Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: VAQZtUuiD/S2ZKG6cvCmjeRSzj5P8pik3RoMjr+kR/o=
Subject key identifier: A8:47:6B:82:8B:B5:E7:2E:6C:24:CB:E6:8B:33:A2:EE:52:B7:69:19
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 01A1DE70EEEE52CC4FDD806750B89FCA8FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0F6F
Signing time: Sun 15 Nov 2026 09:01:45 +0000
Manifest this update: Sun 15 Nov 2026 09:01:45 +0000
Manifest next update: Mon 16 Nov 2026 09:01:45 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: KLc9xFYn0GmrfJMCIRZeEiwSrvnyY5B0dBS7Q4IexBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:ee:ee:52:cc:4f:dd:80:67:50:b8:9f:ca:8f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Nov 15 09:01:45 2026 GMT
Not After : Nov 16 09:01:45 2026 GMT
Subject: CN=a8476b828bb5e72e6c24cbe68b33a2ee52b76919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bb:db:f0:85:93:f7:74:de:9f:6f:67:40:a2:
c9:02:d6:5e:ce:89:71:50:dc:90:e4:15:32:a4:b3:
10:b1:0d:15:f9:74:39:70:9b:5d:94:f6:65:14:5f:
5b:61:36:f8:e7:f8:2a:b2:fd:89:d2:fb:10:a9:96:
63:8f:3f:20:5d:46:19:4d:76:44:c9:ac:73:4a:ea:
4b:a7:6a:94:a4:21:59:00:ab:38:9d:7b:d2:a3:8b:
5c:35:2b:a0:4a:9a:37:03:fe:76:65:5b:14:dd:5a:
ee:d7:ef:a2:73:0d:a9:ce:6a:55:ae:06:3e:f8:17:
c6:64:b3:4f:24:b5:b1:a0:f6:c3:22:8a:c8:fd:d1:
e6:ec:59:0c:3f:66:0d:39:74:19:f4:e8:95:ea:f7:
fb:2a:cf:8e:3d:a0:b0:4c:a3:11:51:8a:79:cd:aa:
d5:a3:25:c0:c6:e6:2f:24:5c:bf:39:79:0c:35:94:
10:40:9d:2c:d6:01:65:23:b3:ed:2a:a6:84:7d:e0:
30:1a:94:bd:ab:a8:de:0c:42:25:62:30:98:c2:47:
56:80:f1:f7:4a:05:2b:6e:c8:7a:b0:4d:c7:01:55:
12:1d:ca:09:0b:c9:5c:e4:1e:ed:54:69:79:00:f4:
a8:f8:db:7a:8a:0e:8f:93:7b:5d:4d:b0:19:6d:c7:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:6B:82:8B:B5:E7:2E:6C:24:CB:E6:8B:33:A2:EE:52:B7:69:19
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b2:82:10:d6:5c:89:8b:9b:4c:a1:07:20:e1:b6:04:c7:1b:
f7:88:f5:b2:90:de:c0:7b:09:5f:eb:01:46:31:7e:37:73:d3:
35:93:4f:ce:89:82:ea:13:b0:0f:01:70:a2:f8:36:52:96:d1:
4d:e8:f0:ff:a9:58:aa:7c:c7:f7:fe:0a:84:71:6b:5a:ed:9d:
77:f9:95:fa:c2:45:27:5d:e2:62:35:92:55:71:1f:42:be:b0:
41:77:22:e5:65:f3:2c:a6:8c:73:f9:5a:71:49:90:54:67:2e:
d1:26:ae:70:83:99:d4:e4:75:cf:9a:88:0a:16:b9:c2:55:9f:
98:b1:78:14:5c:1c:48:b0:8e:e3:34:80:60:de:4f:f0:fb:5e:
c9:86:85:88:44:42:3a:7f:10:c6:ce:8a:9a:c0:d5:77:c4:13:
99:8b:54:f7:69:0f:65:b1:c4:1a:aa:68:38:a8:11:0e:7e:93:
ea:5e:c3:bf:e4:c7:9f:f2:ca:bb:e9:61:04:78:62:b3:9c:30:
2a:25:95:49:f4:0c:b8:6b:1d:2b:17:da:50:fe:78:31:ee:66:
c9:cd:d5:af:2b:d0:08:2c:d1:68:0f:3a:82:3f:26:30:c1:d8:
8d:8e:f8:e9:c7:9d:66:e8:b8:59:70:8e:81:49:c9:1c:c4:5a:
3c:ce:89:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecO7uUsxP3YBnULifyo/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODViYjhhNTA0NDNlNTA0YzQ4NTNjY2UwMjVlZjU4MzQx
YzFkNTAwHhcNMjYxMTE1MDkwMTQ1WhcNMjYxMTE2MDkwMTQ1WjAzMTEwLwYDVQQD
EyhhODQ3NmI4MjhiYjVlNzJlNmMyNGNiZTY4YjMzYTJlZTUyYjc2OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrvb8IWT93Ten29nQKLJAtZezolx
UNyQ5BUypLMQsQ0V+XQ5cJtdlPZlFF9bYTb45/gqsv2J0vsQqZZjjz8gXUYZTXZE
yaxzSupLp2qUpCFZAKs4nXvSo4tcNSugSpo3A/52ZVsU3Vru1++icw2pzmpVrgY+
+BfGZLNPJLWxoPbDIorI/dHm7FkMP2YNOXQZ9OiV6vf7Ks+OPaCwTKMRUYp5zarV
oyXAxuYvJFy/OXkMNZQQQJ0s1gFlI7PtKqaEfeAwGpS9q6jeDEIlYjCYwkdWgPH3
SgUrbsh6sE3HAVUSHcoJC8lc5B7tVGl5APSo+Nt6ig6Pk3tdTbAZbceDhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhHa4KLtecubCTL5oszou5St2kZMB8GA1UdIwQY
MBaAFK+Fu4pQRD5QTEhTzOAl71g0HB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgt
ZmRlYmJjOTI3ZDQwLzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgtZmRlYmJjOTI3ZDQw
LzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrKCENZc
iYubTKEHIOG2BMcb94j1spDewHsJX+sBRjF+N3PTNZNPzomC6hOwDwFwovg2UpbR
Tejw/6lYqnzH9/4KhHFrWu2dd/mV+sJFJ13iYjWSVXEfQr6wQXci5WXzLKaMc/la
cUmQVGcu0SaucIOZ1OR1z5qICha5wlWfmLF4FFwcSLCO4zSAYN5P8PteyYaFiERC
On8Qxs6KmsDVd8QTmYtU92kPZbHEGqpoOKgRDn6T6l7Dv+THn/LKu+lhBHhis5ww
KiWVSfQMuGsdKxfaUP54Me5myc3VryvQCCzRaA86gj8mMMHYjY746cedZui4WXCO
gUnJHMRaPM6Jog==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:07 2026 by rpki-client