Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
File: p4kEQNrxw6w4dz6FIVES90twYjI.mft (raw, json)
Hash identifier: +q1J3OvTW33ONDhGEKI2JuylhRsQPsII5n9FV4nIysg=
Subject key identifier: 9D:87:93:AA:31:49:12:B5:3D:F0:F9:01:77:09:E9:9A:FF:43:D0:F3
Authority key identifier: A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
Certificate issuer: /CN=a7890440daf1c3ac38773e85215112f74b706232
Certificate serial: 019ED507437F1D0C38081D1DDF4A5890B80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
Manifest number: 011C
Signing time: Wed 17 Jun 2026 10:01:23 +0000
Manifest this update: Wed 17 Jun 2026 10:01:23 +0000
Manifest next update: Thu 18 Jun 2026 10:01:23 +0000
Files and hashes: 1: U3lhosWDCWkOpFdsH0InZo3L2So.roa (hash: cA9YSxfYf8puSlmrAh+xgnlh5hfoxYmLxjTNe6lxvv0=)
2: p4kEQNrxw6w4dz6FIVES90twYjI.crl (hash: dCAocEqY4eMXpWWkVj00HxAzSlvKXZ3AF94RBq+3EJE=)
3: rbySto4bwasyCSyfLG3tTaOVj_s.roa (hash: wd1Ap/uduw/P7yoJlzMsKGRJqc4D/dsTIBcvCHP1qZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:43:7f:1d:0c:38:08:1d:1d:df:4a:58:90:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7890440daf1c3ac38773e85215112f74b706232
Validity
Not Before: Jun 17 10:01:23 2026 GMT
Not After : Jun 18 10:01:23 2026 GMT
Subject: CN=9d8793aa314912b53df0f9017709e99aff43d0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:1b:ea:fb:c6:8b:ae:d7:c9:72:0b:88:0a:
42:60:4f:8f:98:ff:aa:09:ed:a2:7e:ce:eb:e5:27:
e8:c7:ec:67:f7:f9:f2:70:e5:90:a7:12:ac:65:53:
50:cf:7e:8e:4d:44:42:ac:08:1e:96:05:47:1b:c6:
e0:b4:6f:c0:ff:c6:f6:37:6e:68:cd:53:b5:94:94:
88:31:34:76:4e:32:13:85:b3:ac:1f:fa:b9:85:0d:
e4:bd:8c:33:50:15:29:1c:44:df:48:a0:00:77:5f:
6e:a1:75:1f:08:b4:e5:35:bb:16:e4:08:b2:1a:e8:
8d:f1:7a:b6:4f:1a:c4:f7:74:5d:bb:6f:92:1d:40:
2a:4a:be:b9:69:1c:8a:d7:c1:af:fb:d1:f2:e4:4f:
84:75:60:0a:34:b9:f3:a8:46:65:6e:d8:eb:5a:9c:
ca:b0:40:6c:c5:da:e5:e5:b1:c7:1d:3d:9b:39:74:
d6:cf:4e:57:10:48:0b:47:f8:18:0c:38:89:1a:72:
d5:00:20:2b:cf:35:59:71:1b:82:24:d8:e6:cb:c6:
d3:48:83:96:d5:e5:e6:4f:79:85:8a:3e:59:bb:ba:
0a:96:bd:f1:1d:24:6e:be:3d:a7:36:24:ad:a3:ea:
51:44:55:10:18:47:33:66:0c:9b:d0:65:59:f4:9f:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:93:AA:31:49:12:B5:3D:F0:F9:01:77:09:E9:9A:FF:43:D0:F3
X509v3 Authority Key Identifier:
