Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: x9gU4mUdLF0+tY2fbBVloIgBTkx3GCptKr0TJij+MSk=
Subject key identifier: B6:38:89:6C:81:CE:3D:1B:74:4E:75:26:A0:36:21:D9:BF:D7:6F:05
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 01A1DF838A1EE88489A7882C760CBAED6329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 14:01:41 +0000
Manifest this update: Sun 15 Nov 2026 14:01:41 +0000
Manifest next update: Mon 16 Nov 2026 14:01:41 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: RP8LlsSJX/OFQbJm7ReDBY5yVcrPoFKJh41Mem5zaQs=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:8a:1e:e8:84:89:a7:88:2c:76:0c:ba:ed:63:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Nov 15 14:01:41 2026 GMT
Not After : Nov 16 14:01:41 2026 GMT
Subject: CN=b638896c81ce3d1b744e7526a03621d9bfd76f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:65:ed:fb:00:37:04:a8:fa:a2:02:05:9d:
58:25:e4:19:d6:55:b8:24:b3:1c:db:a3:fa:aa:8f:
a1:34:19:8d:72:ad:82:0a:25:6a:3a:1a:5d:cb:d8:
68:63:b8:eb:74:e5:78:c2:0b:c5:52:ba:9c:6a:7a:
b7:98:17:41:85:bd:25:c4:f3:4c:f4:42:cb:c5:e4:
57:a0:1a:90:b7:0f:c6:6b:a8:f6:54:ad:ea:f3:b2:
61:89:76:b3:48:23:bf:2e:96:b6:5f:d6:f9:19:7d:
5a:30:6b:73:d5:de:35:bc:0b:46:8f:bd:1c:e2:fb:
f8:fa:31:61:2f:44:77:38:5f:e2:d7:5a:65:8b:c8:
eb:08:28:91:4b:54:5d:02:f3:4f:e1:8b:71:3a:e3:
ff:28:d5:85:a7:60:76:21:50:ad:22:ed:f1:e3:ec:
75:32:17:d2:24:c1:26:f3:36:0f:96:ae:66:e8:a5:
87:fe:bc:3a:2c:01:7d:76:14:55:af:32:f4:be:bd:
7e:0e:1c:1c:b2:ee:18:db:f5:ff:73:75:2b:19:03:
be:ca:a5:26:a9:f4:9b:ab:c9:2c:db:38:36:23:b7:
19:cf:4f:af:cf:f9:da:19:8e:d7:57:65:65:41:95:
57:e8:b9:3a:3e:da:b4:70:88:e0:03:e1:75:a7:44:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:89:6C:81:CE:3D:1B:74:4E:75:26:A0:36:21:D9:BF:D7:6F:05
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:60:53:37:54:6d:5f:97:14:e2:43:95:db:37:9c:d1:dd:e3:
07:a9:7f:1c:2a:3c:b8:9d:6d:8e:7b:9c:53:97:4d:5a:84:0f:
4a:25:d4:6e:35:57:fc:28:d7:2e:69:06:29:00:bf:b0:45:29:
b5:af:d5:10:de:b7:89:17:b8:51:f7:a2:f2:33:7b:68:52:e6:
b8:45:bc:89:e2:94:00:b3:96:ca:f7:36:39:41:50:aa:e1:81:
ee:3a:c1:13:59:48:f9:eb:9f:78:d1:ee:46:92:1f:d4:83:a1:
89:bf:7b:e0:5c:2f:84:03:6a:35:bd:e9:b9:b5:cd:7f:8c:a4:
70:38:c1:6e:8c:b6:35:16:ea:e5:68:52:16:38:9d:4e:cd:cc:
59:5f:92:aa:c2:32:c0:aa:56:a0:7f:5c:f2:96:3a:c2:a5:7c:
27:7a:33:9f:59:61:15:48:1b:35:0f:c0:39:f7:50:4e:50:c9:
6d:67:eb:71:66:5b:ab:9c:75:5c:b5:32:7f:af:06:d9:ae:c3:
64:c1:d1:2e:be:7a:9a:9f:e7:29:6d:6d:05:bb:2a:97:76:ef:
ec:da:a0:f0:90:ec:e9:0c:94:27:5d:4c:78:50:eb:a2:b5:37:
6c:59:69:d7:9c:21:21:ad:1e:30:2b:0c:80:e8:e4:f0:b6:23:
79:b7:17:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfg4oe6ISJp4gsdgy67WMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2
OGVmMTcwHhcNMjYxMTE1MTQwMTQxWhcNMjYxMTE2MTQwMTQxWjAzMTEwLwYDVQQD
EyhiNjM4ODk2YzgxY2UzZDFiNzQ0ZTc1MjZhMDM2MjFkOWJmZDc2ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa1l7fsANwSo+qICBZ1YJeQZ1lW4
JLMc26P6qo+hNBmNcq2CCiVqOhpdy9hoY7jrdOV4wgvFUrqcanq3mBdBhb0lxPNM
9ELLxeRXoBqQtw/Ga6j2VK3q87JhiXazSCO/Lpa2X9b5GX1aMGtz1d41vAtGj70c
4vv4+jFhL0R3OF/i11pli8jrCCiRS1RdAvNP4YtxOuP/KNWFp2B2IVCtIu3x4+x1
MhfSJMEm8zYPlq5m6KWH/rw6LAF9dhRVrzL0vr1+Dhwcsu4Y2/X/c3UrGQO+yqUm
qfSbq8ks2zg2I7cZz0+vz/naGY7XV2VlQZVX6Lk6Ptq0cIjgA+F1p0T25wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY4iWyBzj0bdE51JqA2Idm/128FMB8GA1UdIwQY
MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt
OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3
LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhmBTN1Rt
X5cU4kOV2zec0d3jB6l/HCo8uJ1tjnucU5dNWoQPSiXUbjVX/CjXLmkGKQC/sEUp
ta/VEN63iRe4Ufei8jN7aFLmuEW8ieKUALOWyvc2OUFQquGB7jrBE1lI+eufeNHu
RpIf1IOhib974FwvhANqNb3pubXNf4ykcDjBboy2NRbq5WhSFjidTs3MWV+SqsIy
wKpWoH9c8pY6wqV8J3ozn1lhFUgbNQ/AOfdQTlDJbWfrcWZbq5x1XLUyf68G2a7D
ZMHRLr56mp/nKW1tBbsql3bv7Nqg8JDs6QyUJ11MeFDrorU3bFlp15whIa0eMCsM
gOjk8LYjebcXpw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:26:16 2026 by rpki-client