:44:8e:02:3c:8a:c9:3a:7f:
99:ce:b1:0b:0a:76:3c:19:ba:d7:18:73:f9:e3:22:e1:01:98:
0b:0a:5b:27:84:e1:5a:44:a1:98:f6:10:93:11:33:25:ba:77:
9d:6d:1f:8b:59:a0:6a:e7:5a:6b:84:d0:5d:bd:34:25:5a:99:
6f:d6:f9:f8:1f:97:08:02:df:da:0f:e3:b8:fd:48:e7:ef:05:
d2:99:41:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEdUPmasRk+SAQmzYmJkSwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODViYjhhNTA0NDNlNTA0YzQ4NTNjY2UwMjVlZjU4MzQx
YzFkNTAwHhcNMjYxMDA4MjEwMDA4WhcNMjYxMDA5MjEwMDA4WjAzMTEwLwYDVQQD
EygzODY4ZDcxMDNkY2Q4ZGEyOTQ3N2YzNjQ1Y2IwNWIyM2Y1MDIwMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxG2RPpDuJSqvtQj2xRL+qn9GnME
hoRowNbbOMPkL1bxwrvMJ3JfyfNq9efX/eJXZhNijxOobeO9yMLv05UEox8V893S
dwpAEAHzbeOHb0RNqYuFs0vyJvYGDaPjmr0Ki4P6Up8swUWb8YzhLJUxktNb+DI3
gnCoP+zEZqprcpQYU+ScCJGaGlzrnmhyhlUqzePzfG8VzSTVsMOH0XyA/tE/bYxS
2TmBHHQ4AnST7kuWIB3UdGSZZOvZbVEdkn6JReIHLUwRErSou8GR5DILjGUmrzw1
a+9ZqV176f4dkmaY7edbFqXo42WGRIlhgN3lzIQ1URpZn0aae5EzoY4wcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDho1xA9zY2ilHfzZFywWyP1AgB6MB8GA1UdIwQY
MBaAFK+Fu4pQRD5QTEhTzOAl71g0HB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgt
ZmRlYmJjOTI3ZDQwLzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgtZmRlYmJjOTI3ZDQw
LzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewKU7+CR
a4jX6CRsy8u/OeOJWzsWX9G6wq0uO9UF4cWq1KMsxvIRxMfRTGZQkYnD3cx8inSo
bjjFGWeW5Lscfc3ljniPNni74VU+XUsjBHryHwi21LU8flvvewlCGGd/N1cuXJyi
tx5iNoFtLWEMbZQEZArKn5RHMU0+huLgJMI3H3y+Edk+w3CIw4iNJq0ACfK7YJ2H
9R9EHHlpS2qEwPiui/ZcZSf/C9TQMUSOAjyKyTp/mc6xCwp2PBm61xhz+eMi4QGY
CwpbJ4ThWkShmPYQkxEzJbp3nW0fi1mgaudaa4TQXb00JVqZb9b5+B+XCALf2g/j
uP1I5+8F0plB5g==
-----END CERTIFICATE-----
Generated at Fri Oct 9 06:50:11 2026 by rpki-client