Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: ZVfe0LBGpt5buJt5ih3G9sSBBncjympYEWHIGZ8+r2g=
Subject key identifier: C4:BE:F9:D4:CC:C3:B7:EC:3B:66:BA:C7:54:74:DD:A5:93:34:58:F8
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 01A000CAAD367F07000683F0FB5EBB375015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:01:17 +0000
Manifest this update: Fri 14 Aug 2026 15:01:17 +0000
Manifest next update: Sat 15 Aug 2026 15:01:17 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: r0y62KWeATzm5RylDsEmt0swk4Rqcah1L/Ov8auIK88=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:ad:36:7f:07:00:06:83:f0:fb:5e:bb:37:50:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Aug 14 15:01:17 2026 GMT
Not After : Aug 15 15:01:17 2026 GMT
Subject: CN=c4bef9d4ccc3b7ec3b66bac75474dda5933458f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:04:e9:4a:5c:f9:fc:8e:3f:4a:4d:c6:14:
c1:61:61:ed:39:3b:e1:e3:73:93:4f:1e:e7:5e:d9:
35:4c:73:0e:be:d3:fe:94:d2:0f:a7:b3:68:c7:a8:
c8:b8:11:43:3c:10:4d:08:c7:88:4d:4c:b3:fb:ee:
7d:07:c3:51:45:74:a3:c2:08:21:f0:fc:00:a6:a3:
79:6c:59:bf:4f:ac:ee:48:d9:c9:eb:d8:9a:80:f8:
15:35:a9:67:07:ef:aa:92:4b:60:8d:a4:81:34:50:
db:94:34:8c:3d:48:a9:d5:4d:f2:e2:c0:0b:b6:57:
3e:d7:3d:7e:95:62:6c:84:3e:3d:78:de:2c:9e:c5:
2c:38:32:76:8a:90:36:8a:96:67:a7:fb:76:6d:c9:
5c:91:65:f8:98:d1:5a:b1:40:96:96:ca:2b:43:16:
9b:b5:c9:78:bd:28:f3:46:8b:5b:ce:d6:7d:a6:cb:
bd:78:9b:8c:06:0b:96:37:6e:3f:7c:d1:00:6e:71:
19:40:3d:f0:33:d1:da:b8:aa:ee:41:4c:15:cf:32:
38:57:8b:d3:1c:2a:70:a6:e0:1c:b7:99:b9:5e:6c:
56:b1:5d:62:ef:ea:6b:77:72:fe:a1:e1:f6:fe:38:
f2:5d:a8:eb:ed:c3:48:98:81:7b:42:76:90:8d:37:
36:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:F9:D4:CC:C3:B7:EC:3B:66:BA:C7:54:74:DD:A5:93:34:58:F8
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6b:53:da:ef:09:04:fa:8a:f2:03:16:ff:2e:48:b8:a3:6c:
d2:ec:c9:b9:03:c5:6e:6f:96:c2:35:ef:6f:42:77:9f:3c:61:
10:84:19:8a:b1:44:fe:23:97:50:9c:62:17:d0:47:99:8b:7c:
24:11:b0:4d:da:2c:7c:a2:6f:b8:7c:88:12:56:20:d9:ca:94:
1f:76:5c:0c:99:51:65:c9:99:39:78:83:14:fb:9c:71:75:e5:
d0:5c:40:ec:32:34:f5:54:03:39:ee:32:ff:0f:c0:43:ab:29:
e3:a9:62:45:dd:73:69:ab:bf:d0:2f:26:49:91:cf:61:dd:75:
3d:32:bc:43:4a:bd:bf:f7:4a:30:c3:b6:1a:cf:a1:12:82:d2:
ab:83:cd:5d:fc:8c:00:fb:aa:f1:a3:bf:ca:58:9f:13:89:c2:
db:78:aa:a1:7e:4b:ae:93:7f:33:f2:ba:29:11:2e:21:a3:37:
4d:7b:81:17:96:a0:6f:55:9e:bb:43:38:98:f2:f5:ab:5c:c2:
54:7c:75:a6:58:3d:80:42:3a:ed:9f:b8:23:7d:be:18:d8:91:
94:d2:4c:e4:7b:4c:96:59:08:59:6c:1f:06:02:3f:d2:74:6e:
63:01:b0:35:08:50:d8:e8:37:17:5f:85:e8:16:6b:95:e4:9e:
aa:48:0f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyq02fwcABoPw+167N1AVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDc1NjkwZDM5YzgzMDE4MGIzZjU1YzQ5ZDE0MGEyYTA0
ZDM5MTcwHhcNMjYwODE0MTUwMTE3WhcNMjYwODE1MTUwMTE3WjAzMTEwLwYDVQQD
EyhjNGJlZjlkNGNjYzNiN2VjM2I2NmJhYzc1NDc0ZGRhNTkzMzQ1OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts0E6Upc+fyOP0pNxhTBYWHtOTvh
43OTTx7nXtk1THMOvtP+lNIPp7Nox6jIuBFDPBBNCMeITUyz++59B8NRRXSjwggh
8PwApqN5bFm/T6zuSNnJ69iagPgVNalnB++qkktgjaSBNFDblDSMPUip1U3y4sAL
tlc+1z1+lWJshD49eN4snsUsODJ2ipA2ipZnp/t2bclckWX4mNFasUCWlsorQxab
tcl4vSjzRotbztZ9psu9eJuMBguWN24/fNEAbnEZQD3wM9HauKruQUwVzzI4V4vT
HCpwpuAct5m5XmxWsV1i7+prd3L+oeH2/jjyXajr7cNImIF7QnaQjTc2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS++dTMw7fsO2a6x1R03aWTNFj4MB8GA1UdIwQY
MBaAFOHXVpDTnIMBgLP1XEnRQKKgTTkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUt
YjlhMzZlYjllZTIxLzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yZGFkMzUtZGQwYS00ZDYzLThjMWUtYjlhMzZlYjllZTIx
LzEvNGRkV2tOT2Nnd0dBc19WY1NkRkFvcUJOT1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGtT2u8J
BPqK8gMW/y5IuKNs0uzJuQPFbm+WwjXvb0J3nzxhEIQZirFE/iOXUJxiF9BHmYt8
JBGwTdosfKJvuHyIElYg2cqUH3ZcDJlRZcmZOXiDFPuccXXl0FxA7DI09VQDOe4y
/w/AQ6sp46liRd1zaau/0C8mSZHPYd11PTK8Q0q9v/dKMMO2Gs+hEoLSq4PNXfyM
APuq8aO/ylifE4nC23iqoX5LrpN/M/K6KREuIaM3TXuBF5agb1Weu0M4mPL1q1zC
VHx1plg9gEI67Z+4I32+GNiRlNJM5HtMllkIWWwfBgI/0nRuYwGwNQhQ2Og3F1+F
6BZrleSeqkgP5w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:19 2026 by rpki-client