Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: uZC6q0oi2HmR3su1cvpIwGuNcC5uI24mjcgatRXYF0A=
Subject key identifier: 33:81:BE:FC:51:A3:16:1D:ED:49:C9:A9:DB:BE:7A:2C:DC:FD:EE:AE
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 01A0CFA3CC43BC75572E0FC60B5678939C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 0645
Signing time: Wed 23 Sep 2026 19:00:13 +0000
Manifest this update: Wed 23 Sep 2026 19:00:13 +0000
Manifest next update: Thu 24 Sep 2026 19:00:13 +0000
Files and hashes: 1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
2: Qsmck_Q1LRjc9BFJ4PRK8hkx8lE.roa (hash: tFHy5YIAzvBM7ghe1eYeoeXBK1W4SJOIgpN7n9hkr8Q=)
3: XbyXTy2eUaONfFWw8BChIBWa36M.roa (hash: xn0X7nDb94H6uKDvSt+XEo1r5ooPCWsDBnVyrR9GWjM=)
4: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: 7aIKpTJ3h3AGS/Vjbag9UBaskFATYDYVODaiMWqOxUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:cc:43:bc:75:57:2e:0f:c6:0b:56:78:93:9c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Sep 23 19:00:13 2026 GMT
Not After : Sep 24 19:00:13 2026 GMT
Subject: CN=3381befc51a3161ded49c9a9dbbe7a2cdcfdeeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:e5:ab:86:47:4f:79:70:22:5e:75:d5:30:
32:bd:24:09:e4:8d:93:b0:71:83:b4:d7:d8:aa:23:
f0:c6:05:53:7b:54:12:c4:ca:dc:cd:27:3d:fb:c6:
8b:c9:b1:13:8c:75:dd:f4:63:24:04:3e:d8:bd:e9:
4a:b2:fd:60:d1:7a:01:0d:2e:c5:4c:ec:dc:96:50:
e9:ab:ce:d6:f2:72:4a:8f:e6:45:45:b8:fd:75:d0:
39:c6:75:bf:3b:15:ba:f6:9a:ae:d5:3f:00:61:85:
c5:93:30:33:a8:98:93:2d:6a:60:80:c0:3e:b4:6d:
a4:ee:3c:3e:89:63:cf:0c:00:4d:84:10:6b:81:82:
2a:e2:58:83:72:61:12:1b:00:c8:d8:90:66:6c:21:
45:4b:c1:e2:de:6b:23:30:5c:04:ba:69:c0:d9:95:
64:71:16:70:9d:59:c6:cf:9a:09:6b:a1:c4:5f:9d:
d7:1d:57:b1:a9:10:aa:ac:f2:1e:9b:4c:9c:42:fe:
1d:38:61:7d:e3:2e:2b:ce:56:5b:d1:4f:99:14:3b:
c1:69:ff:ba:28:a0:82:57:dc:8d:87:e4:56:61:e5:
d6:41:ca:eb:92:44:f8:ea:21:aa:5c:3c:3b:ff:83:
b2:a6:ea:31:81:6c:8d:8e:2f:9c:df:79:f9:26:92:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:BE:FC:51:A3:16:1D:ED:49:C9:A9:DB:BE:7A:2C:DC:FD:EE:AE
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:07:00:58:e7:83:cb:dc:1f:88:5b:bb:ab:d3:38:24:02:f2:
6d:ea:8a:33:a4:26:29:98:eb:3d:74:5c:50:64:48:5b:b4:6b:
18:a5:76:47:d6:53:9b:78:fd:14:d4:e2:81:b0:47:b9:1f:15:
c8:ac:4b:03:70:91:a8:fe:44:81:15:2c:0a:c0:a4:d8:c9:47:
92:c1:e9:c1:9e:fd:46:2d:47:0a:73:97:e2:b7:d3:be:8e:2f:
19:ba:f9:0c:40:20:06:ff:6e:cf:66:6c:f6:c1:6a:53:b2:fe:
cd:df:bb:3d:68:5b:84:1d:5f:c2:39:b5:8e:4d:4c:48:7f:5a:
31:04:11:2d:d8:2a:fd:cd:e6:aa:4f:f0:af:e6:84:ad:9b:ec:
e9:7a:7a:95:c2:eb:2a:bd:11:21:9e:1b:f2:a3:84:25:2a:63:
c9:90:2a:41:b3:7f:f5:51:44:96:94:f2:42:fd:81:18:dc:b1:
8b:fb:f8:b0:e9:b6:e9:92:06:13:27:31:f8:df:80:39:6b:de:
3f:fb:bc:6c:87:91:f5:3a:ab:7a:d8:e4:4e:97:4b:12:28:33:
6d:a8:56:3e:45:1f:fb:f9:3e:38:0a:26:d2:9d:c0:1d:f7:ee:
6f:85:a0:f1:1a:41:02:57:b4:a4:d2:8b:9b:1d:d8:83:6b:3b:
2d:26:4d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPo8xDvHVXLg/GC1Z4k5wJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODg4NDlhMmViNWU5ZGQ1NzFhOGU3NDNiZWQ3Yjk1MTNk
N2ExMjEwHhcNMjYwOTIzMTkwMDEzWhcNMjYwOTI0MTkwMDEzWjAzMTEwLwYDVQQD
EygzMzgxYmVmYzUxYTMxNjFkZWQ0OWM5YTlkYmJlN2EyY2RjZmRlZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t3lq4ZHT3lwIl511TAyvSQJ5I2T
sHGDtNfYqiPwxgVTe1QSxMrczSc9+8aLybETjHXd9GMkBD7YvelKsv1g0XoBDS7F
TOzcllDpq87W8nJKj+ZFRbj9ddA5xnW/OxW69pqu1T8AYYXFkzAzqJiTLWpggMA+
tG2k7jw+iWPPDABNhBBrgYIq4liDcmESGwDI2JBmbCFFS8Hi3msjMFwEumnA2ZVk
cRZwnVnGz5oJa6HEX53XHVexqRCqrPIem0ycQv4dOGF94y4rzlZb0U+ZFDvBaf+6
KKCCV9yNh+RWYeXWQcrrkkT46iGqXDw7/4OypuoxgWyNji+c33n5JpIsIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOBvvxRoxYd7UnJqdu+eizc/e6uMB8GA1UdIwQY
MBaAFL+IhJoutendVxqOdDvte5UT16EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYt
MjM3MzliNWZkODRjLzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYtMjM3MzliNWZkODRj
LzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwcAWOeD
y9wfiFu7q9M4JALybeqKM6QmKZjrPXRcUGRIW7RrGKV2R9ZTm3j9FNTigbBHuR8V
yKxLA3CRqP5EgRUsCsCk2MlHksHpwZ79Ri1HCnOX4rfTvo4vGbr5DEAgBv9uz2Zs
9sFqU7L+zd+7PWhbhB1fwjm1jk1MSH9aMQQRLdgq/c3mqk/wr+aErZvs6Xp6lcLr
Kr0RIZ4b8qOEJSpjyZAqQbN/9VFElpTyQv2BGNyxi/v4sOm26ZIGEycx+N+AOWve
P/u8bIeR9TqretjkTpdLEigzbahWPkUf+/k+OAom0p3AHffub4Wg8RpBAle0pNKL
mx3Yg2s7LSZNlg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:02:22 2026 by rpki-client