Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: EwdC3lqqdrQvcxFlYVtRBcNIcvcL8kWfNP6/3LaDX9U=
Subject key identifier: F2:25:96:AA:3A:D7:5A:33:76:8E:5F:6C:9A:34:F5:23:26:97:8E:52
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 01A102496F4271F20533D76643F08400C399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1A90
Signing time: Sat 03 Oct 2026 15:02:09 +0000
Manifest this update: Sat 03 Oct 2026 15:02:09 +0000
Manifest next update: Sun 04 Oct 2026 15:02:09 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: kQBxUnQXNRu8uD5Iin5P5cOlK3xk3iXHJ4JdPR3UpLY=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:6f:42:71:f2:05:33:d7:66:43:f0:84:00:c3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Oct 3 15:02:09 2026 GMT
Not After : Oct 4 15:02:09 2026 GMT
Subject: CN=f22596aa3ad75a33768e5f6c9a34f52326978e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:1f:63:40:71:13:b5:73:0c:77:22:34:73:
dd:50:3e:81:4a:e8:55:ba:ed:e2:2b:c2:90:d8:86:
8d:2c:1e:25:97:36:79:b8:fd:0f:27:d5:f3:d2:eb:
b2:07:d4:d2:f6:fe:cc:1d:0e:dc:64:ce:ec:4c:39:
10:34:b3:82:8b:77:2d:86:c2:3d:eb:ab:57:a0:a8:
0c:7d:5a:a2:67:97:4f:9f:6f:58:4a:c0:55:73:d0:
3e:67:93:3b:db:2e:9e:dd:a3:69:15:d4:17:a8:4e:
9b:3c:aa:16:e1:c4:24:6d:de:fd:8c:5c:35:2a:c0:
99:d7:96:45:29:25:eb:45:8b:89:32:90:61:26:02:
3c:bc:37:df:ec:a7:ad:4a:b4:2b:23:ee:19:bb:e8:
11:68:05:62:73:7f:b9:a5:7d:5b:fe:6b:2e:c4:6b:
90:ce:17:04:a4:be:c2:35:b4:a0:eb:a2:88:c5:13:
18:db:79:81:4b:f9:c5:19:bb:e5:e0:53:f8:05:bc:
53:0f:93:08:72:10:61:ee:ce:01:9e:43:5e:b3:a2:
8a:29:8d:64:9a:e1:1e:c2:c1:03:29:ac:c4:59:4f:
8e:70:d7:4c:28:6b:93:1e:02:ec:7c:c8:ca:77:95:
5a:3a:27:fe:7f:02:a7:ab:48:a1:a3:31:ae:55:70:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:96:AA:3A:D7:5A:33:76:8E:5F:6C:9A:34:F5:23:26:97:8E:52
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:25:86:27:9a:b5:4b:c0:7b:66:fc:fe:1b:d5:0f:ae:9b:57:
bf:82:c5:d4:e5:8f:bf:0e:f2:8e:f2:1a:e8:8a:1c:dc:16:7d:
e0:5e:44:f1:4f:8a:3e:aa:6d:e7:3b:e8:00:0d:63:8b:c0:4c:
3b:f7:9d:ad:c6:41:c1:a4:7d:ce:b5:68:6f:ff:89:85:61:0b:
d5:eb:bf:9c:43:7d:1f:82:38:57:36:8b:00:d2:1e:99:59:ab:
f0:74:4f:0a:c5:ee:e1:2c:29:28:65:c8:0a:92:e8:79:cc:59:
d2:a1:12:a7:e0:6f:df:21:23:88:43:9b:b4:e9:c6:92:25:4a:
a6:1b:dd:bc:7f:d5:54:21:59:8e:95:b0:25:d0:0a:ae:c6:6d:
dd:75:28:7a:ec:e0:78:c5:ce:27:35:77:10:02:e6:38:e0:17:
d2:4b:5c:9a:34:9c:a0:fe:b2:a0:d4:46:65:f1:98:75:6d:65:
2b:b5:d6:94:62:bc:f1:db:ca:f5:79:74:56:5a:7a:11:20:9f:
4d:8a:3a:5f:a0:a2:64:dc:56:ab:54:07:51:ac:38:31:cb:80:
45:51:15:7f:6f:10:b4:fb:35:85:d7:9c:1b:f7:19:02:ac:6c:
53:4a:eb:42:a5:38:a0:a0:cf:07:09:c0:f6:32:dd:96:d3:c1:
ac:77:e4:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECSW9CcfIFM9dmQ/CEAMOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1
M2Q5NDAwHhcNMjYxMDAzMTUwMjA5WhcNMjYxMDA0MTUwMjA5WjAzMTEwLwYDVQQD
EyhmMjI1OTZhYTNhZDc1YTMzNzY4ZTVmNmM5YTM0ZjUyMzI2OTc4ZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAwfY0BxE7VzDHciNHPdUD6BSuhV
uu3iK8KQ2IaNLB4llzZ5uP0PJ9Xz0uuyB9TS9v7MHQ7cZM7sTDkQNLOCi3cthsI9
66tXoKgMfVqiZ5dPn29YSsBVc9A+Z5M72y6e3aNpFdQXqE6bPKoW4cQkbd79jFw1
KsCZ15ZFKSXrRYuJMpBhJgI8vDff7KetSrQrI+4Zu+gRaAVic3+5pX1b/msuxGuQ
zhcEpL7CNbSg66KIxRMY23mBS/nFGbvl4FP4BbxTD5MIchBh7s4BnkNes6KKKY1k
muEewsEDKazEWU+OcNdMKGuTHgLsfMjKd5VaOif+fwKnq0ihozGuVXB+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIllqo611ozdo5fbJo09SMml45SMB8GA1UdIwQY
MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt
MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1
LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryWGJ5q1
S8B7Zvz+G9UPrptXv4LF1OWPvw7yjvIa6Ioc3BZ94F5E8U+KPqpt5zvoAA1ji8BM
O/edrcZBwaR9zrVob/+JhWEL1eu/nEN9H4I4VzaLANIemVmr8HRPCsXu4SwpKGXI
CpLoecxZ0qESp+Bv3yEjiEObtOnGkiVKphvdvH/VVCFZjpWwJdAKrsZt3XUoeuzg
eMXOJzV3EALmOOAX0ktcmjScoP6yoNRGZfGYdW1lK7XWlGK88dvK9Xl0Vlp6ESCf
TYo6X6CiZNxWq1QHUaw4McuARVEVf28QtPs1hdecG/cZAqxsU0rrQqU4oKDPBwnA
9jLdltPBrHfk2w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:52:39 2026 by rpki-client