Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: lDEVvCTX6R/0NyEx7+rHR53Er+S0lhtXpPVYwJRmrAI=
Subject key identifier: 3E:78:5B:A8:48:35:B5:A7:B6:FD:02:4A:D0:A8:C3:59:8E:07:D1:0F
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 01A1306AEEC53CBDF90A0079CC2894CAC79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 17AF
Signing time: Mon 12 Oct 2026 14:01:16 +0000
Manifest this update: Mon 12 Oct 2026 14:01:16 +0000
Manifest next update: Tue 13 Oct 2026 14:01:16 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: 7eAKIch8Op5O4o1khPtqI0nLY4eaORSyu41xtaYoS04=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:ee:c5:3c:bd:f9:0a:00:79:cc:28:94:ca:c7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Oct 12 14:01:16 2026 GMT
Not After : Oct 13 14:01:16 2026 GMT
Subject: CN=3e785ba84835b5a7b6fd024ad0a8c3598e07d10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9e:26:65:ec:42:f3:14:58:c7:fa:84:46:6b:
73:c2:77:57:ed:ec:36:2c:1b:cf:68:18:88:71:0b:
f2:11:bd:c4:f5:35:ef:2a:71:73:ba:03:5e:70:22:
76:2a:eb:fb:49:e6:33:b7:cd:9d:22:7b:ce:a5:a6:
17:b1:d9:f0:03:ba:b8:8b:3b:db:5e:9f:70:f9:ff:
c5:31:63:3d:3a:1a:dd:3f:da:0b:4e:94:29:7f:e3:
4a:3f:e6:39:58:91:7c:7c:2a:3f:91:98:5f:1d:a2:
d2:1f:17:90:2f:ce:5d:f0:b4:8e:0e:47:56:d0:23:
a8:d8:d1:db:c0:69:ae:66:df:5d:ae:31:50:1e:ba:
d7:fb:b5:cd:f0:40:33:f4:ad:37:ed:4e:76:aa:62:
00:4f:68:db:0d:00:cc:3c:02:aa:cb:d4:46:8d:4a:
27:1d:a1:8d:2a:86:81:f3:2f:6a:1e:ac:a9:0a:95:
6f:a4:c7:bc:64:21:28:0e:c3:56:a5:19:eb:2b:fe:
51:4b:bf:a3:d1:37:60:7a:0a:b8:db:a0:ec:ba:ca:
21:a2:d0:8e:fa:5e:ee:c3:7a:c8:cd:b0:4f:c7:43:
1c:c5:0f:df:f1:e9:f2:5c:44:60:9b:52:12:46:d9:
35:48:c1:ac:65:6c:6a:13:c4:c7:a6:6b:22:9b:8e:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:5B:A8:48:35:B5:A7:B6:FD:02:4A:D0:A8:C3:59:8E:07:D1:0F
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ff:54:8e:80:f3:7e:ec:97:b3:61:01:88:b4:bf:ac:17:f6:
d7:5d:fb:6f:69:ae:dc:7c:d3:26:8c:b9:b1:cb:8d:a6:9a:e5:
18:f9:86:c2:c6:14:a7:23:cb:60:a1:26:f6:e3:15:02:93:56:
c8:63:11:40:1b:8f:d6:a5:b4:dc:21:3c:5c:a2:d4:72:75:1b:
6d:69:1b:fb:db:f7:e4:df:9a:95:f4:2a:46:a4:d7:da:95:4d:
3b:bc:4d:8b:9e:e5:a9:24:62:ed:88:1a:8c:7c:0e:78:b5:0f:
e8:f1:b3:34:df:2e:16:ee:e2:17:f7:1f:e6:29:bd:ee:db:e7:
69:d6:aa:d1:90:d8:3c:18:bb:54:42:e6:9c:c8:ac:84:30:02:
44:94:1c:4e:28:fe:ce:19:d2:e5:37:db:c0:d4:fc:59:0a:b9:
34:a6:d5:c9:e0:b3:19:b5:b8:96:d5:4a:ed:41:ec:f8:8e:17:
9d:07:a5:a8:ab:7d:ff:c3:47:70:07:c7:9e:e1:6f:33:be:56:
aa:5e:23:4e:67:9e:ca:7d:6d:71:77:1b:16:e9:e1:ac:e5:18:
7a:91:74:6f:5f:78:fb:3c:42:40:43:e3:6e:88:60:89:7c:fc:
98:ba:d3:0e:57:93:ab:1a:09:34:91:f0:82:1a:11:e2:e3:bc:
b5:1b:f6:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwau7FPL35CgB5zCiUysebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjQ3YzExYTNhM2NhZTA2YTE5Mjg2MGE5NmM1MDUzZWMw
NGI1ZGMwHhcNMjYxMDEyMTQwMTE2WhcNMjYxMDEzMTQwMTE2WjAzMTEwLwYDVQQD
EygzZTc4NWJhODQ4MzViNWE3YjZmZDAyNGFkMGE4YzM1OThlMDdkMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z4mZexC8xRYx/qERmtzwndX7ew2
LBvPaBiIcQvyEb3E9TXvKnFzugNecCJ2Kuv7SeYzt82dInvOpaYXsdnwA7q4izvb
Xp9w+f/FMWM9OhrdP9oLTpQpf+NKP+Y5WJF8fCo/kZhfHaLSHxeQL85d8LSODkdW
0COo2NHbwGmuZt9drjFQHrrX+7XN8EAz9K037U52qmIAT2jbDQDMPAKqy9RGjUon
HaGNKoaB8y9qHqypCpVvpMe8ZCEoDsNWpRnrK/5RS7+j0Tdgegq426DsusohotCO
+l7uw3rIzbBPx0McxQ/f8enyXERgm1ISRtk1SMGsZWxqE8THpmsim46+1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD54W6hINbWntv0CStCow1mOB9EPMB8GA1UdIwQY
MBaAFOH0fBGjo8rgahkoYKlsUFPsBLXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzIt
MzFjNzMzMTk3MDczLzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85MDgwNzAtZmQ5NC00YTc1LTk4NzItMzFjNzMzMTk3MDcz
LzEvNGZSOEVhT2p5dUJxR1NoZ3FXeFFVLXdFdGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKv9UjoDz
fuyXs2EBiLS/rBf21137b2mu3HzTJoy5scuNpprlGPmGwsYUpyPLYKEm9uMVApNW
yGMRQBuP1qW03CE8XKLUcnUbbWkb+9v35N+alfQqRqTX2pVNO7xNi57lqSRi7Yga
jHwOeLUP6PGzNN8uFu7iF/cf5im97tvnadaq0ZDYPBi7VELmnMishDACRJQcTij+
zhnS5TfbwNT8WQq5NKbVyeCzGbW4ltVK7UHs+I4XnQelqKt9/8NHcAfHnuFvM75W
ql4jTmeeyn1tcXcbFunhrOUYepF0b194+zxCQEPjbohgiXz8mLrTDleTqxoJNJHw
ghoR4uO8tRv2yg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:40:13 2026 by rpki-client