Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
File: 470BQW0GPp8si7MOunJUmJ1oyl4.mft (raw, json)
Hash identifier: roaQvbexsu2xpJBqaBW0XJud+6V54Y/J82H9NDvF7k8=
Subject key identifier: 78:6F:5B:00:8D:A0:0A:1C:CB:F3:FA:BA:0E:07:C0:D6:C3:91:E5:91
Authority key identifier: E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
Certificate issuer: /CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Certificate serial: 01A1DD5E2B4C919AEE62B4DF1566E0A41059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
Manifest number: 01E4
Signing time: Sun 15 Nov 2026 04:01:38 +0000
Manifest this update: Sun 15 Nov 2026 04:01:38 +0000
Manifest next update: Mon 16 Nov 2026 04:01:38 +0000
Files and hashes: 1: 470BQW0GPp8si7MOunJUmJ1oyl4.crl (hash: nvEeue/+bxtehHU82vlC8YtUZklxrEYCX2BS7fzuXr8=)
2: pqm9KQxmnlmsEcZ1a4GqPZpyF0M.roa (hash: KCyynhPI7ik936knmtF7PX4p6nVsyuU0oUPtdUxG/Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:2b:4c:91:9a:ee:62:b4:df:15:66:e0:a4:10:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Validity
Not Before: Nov 15 04:01:38 2026 GMT
Not After : Nov 16 04:01:38 2026 GMT
Subject: CN=786f5b008da00a1ccbf3faba0e07c0d6c391e591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:47:be:63:cb:a2:26:cd:56:b9:eb:fe:40:
ed:72:42:95:ce:09:a2:c4:36:3e:fc:8f:0b:4e:3c:
01:4c:61:1e:83:65:16:aa:75:cc:b6:c2:98:ae:e2:
aa:62:4e:b2:7e:0e:e1:42:c5:7a:fc:84:2c:42:74:
3d:0d:6c:78:73:62:21:29:6c:0d:c4:33:15:ad:ef:
89:cd:01:5b:69:4f:cc:12:ed:32:43:98:86:c2:a3:
76:af:e1:bc:61:43:2d:81:b5:52:60:6c:d0:3f:d7:
6f:25:75:f3:5b:c7:d6:77:cf:7c:8f:f1:c2:25:0d:
cb:8e:6c:89:72:c5:25:b9:56:07:ac:b1:30:e1:15:
d9:cf:8d:81:42:97:fc:0b:10:3b:51:0e:3f:94:72:
23:0d:fc:99:50:32:de:1d:b3:3e:72:7b:ca:c6:ef:
f8:34:57:7e:40:58:50:8c:7b:55:85:d3:e7:3e:98:
c2:78:15:59:d0:d3:32:79:bc:d4:4f:90:a6:30:22:
6d:df:a0:8e:5b:f9:cc:02:31:0d:b8:8a:fe:bf:43:
7b:1d:34:26:23:c6:7a:f4:aa:32:b3:a8:63:a5:80:
b3:f9:3e:c9:ed:8b:0f:d7:9a:5e:ac:58:b5:43:28:
0b:c2:c8:fd:53:a4:46:f1:29:d0:b6:9e:1a:a1:91:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:5B:00:8D:A0:0A:1C:CB:F3:FA:BA:0E:07:C0:D6:C3:91:E5:91
X509v3 Authority Key Identifier:
keyid:E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:09:9c:d0:c9:7a:32:f5:2a:0c:13:73:f8:96:6d:cd:69:f1:
59:ad:b2:c3:df:fe:5f:02:34:3f:a5:7b:01:96:99:39:12:88:
2d:29:10:d6:56:5e:fe:3a:d9:5a:06:2b:e6:82:5b:bf:30:38:
5a:84:c6:1f:e3:e5:10:69:84:b5:36:e6:a9:c5:09:a5:08:e2:
2b:16:a0:d5:d5:15:95:bb:ec:07:33:a8:4f:e3:d8:15:0c:37:
9a:53:0c:08:8b:88:c2:42:6b:fe:38:65:eb:85:19:ba:66:0b:
a6:3a:39:1d:f6:35:f6:b7:d4:75:1c:d2:92:db:0d:11:f0:3b:
ee:82:83:6d:79:05:b8:84:75:cd:a3:23:97:d1:52:6e:cc:88:
96:b8:ee:82:aa:04:d9:01:0c:82:c5:51:bf:16:02:7e:69:ad:
51:48:85:af:ce:54:9e:d4:63:d8:21:98:2a:9e:f7:5e:26:7f:
7a:36:d7:17:9e:4f:b7:d3:53:7a:ba:c5:64:fc:6c:96:a8:ae:
46:65:b7:c4:88:3d:cc:42:2e:13:81:e7:a2:aa:7b:33:53:ec:
ab:1e:69:7a:be:81:de:5a:11:3a:3f:5d:75:51:33:5c:51:8f:
35:06:d5:ca:31:62:05:9d:13:46:21:a7:0d:49:0c:0b:c1:4b:
e6:d7:8d:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdXitMkZruYrTfFWbgpBBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmQwMTQxNmQwNjNlOWYyYzhiYjMwZWJhNzI1NDk4OWQ2
OGNhNWUwHhcNMjYxMTE1MDQwMTM4WhcNMjYxMTE2MDQwMTM4WjAzMTEwLwYDVQQD
Eyg3ODZmNWIwMDhkYTAwYTFjY2JmM2ZhYmEwZTA3YzBkNmMzOTFlNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL9HvmPLoibNVrnr/kDtckKVzgmi
xDY+/I8LTjwBTGEeg2UWqnXMtsKYruKqYk6yfg7hQsV6/IQsQnQ9DWx4c2IhKWwN
xDMVre+JzQFbaU/MEu0yQ5iGwqN2r+G8YUMtgbVSYGzQP9dvJXXzW8fWd898j/HC
JQ3LjmyJcsUluVYHrLEw4RXZz42BQpf8CxA7UQ4/lHIjDfyZUDLeHbM+cnvKxu/4
NFd+QFhQjHtVhdPnPpjCeBVZ0NMyebzUT5CmMCJt36COW/nMAjENuIr+v0N7HTQm
I8Z69Koys6hjpYCz+T7J7YsP15perFi1QygLwsj9U6RG8SnQtp4aoZGUDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhvWwCNoAocy/P6ug4HwNbDkeWRMB8GA1UdIwQY
MBaAFOO9AUFtBj6fLIuzDrpyVJidaMpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDcwQlFXMEdQcDhzaTdNT3VuSlVtSjFveWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81YjM5MzktZTQ4NC00NGFiLWI0OGQt
OWM3ZjkyNDJiNmRiLzEvNDcwQlFXMEdQcDhzaTdNT3VuSlVtSjFveWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS81YjM5MzktZTQ4NC00NGFiLWI0OGQtOWM3ZjkyNDJiNmRi
LzEvNDcwQlFXMEdQcDhzaTdNT3VuSlVtSjFveWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAmc0Ml6
MvUqDBNz+JZtzWnxWa2yw9/+XwI0P6V7AZaZORKILSkQ1lZe/jrZWgYr5oJbvzA4
WoTGH+PlEGmEtTbmqcUJpQjiKxag1dUVlbvsBzOoT+PYFQw3mlMMCIuIwkJr/jhl
64UZumYLpjo5HfY19rfUdRzSktsNEfA77oKDbXkFuIR1zaMjl9FSbsyIlrjugqoE
2QEMgsVRvxYCfmmtUUiFr85UntRj2CGYKp73XiZ/ejbXF55Pt9NTerrFZPxslqiu
RmW3xIg9zEIuE4Hnoqp7M1Psqx5per6B3loROj9ddVEzXFGPNQbVyjFiBZ0TRiGn
DUkMC8FL5teNQQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:56:03 2026 by rpki-client