Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: I7UaT/kveLNbpUWkSLp41nWkkJm3P3DcvmviCkYup6s=
Subject key identifier: B9:60:3A:41:97:FC:E2:A4:F1:A1:C4:F2:93:A4:B0:F3:DF:1E:AF:4B
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 01A0D426CC6FD9E84F187AD70CDC4F999579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 0226
Signing time: Thu 24 Sep 2026 16:01:47 +0000
Manifest this update: Thu 24 Sep 2026 16:01:47 +0000
Manifest next update: Fri 25 Sep 2026 16:01:47 +0000
Files and hashes: 1: iX6vy1XcuPqqbDz8w-InkH2wG7I.roa (hash: GqKpcRA3VOR2P5FWA83zgHTmjRMOW1fhvmM6tUVqgDI=)
2: jcRzJUg7IUVEUlfjHqL1NEbulJY.roa (hash: 043yV8J6dMsTpPpYvQ/xWssybIOO8FTRI8kOXFFcDXA=)
3: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: mi8zkVg3n8MIkjD57xz5oNEoEFM+rFyO73azr1UzJ1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:cc:6f:d9:e8:4f:18:7a:d7:0c:dc:4f:99:95:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Sep 24 16:01:47 2026 GMT
Not After : Sep 25 16:01:47 2026 GMT
Subject: CN=b9603a4197fce2a4f1a1c4f293a4b0f3df1eaf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:59:bb:a4:b4:33:43:86:42:06:8e:5a:01:
9d:00:5a:87:99:a9:7c:83:3a:2a:ab:c5:3f:e7:88:
3a:96:38:44:c0:9a:b2:41:f1:1a:a3:1f:46:18:5c:
72:72:82:13:9a:ce:11:ca:7a:d0:3c:43:1b:ca:cd:
92:2a:9f:e7:12:6f:3b:71:a9:62:64:6c:54:57:cf:
1d:42:83:99:3a:26:29:df:e1:4d:dd:4c:9c:46:c2:
39:9c:6b:16:b8:9a:8e:20:35:53:21:87:22:c8:8c:
9a:c6:04:5a:9e:1f:2f:76:56:1a:59:f5:91:e2:d2:
84:7e:c6:3e:9e:76:00:d9:b0:7c:13:46:f0:32:ba:
a9:69:79:7d:88:9b:4e:1c:3c:15:d5:b3:03:89:f9:
fb:94:08:8f:8a:0a:61:d9:a5:d2:79:e8:03:eb:47:
b2:71:db:2d:ec:6f:86:f6:4c:3d:53:b8:fd:75:55:
72:eb:b8:75:d4:da:ed:f1:ac:b9:be:24:a1:79:6e:
a2:67:d6:54:fe:89:3c:ae:4c:22:6f:ee:51:82:35:
9e:aa:25:69:9a:40:53:06:be:ca:71:4d:fd:c9:1e:
96:ba:74:41:a0:d8:f9:83:95:99:87:f2:a2:3b:8a:
61:de:56:f5:28:15:fb:c8:9b:2f:d8:f7:3e:2e:b8:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:3A:41:97:FC:E2:A4:F1:A1:C4:F2:93:A4:B0:F3:DF:1E:AF:4B
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ec:09:c4:5a:b7:3b:f4:b0:b7:08:0e:c8:b4:b0:ca:75:61:
55:b6:59:fb:27:b5:9f:ef:8f:a9:4f:a5:13:42:46:82:cf:43:
30:4f:6a:82:0f:cd:c4:77:a8:a9:e5:88:6d:34:94:a6:fb:8a:
58:6c:79:ee:7b:67:03:ea:df:48:ba:87:74:20:93:d9:d8:42:
94:da:6e:82:51:fb:14:8c:2a:bb:55:de:6d:1b:55:96:21:ae:
5f:79:55:e9:e7:01:25:38:4b:f7:ba:0f:52:76:44:4c:06:87:
1e:66:31:7a:47:c1:76:46:a4:2b:db:00:7d:22:55:b2:5a:b3:
57:1c:f7:b9:3d:d6:11:50:62:5d:7f:77:e3:22:32:fc:71:2a:
ee:e6:5c:45:04:68:97:12:7c:67:01:19:8c:aa:84:8e:04:e4:
8d:33:d3:90:03:a0:6e:ca:b0:7f:30:be:ba:7e:3a:fc:f0:6a:
d6:f7:81:d4:0b:2c:89:de:f8:f8:b8:52:16:fa:49:b9:74:99:
b6:1b:6b:89:ae:0e:9c:b3:fa:ae:97:6c:21:90:31:81:e4:61:
7b:0e:c2:5c:ce:b7:5f:ac:6f:5e:a3:13:74:13:f1:f8:79:04:
c2:85:71:76:e6:2a:5d:22:6e:21:48:8b:fe:e8:0c:04:9a:38:
af:ad:d6:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJsxv2ehPGHrXDNxPmZV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ODkwNDQwZGFmMWMzYWMzODc3M2U4NTIxNTExMmY3NGI3
MDYyMzIwHhcNMjYwOTI0MTYwMTQ3WhcNMjYwOTI1MTYwMTQ3WjAzMTEwLwYDVQQD
EyhiOTYwM2E0MTk3ZmNlMmE0ZjFhMWM0ZjI5M2E0YjBmM2RmMWVhZjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H5Zu6S0M0OGQgaOWgGdAFqHmal8
gzoqq8U/54g6ljhEwJqyQfEaox9GGFxycoITms4RynrQPEMbys2SKp/nEm87cali
ZGxUV88dQoOZOiYp3+FN3UycRsI5nGsWuJqOIDVTIYciyIyaxgRanh8vdlYaWfWR
4tKEfsY+nnYA2bB8E0bwMrqpaXl9iJtOHDwV1bMDifn7lAiPigph2aXSeegD60ey
cdst7G+G9kw9U7j9dVVy67h11Nrt8ay5viSheW6iZ9ZU/ok8rkwib+5RgjWeqiVp
mkBTBr7KcU39yR6WunRBoNj5g5WZh/KiO4ph3lb1KBX7yJsv2Pc+LrjzEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlgOkGX/OKk8aHE8pOksPPfHq9LMB8GA1UdIwQY
MBaAFKeJBEDa8cOsOHc+hSFREvdLcGIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDkt
OGQ5N2U4Nzg1ZDRmLzEvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDktOGQ5N2U4Nzg1ZDRm
LzEvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARewJxFq3
O/SwtwgOyLSwynVhVbZZ+ye1n++PqU+lE0JGgs9DME9qgg/NxHeoqeWIbTSUpvuK
WGx57ntnA+rfSLqHdCCT2dhClNpuglH7FIwqu1XebRtVliGuX3lV6ecBJThL97oP
UnZETAaHHmYxekfBdkakK9sAfSJVslqzVxz3uT3WEVBiXX934yIy/HEq7uZcRQRo
lxJ8ZwEZjKqEjgTkjTPTkAOgbsqwfzC+un46/PBq1veB1Assid74+LhSFvpJuXSZ
thtria4OnLP6rpdsIZAxgeRhew7CXM63X6xvXqMTdBPx+HkEwoVxduYqXSJuIUiL
/ugMBJo4r63WtA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:09:14 2026 by rpki-client