
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: i59ZkH5IZReNorky5n26vC4N/wQFPw/XsK1d9vfqxfk=
Subject key identifier: 19:7B:A8:DC:1A:CE:34:C3:81:20:F4:AC:C0:EE:DF:A6:AF:8B:22:8D
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 01A0D56FB7B4B4D855BA7927A94B53BE7AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 0648
Signing time: Thu 24 Sep 2026 22:01:03 +0000
Manifest this update: Thu 24 Sep 2026 22:01:03 +0000
Manifest next update: Fri 25 Sep 2026 22:01:03 +0000
Files and hashes: 1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
2: Qsmck_Q1LRjc9BFJ4PRK8hkx8lE.roa (hash: tFHy5YIAzvBM7ghe1eYeoeXBK1W4SJOIgpN7n9hkr8Q=)
3: XbyXTy2eUaONfFWw8BChIBWa36M.roa (hash: xn0X7nDb94H6uKDvSt+XEo1r5ooPCWsDBnVyrR9GWjM=)
4: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: kR9fLkoqht/X82x/56EeHen5NfpJiX24VXaKA73to1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:b7:b4:b4:d8:55:ba:79:27:a9:4b:53:be:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Sep 24 22:01:03 2026 GMT
Not After : Sep 25 22:01:03 2026 GMT
Subject: CN=197ba8dc1ace34c38120f4acc0eedfa6af8b228d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:6e:d1:c1:d2:52:31:57:f7:0e:db:c9:d7:
ac:ce:a1:f2:10:e6:86:6b:b4:73:3c:8e:24:7e:5b:
ef:6e:c9:01:3c:8c:96:16:f1:cc:78:f4:4b:53:28:
c8:3b:de:a6:ef:3c:00:80:60:f6:01:7a:ff:ef:b6:
45:b2:0d:50:cf:09:83:6f:8f:7e:5d:76:99:c8:1e:
f2:b8:55:c2:b9:20:ec:ec:29:e5:c0:05:7d:08:21:
75:28:45:a1:15:ac:2f:5e:5f:57:5f:a9:70:65:46:
9f:f0:3f:d9:e2:d0:16:d8:4f:7c:72:37:4d:de:ae:
8d:25:72:2e:7a:ad:7a:c7:7e:2d:df:26:03:6b:32:
47:32:c5:3a:92:41:a0:5e:d4:a2:d6:15:99:5d:e2:
d0:40:6c:8f:dd:92:fd:f3:ba:72:87:c1:04:68:8a:
f6:13:7d:ad:e2:66:e0:5d:f9:57:44:c5:d1:f9:d8:
68:43:38:eb:c5:9f:d2:4c:ca:30:52:b2:7d:65:7e:
cc:df:28:95:28:d4:aa:da:b9:f7:dc:7d:78:d5:0e:
8b:6d:91:51:3f:e3:a7:5d:9e:fb:bb:e0:6d:19:e9:
13:bf:67:3a:fb:a1:75:96:7a:39:fe:4e:3b:81:ee:
ba:1c:db:af:df:e3:a4:68:ca:fe:1a:0f:d3:86:f7:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:A8:DC:1A:CE:34:C3:81:20:F4:AC:C0:EE:DF:A6:AF:8B:22:8D
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:93:f6:eb:07:38:cd:5f:ae:73:93:5e:fa:88:d7:c3:a3:c1:
52:c2:cd:3c:92:39:7c:59:a1:c4:7a:30:e5:d2:04:54:7e:2b:
4e:f1:16:2d:e4:bd:ca:d7:6f:60:80:da:33:ca:24:f8:55:c1:
97:ba:4b:f5:47:81:ec:3d:8b:1b:86:d9:23:a7:7b:da:84:cd:
6c:b1:bd:60:99:40:4d:d7:34:2b:2f:20:ba:ef:b4:41:01:d7:
b3:bb:b8:70:66:01:70:e2:f5:c2:92:24:4a:0f:cf:21:97:d9:
bc:41:08:52:47:1d:91:c8:3d:61:89:96:0a:73:33:1f:19:92:
52:96:72:fe:3d:23:cc:17:c6:98:15:5c:14:9c:37:0d:fd:05:
6f:15:96:fb:07:67:18:9d:f5:4e:85:48:a0:e8:81:ea:67:7d:
66:1e:cb:be:f3:a2:0c:74:5c:96:e7:8d:2c:33:2f:39:3c:2c:
43:0f:b9:55:6a:f1:10:21:8c:f9:00:c1:b6:3d:09:e5:2c:f8:
83:e8:2f:ae:28:1f:8e:3c:10:70:2e:2c:38:c2:63:53:de:86:
62:ac:42:fd:8a:3d:54:95:73:0f:d8:3c:c5:04:70:f4:a8:1a:
06:e2:d7:de:e7:5b:7b:c9:87:7a:84:d8:fa:dc:c4:5c:a8:45:
31:ec:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:08:36 2026 by rpki-client