keyid:A7:89:04:40:DA:F1:C3:AC:38:77:3E:85:21:51:12:F7:4B:70:62:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4kEQNrxw6w4dz6FIVES90twYjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/acc09c-e3dc-4697-ac49-8d97e8785d4f/1/p4kEQNrxw6w4dz6FIVES90twYjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:da:8b:b4:ad:dc:b5:6c:7a:0e:63:59:fa:e3:d3:91:ed:b3:
c4:e6:04:63:24:25:f4:ac:bf:5f:06:0f:e3:4b:b2:ba:60:68:
bd:23:f7:1a:58:b5:cf:37:e4:94:6b:b4:98:1b:a2:8d:44:37:
65:d6:4a:66:b9:39:09:c1:74:20:a1:52:b0:33:54:6b:0c:db:
f6:6d:ec:23:eb:3f:2f:02:3a:b6:6b:49:d1:4a:54:83:82:21:
bd:94:39:03:c6:cc:8b:3a:fc:22:ae:0b:35:92:b8:d8:ff:62:
6e:4f:56:4c:c6:a8:0b:ad:4f:ca:bd:bb:49:75:34:e2:69:6e:
a7:2c:a0:98:2e:3f:09:5d:d2:63:6a:f7:7d:2a:02:01:d8:e5:
d9:de:ab:00:db:7f:52:1a:99:b0:02:92:9b:fd:fa:8b:5d:63:
9c:24:e0:9f:1d:a1:cd:1b:f7:77:2b:47:94:a7:4d:61:80:cc:
26:0e:3e:44:c6:33:ec:33:28:eb:53:89:c8:60:09:1b:2b:b4:
5e:bd:68:d5:47:91:4c:a2:29:02:db:d7:1c:2e:ce:10:6d:a4:
cf:55:10:e0:b9:25:aa:3c:fe:d4:78:91:20:77:1e:5f:38:99:
18:e8:39:c7:8e:84:75:48:6c:54:90:81:b2:28:5b:18:38:13:
2c:85:e2:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VB0N/HQw4CB0d30pYkLgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ODkwNDQwZGFmMWMzYWMzODc3M2U4NTIxNTExMmY3NGI3
MDYyMzIwHhcNMjYwNjE3MTAwMTIzWhcNMjYwNjE4MTAwMTIzWjAzMTEwLwYDVQQD
Eyg5ZDg3OTNhYTMxNDkxMmI1M2RmMGY5MDE3NzA5ZTk5YWZmNDNkMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeAb6vvGi67XyXILiApCYE+PmP+q
Ce2ifs7r5Sfox+xn9/nycOWQpxKsZVNQz36OTURCrAgelgVHG8bgtG/A/8b2N25o
zVO1lJSIMTR2TjIThbOsH/q5hQ3kvYwzUBUpHETfSKAAd19uoXUfCLTlNbsW5Aiy
GuiN8Xq2TxrE93Rdu2+SHUAqSr65aRyK18Gv+9Hy5E+EdWAKNLnzqEZlbtjrWpzK
sEBsxdrl5bHHHT2bOXTWz05XEEgLR/gYDDiJGnLVACArzzVZcRuCJNjmy8bTSIOW
1eXmT3mFij5Zu7oKlr3xHSRuvj2nNiSto+pRRFUQGEczZgyb0GVZ9J9xswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2Hk6oxSRK1PfD5AXcJ6Zr/Q9DzMB8GA1UdIwQY
MBaAFKeJBEDa8cOsOHc+hSFREvdLcGIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDkt
OGQ5N2U4Nzg1ZDRmLzEvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hY2MwOWMtZTNkYy00Njk3LWFjNDktOGQ5N2U4Nzg1ZDRm
LzEvcDRrRVFOcnh3Nnc0ZHo2RklWRVM5MHR3WWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANqLtK3c
tWx6DmNZ+uPTke2zxOYEYyQl9Ky/XwYP40uyumBovSP3Gli1zzfklGu0mBuijUQ3
ZdZKZrk5CcF0IKFSsDNUawzb9m3sI+s/LwI6tmtJ0UpUg4IhvZQ5A8bMizr8Iq4L
NZK42P9ibk9WTMaoC61Pyr27SXU04mlupyygmC4/CV3SY2r3fSoCAdjl2d6rANt/
UhqZsAKSm/36i11jnCTgnx2hzRv3dytHlKdNYYDMJg4+RMYz7DMo61OJyGAJGyu0
Xr1o1UeRTKIpAtvXHC7OEG2kz1UQ4Lklqjz+1HiRIHceXziZGOg5x46EdUhsVJCB
sihbGDgTLIXi4Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:26:40 2026 by rpki-client