Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: V/kROubZY44CPD2l4/+LdePIws+Q2K4Z7UHwPKMpbyM=
Subject key identifier: B9:C5:A1:67:92:9C:93:7F:35:64:8A:7B:41:A1:FE:C4:92:30:EA:D6
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 01A0D9BB2228BBD2D8B6B2568699E9284186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0EE8
Signing time: Fri 25 Sep 2026 18:01:54 +0000
Manifest this update: Fri 25 Sep 2026 18:01:54 +0000
Manifest next update: Sat 26 Sep 2026 18:01:54 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: HF0xxLWxHmh4rhpF6OKRu1MvkJZKxAQsN3/gyKRUeX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:22:28:bb:d2:d8:b6:b2:56:86:99:e9:28:41:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Sep 25 18:01:54 2026 GMT
Not After : Sep 26 18:01:54 2026 GMT
Subject: CN=b9c5a167929c937f35648a7b41a1fec49230ead6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:fc:16:59:41:b3:14:66:bf:97:20:dc:26:
97:73:43:b2:7e:8a:01:8d:c5:47:40:c0:58:89:c1:
aa:7e:87:74:e8:c1:1d:95:0a:8c:6a:59:fd:e9:c0:
a0:64:23:e3:23:44:e8:68:ee:6d:02:04:79:be:cd:
da:23:b3:94:04:cd:48:cb:7a:72:0b:c6:cb:30:13:
c0:1c:0c:16:bd:53:66:b1:c7:0f:31:73:bd:14:76:
ca:93:f7:41:b8:fc:64:72:ad:3f:37:60:a5:13:5c:
e0:4c:b1:27:2f:2d:fe:11:82:a9:5b:14:37:10:50:
ac:d1:bf:b7:6c:a0:08:10:ee:f0:2a:e1:a9:aa:56:
82:42:90:f5:19:9e:19:04:a8:2b:41:58:fb:c9:cb:
ca:f6:d5:ef:e3:00:b5:06:4e:05:0f:dc:1d:bc:43:
ec:8a:87:fd:3c:3d:f4:49:1f:4c:6b:19:72:cd:cb:
db:de:da:e1:9b:cc:70:f6:4d:c4:b0:b3:25:e8:54:
01:1a:cd:52:4b:67:76:bf:f3:fb:a0:4b:14:78:ea:
3b:44:02:96:06:d5:af:e3:f0:36:7e:0d:32:34:fc:
04:7d:4c:b7:eb:3d:13:1c:ce:e3:94:1a:85:81:63:
78:e8:34:db:9f:ea:41:a8:52:8d:1b:39:7a:6d:2f:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:A1:67:92:9C:93:7F:35:64:8A:7B:41:A1:FE:C4:92:30:EA:D6
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:17:f6:84:9a:27:67:e3:f2:2c:8e:6b:fd:d3:e2:b8:9a:
f7:6e:35:fb:27:85:3e:82:cc:ec:65:d0:22:c6:2b:4e:39:6d:
fb:eb:66:b8:59:0b:6d:f4:f8:d6:ea:3d:10:05:b0:f6:f2:1a:
16:68:9f:bb:85:f2:af:29:32:27:94:bf:30:b3:1e:58:c0:33:
3d:1d:54:cf:b4:78:56:21:88:81:a2:aa:25:e9:02:ce:09:2d:
fe:54:27:f1:0a:d9:59:c6:46:e4:b8:9d:31:7b:d3:ee:21:42:
8c:5b:38:e0:94:de:c0:6e:9e:41:7b:77:31:5b:cc:a3:08:91:
72:1f:39:bc:c6:2a:e1:fe:77:71:9b:26:fa:23:d6:08:19:40:
79:6e:c8:a8:95:a3:42:7e:f4:2d:cc:de:47:02:8b:bb:d6:a7:
71:22:6b:ec:32:fd:2f:07:f0:7f:9a:7a:58:7b:22:eb:3a:88:
49:06:1e:f1:03:20:cc:cf:c7:52:d8:65:1e:f3:c7:d9:01:30:
80:4f:1e:5a:44:60:10:cd:24:09:a1:4a:df:a5:84:45:5f:94:
de:98:6a:13:34:94:d4:d1:81:9c:34:43:31:6d:8a:f1:f2:09:
73:98:55:49:ae:32:90:c0:3b:27:68:e0:5a:3d:d4:29:9d:46:
f2:2b:d1:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZuyIou9LYtrJWhpnpKEGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODViYjhhNTA0NDNlNTA0YzQ4NTNjY2UwMjVlZjU4MzQx
YzFkNTAwHhcNMjYwOTI1MTgwMTU0WhcNMjYwOTI2MTgwMTU0WjAzMTEwLwYDVQQD
EyhiOWM1YTE2NzkyOWM5MzdmMzU2NDhhN2I0MWExZmVjNDkyMzBlYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP38FllBsxRmv5cg3CaXc0OyfooB
jcVHQMBYicGqfod06MEdlQqMaln96cCgZCPjI0ToaO5tAgR5vs3aI7OUBM1Iy3py
C8bLMBPAHAwWvVNmsccPMXO9FHbKk/dBuPxkcq0/N2ClE1zgTLEnLy3+EYKpWxQ3
EFCs0b+3bKAIEO7wKuGpqlaCQpD1GZ4ZBKgrQVj7ycvK9tXv4wC1Bk4FD9wdvEPs
iof9PD30SR9Maxlyzcvb3trhm8xw9k3EsLMl6FQBGs1SS2d2v/P7oEsUeOo7RAKW
BtWv4/A2fg0yNPwEfUy36z0THM7jlBqFgWN46DTbn+pBqFKNGzl6bS+e+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnFoWeSnJN/NWSKe0Gh/sSSMOrWMB8GA1UdIwQY
MBaAFK+Fu4pQRD5QTEhTzOAl71g0HB1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgt
ZmRlYmJjOTI3ZDQwLzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zZGYwYjYtNDdjOS00MGZlLTgzNTgtZmRlYmJjOTI3ZDQw
LzEvcjRXN2lsQkVQbEJNU0ZQTTRDWHZXRFFjSFZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdMX9oSa
J2fj8iyOa/3T4ria9241+yeFPoLM7GXQIsYrTjlt++tmuFkLbfT41uo9EAWw9vIa
Fmifu4XyrykyJ5S/MLMeWMAzPR1Uz7R4ViGIgaKqJekCzgkt/lQn8QrZWcZG5Lid
MXvT7iFCjFs44JTewG6eQXt3MVvMowiRch85vMYq4f53cZsm+iPWCBlAeW7IqJWj
Qn70LczeRwKLu9ancSJr7DL9Lwfwf5p6WHsi6zqISQYe8QMgzM/HUthlHvPH2QEw
gE8eWkRgEM0kCaFK36WERV+U3phqEzSU1NGBnDRDMW2K8fIJc5hVSa4ykMA7J2jg
Wj3UKZ1G8ivRBA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:27:09 2026 by rpki-client