Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: 3lNJcFvUMJL0VhO3UfSda6DlbZeoA/+IrcOgaupN88Q=
Subject key identifier: 04:7A:D6:17:6A:B1:24:B5:12:D9:0D:CA:65:75:7B:55:4B:A6:6B:AF
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 01A0BDD506F176A347F3A9C66EBC482EF371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 0638
Signing time: Sun 20 Sep 2026 08:00:49 +0000
Manifest this update: Sun 20 Sep 2026 08:00:49 +0000
Manifest next update: Mon 21 Sep 2026 08:00:49 +0000
Files and hashes: 1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
2: Qsmck_Q1LRjc9BFJ4PRK8hkx8lE.roa (hash: tFHy5YIAzvBM7ghe1eYeoeXBK1W4SJOIgpN7n9hkr8Q=)
3: XbyXTy2eUaONfFWw8BChIBWa36M.roa (hash: xn0X7nDb94H6uKDvSt+XEo1r5ooPCWsDBnVyrR9GWjM=)
4: orOrT8NVY4pf1QT1W-mHVHhwDL8.roa (hash: bx8FYIhx4hyq5ap/XvQzvchaRMF2JO/G6piTSSfSHKo=)
5: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: pqeORki2K3kBqDZ0GOfqrv9KAjW3f4wIi3Y5HBWsllQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:06:f1:76:a3:47:f3:a9:c6:6e:bc:48:2e:f3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Sep 20 08:00:49 2026 GMT
Not After : Sep 21 08:00:49 2026 GMT
Subject: CN=047ad6176ab124b512d90dca65757b554ba66baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:ad:08:7d:1d:d0:51:1b:09:b7:d9:a3:77:
60:f1:56:d8:e8:75:33:fd:9c:0b:98:e6:f6:dd:2b:
28:c2:09:c2:17:5e:68:c5:5e:16:75:df:5a:cf:51:
b8:cf:26:47:1d:15:b7:50:1f:61:5e:c6:8a:e0:42:
a7:20:7e:0e:ec:53:dc:2c:1f:20:7b:91:92:2f:ed:
da:1f:19:eb:f7:bb:fc:3c:d3:c7:51:06:38:47:99:
50:42:ba:8b:35:03:16:09:13:18:97:3f:29:72:51:
2f:c9:9d:ed:cf:a1:8e:cd:d5:f2:81:8a:ed:d6:b7:
fd:93:2a:8d:b7:00:00:26:85:27:09:06:3f:6f:b4:
26:c0:13:89:61:24:76:d4:bf:b7:e3:81:a3:e8:6f:
0b:10:20:04:0a:bd:3b:82:09:fc:5b:a5:d2:1b:86:
6a:d3:ec:53:ed:f6:ab:74:91:fd:11:0a:52:ef:45:
cd:df:5e:da:36:13:5e:e8:be:c7:e0:89:65:0b:53:
08:e8:9c:30:38:a1:67:60:e1:76:44:e7:4e:bc:f7:
4f:30:64:06:f0:b9:de:4c:17:84:a6:65:82:f7:9b:
4c:2d:09:2e:bd:a6:f2:8a:e0:c5:47:c8:1f:ff:ed:
78:4f:12:02:ca:ca:9b:57:45:00:e2:55:e9:72:e3:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7A:D6:17:6A:B1:24:B5:12:D9:0D:CA:65:75:7B:55:4B:A6:6B:AF
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:96:78:aa:e8:dc:81:cc:2c:48:6a:07:94:9b:05:86:30:a3:
02:12:40:0f:35:12:cc:9e:e4:8f:fc:48:ad:ff:9f:32:c6:57:
2b:0e:46:c8:5b:16:2b:53:8b:c1:92:4d:03:74:38:d0:45:76:
79:90:67:6c:f9:1d:07:97:72:47:e1:ec:2a:74:85:a8:1b:fa:
e8:ac:7c:32:05:f3:a8:8f:e1:d7:0c:8b:a0:70:36:83:dd:e6:
2a:22:96:aa:f2:46:f3:2a:bc:70:9b:f3:05:a9:78:73:1b:55:
21:4e:f0:57:8a:2b:26:f6:e1:2f:8e:64:a2:4b:d2:b3:bd:d9:
41:dd:f2:87:28:e6:31:1b:c9:64:fe:f2:d9:dc:17:1a:50:11:
47:7e:8a:78:de:1a:aa:9e:60:c2:b7:d3:9a:cc:e6:62:6c:95:
3c:9c:b2:5f:cb:28:3a:07:5d:15:f7:32:bb:23:63:7b:0c:a7:
36:f4:7e:99:4c:1a:9e:f5:2a:22:f0:f4:44:4a:f3:ba:68:0d:
c3:34:13:df:71:82:a4:c8:57:7e:2d:88:75:c5:ee:ab:c4:7d:
d7:99:69:a2:a0:2e:35:03:9c:ae:25:e4:e1:61:1b:2f:ad:e0:
80:3d:01:3c:7b:85:f6:42:08:46:1d:26:0d:ca:11:75:75:2e:
b4:cd:81:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91QbxdqNH86nGbrxILvNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODg4NDlhMmViNWU5ZGQ1NzFhOGU3NDNiZWQ3Yjk1MTNk
N2ExMjEwHhcNMjYwOTIwMDgwMDQ5WhcNMjYwOTIxMDgwMDQ5WjAzMTEwLwYDVQQD
EygwNDdhZDYxNzZhYjEyNGI1MTJkOTBkY2E2NTc1N2I1NTRiYTY2YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rutCH0d0FEbCbfZo3dg8VbY6HUz
/ZwLmOb23SsowgnCF15oxV4Wdd9az1G4zyZHHRW3UB9hXsaK4EKnIH4O7FPcLB8g
e5GSL+3aHxnr97v8PNPHUQY4R5lQQrqLNQMWCRMYlz8pclEvyZ3tz6GOzdXygYrt
1rf9kyqNtwAAJoUnCQY/b7QmwBOJYSR21L+344Gj6G8LECAECr07ggn8W6XSG4Zq
0+xT7fardJH9EQpS70XN317aNhNe6L7H4IllC1MI6JwwOKFnYOF2ROdOvPdPMGQG
8LneTBeEpmWC95tMLQkuvabyiuDFR8gf/+14TxICysqbV0UA4lXpcuOcoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAR61hdqsSS1EtkNymV1e1VLpmuvMB8GA1UdIwQY
MBaAFL+IhJoutendVxqOdDvte5UT16EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYt
MjM3MzliNWZkODRjLzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYtMjM3MzliNWZkODRj
LzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZZ4qujc
gcwsSGoHlJsFhjCjAhJADzUSzJ7kj/xIrf+fMsZXKw5GyFsWK1OLwZJNA3Q40EV2
eZBnbPkdB5dyR+HsKnSFqBv66Kx8MgXzqI/h1wyLoHA2g93mKiKWqvJG8yq8cJvz
Bal4cxtVIU7wV4orJvbhL45kokvSs73ZQd3yhyjmMRvJZP7y2dwXGlARR36KeN4a
qp5gwrfTmszmYmyVPJyyX8soOgddFfcyuyNjewynNvR+mUwanvUqIvD0RErzumgN
wzQT33GCpMhXfi2IdcXuq8R915lpoqAuNQOcriXk4WEbL63ggD0BPHuF9kIIRh0m
DcoRdXUutM2BmQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:31:07 2026 by rpki-client