Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: pc4t3judQP/LHFDOQJ2FYANN+gj294EQYaB8ejdVHDE=
Subject key identifier: 00:61:F6:4F:E6:F6:43:1B:8C:5F:75:51:FF:1B:67:5A:54:4E:85:1F
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 01A00093BE6FA209A5D48EDF0B77C4AA638A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 14:01:17 +0000
Manifest this update: Fri 14 Aug 2026 14:01:17 +0000
Manifest next update: Sat 15 Aug 2026 14:01:17 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: lVMt6T5LkYjEY6ph2EUUSxgGrsAMa6dMVXZ4i05SCUg=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:be:6f:a2:09:a5:d4:8e:df:0b:77:c4:aa:63:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Aug 14 14:01:17 2026 GMT
Not After : Aug 15 14:01:17 2026 GMT
Subject: CN=0061f64fe6f6431b8c5f7551ff1b675a544e851f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:cc:3c:2b:56:98:e1:45:1b:75:92:b3:ed:
86:ff:77:82:7b:5b:2e:a8:06:34:75:83:2f:09:41:
91:82:85:f3:27:96:13:ae:16:00:8c:47:5e:0d:1e:
8b:8c:0b:a6:27:51:97:c9:3b:78:a4:f5:79:c4:27:
0d:a7:8e:ac:9e:57:ce:c0:48:b0:5d:0f:83:9a:1f:
e4:73:d3:65:fb:07:9c:b2:dc:66:91:a2:25:eb:1c:
4e:30:ee:95:16:87:d5:88:38:55:58:a8:68:60:8f:
39:ca:07:7d:9d:c9:e4:75:6c:02:23:fc:b2:88:d5:
cf:56:31:c8:3f:ef:58:7c:61:67:63:6d:a7:b2:3b:
20:1f:9f:bd:5c:a4:03:be:5a:84:cf:9c:71:64:e5:
81:e7:39:10:dd:3e:7c:e5:75:91:58:d9:c3:43:88:
eb:2f:63:af:04:38:1f:df:8b:90:6d:04:95:e3:25:
82:23:78:ac:e3:b8:b6:ad:a1:01:c3:48:67:21:8a:
99:d5:5c:3e:93:37:84:7a:dc:23:9d:47:a6:92:f2:
26:90:d5:8a:2e:a9:b3:94:5c:45:f9:b3:f9:97:42:
f9:72:ff:78:ce:e9:ed:37:09:36:80:47:dd:8f:74:
e3:a8:3e:34:55:c0:28:1d:6a:37:44:0b:65:cb:dc:
a3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:61:F6:4F:E6:F6:43:1B:8C:5F:75:51:FF:1B:67:5A:54:4E:85:1F
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6f:fb:41:50:7f:ea:01:31:2a:a0:a0:af:22:0a:24:e8:8c:
af:18:95:3c:d5:cf:40:51:14:0a:5c:a5:af:50:2f:9b:ec:41:
87:6e:a8:c1:b9:d8:1b:5b:8f:cc:e9:6f:26:82:56:fd:f7:e6:
8d:b5:65:a5:09:f7:68:ac:a6:3e:bc:e4:35:b8:b8:ef:21:47:
af:d9:c1:9f:bc:bb:63:3e:7c:f9:84:dc:a8:f5:7c:c7:ef:7e:
82:2a:02:7d:17:af:b2:b8:b0:2e:df:ee:b1:cc:a4:05:ae:2e:
84:7f:63:b2:c0:ad:ae:9b:bb:a3:ba:bd:bc:0e:5e:e4:fe:ba:
db:5e:ff:79:2c:28:2f:b2:ec:4a:70:63:f5:30:9f:06:84:28:
75:89:01:ea:f8:73:56:5f:54:ea:42:f2:7e:a2:aa:1d:2a:7e:
13:5b:b5:3a:5e:13:61:f3:d2:1b:8a:37:2e:78:20:1e:61:47:
14:5c:2b:0d:ee:91:86:e4:d9:f1:18:b2:a5:60:17:d9:fb:79:
4a:40:bf:3a:8b:9d:14:85:b5:c4:94:d5:0c:15:41:aa:0b:73:
4d:05:98:a6:b9:ed:35:57:94:88:78:cf:e0:d4:8b:ff:fa:01:
78:ce:26:17:66:f3:8b:82:8f:64:b0:ab:95:71:9d:21:a2:50:
a7:0d:10:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk75vogml1I7fC3fEqmOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2
OGVmMTcwHhcNMjYwODE0MTQwMTE3WhcNMjYwODE1MTQwMTE3WjAzMTEwLwYDVQQD
EygwMDYxZjY0ZmU2ZjY0MzFiOGM1Zjc1NTFmZjFiNjc1YTU0NGU4NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihzMPCtWmOFFG3WSs+2G/3eCe1su
qAY0dYMvCUGRgoXzJ5YTrhYAjEdeDR6LjAumJ1GXyTt4pPV5xCcNp46snlfOwEiw
XQ+Dmh/kc9Nl+wecstxmkaIl6xxOMO6VFofViDhVWKhoYI85ygd9ncnkdWwCI/yy
iNXPVjHIP+9YfGFnY22nsjsgH5+9XKQDvlqEz5xxZOWB5zkQ3T585XWRWNnDQ4jr
L2OvBDgf34uQbQSV4yWCI3is47i2raEBw0hnIYqZ1Vw+kzeEetwjnUemkvImkNWK
LqmzlFxF+bP5l0L5cv94zuntNwk2gEfdj3TjqD40VcAoHWo3RAtly9yj2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABh9k/m9kMbjF91Uf8bZ1pUToUfMB8GA1UdIwQY
MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt
OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3
LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgW/7QVB/
6gExKqCgryIKJOiMrxiVPNXPQFEUClylr1Avm+xBh26owbnYG1uPzOlvJoJW/ffm
jbVlpQn3aKymPrzkNbi47yFHr9nBn7y7Yz58+YTcqPV8x+9+gioCfRevsriwLt/u
scykBa4uhH9jssCtrpu7o7q9vA5e5P66217/eSwoL7LsSnBj9TCfBoQodYkB6vhz
Vl9U6kLyfqKqHSp+E1u1Ol4TYfPSG4o3LnggHmFHFFwrDe6RhuTZ8RiypWAX2ft5
SkC/OoudFIW1xJTVDBVBqgtzTQWYprntNVeUiHjP4NSL//oBeM4mF2bzi4KPZLCr
lXGdIaJQpw0QCg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:38 2026 by rpki-client