Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
File: 4TbBQNV8BgOYHZBG1McqrcZJe48.mft (raw, json)
Hash identifier: 8tMchxEuHIa7bDbQZyP+28MWIEAIT2SiA/PW89Gfwd4=
Subject key identifier: 88:65:E5:96:D6:79:85:BD:B9:04:67:31:15:8B:FE:76:53:AF:D8:04
Authority key identifier: E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
Certificate issuer: /CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Certificate serial: 01A10135C445A296E8EF82C0D39FE48B0613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
Manifest number: 0214
Signing time: Sat 03 Oct 2026 10:01:03 +0000
Manifest this update: Sat 03 Oct 2026 10:01:03 +0000
Manifest next update: Sun 04 Oct 2026 10:01:03 +0000
Files and hashes: 1: 4TbBQNV8BgOYHZBG1McqrcZJe48.crl (hash: xUNeboORO55Za1EBRxAhYZj08WLNa/9sDmPfoI8gSmM=)
2: flO6XJpnIFOsdZyjDNefmOQ-G_w.asa (hash: MR9nPjOlXBd3N+fXKFHrapKtNEWrnTEaOnHmqRgXcfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:c4:45:a2:96:e8:ef:82:c0:d3:9f:e4:8b:06:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Validity
Not Before: Oct 3 10:01:03 2026 GMT
Not After : Oct 4 10:01:03 2026 GMT
Subject: CN=8865e596d67985bdb9046731158bfe7653afd804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:9d:3f:ad:6f:fe:60:68:0c:49:21:50:4a:
fc:f6:fb:23:72:22:b7:f3:40:ff:cc:80:c7:3e:f5:
f3:d8:a3:65:7b:d6:60:98:60:e4:f9:80:da:1c:6a:
fb:48:46:8a:44:76:4c:35:b8:e0:45:08:37:4a:3b:
ae:83:a2:79:2c:53:58:8c:a3:aa:57:5d:3a:25:02:
52:09:42:fb:4f:83:79:e8:eb:2c:d7:8e:fc:6f:9a:
da:2d:e9:52:8e:d1:9d:32:3e:d7:77:7c:fd:13:ce:
dc:5a:9d:d6:4d:7c:f5:38:1d:92:51:73:05:66:fb:
5b:8e:91:f6:ad:7c:b1:60:72:e3:55:06:56:84:6d:
7e:f9:f8:7a:9c:5d:93:27:4c:18:81:00:8b:96:c4:
d1:03:64:68:13:05:4d:c9:1d:d7:e8:da:23:6a:36:
64:41:86:84:6f:79:a7:c7:c3:dd:c6:28:73:b5:b9:
70:fe:74:d7:ed:b0:e5:e0:3b:42:e3:4d:a5:ab:48:
7e:d7:ca:4f:13:49:29:dd:ba:8b:13:35:2b:18:df:
f9:47:96:d8:fd:18:5b:61:c2:96:87:b6:3b:b4:a1:
88:0b:50:de:97:17:c5:c3:0e:4e:75:d4:02:ae:92:
4c:45:22:2e:9c:1d:9c:ba:01:66:47:dd:59:87:d6:
b3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:65:E5:96:D6:79:85:BD:B9:04:67:31:15:8B:FE:76:53:AF:D8:04
X509v3 Authority Key Identifier:
keyid:E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:10:57:2c:c1:f1:85:2a:d7:52:92:a5:7a:5f:ad:81:da:65:
f9:a2:82:ad:da:f6:10:01:1f:9a:54:ef:f9:0d:d1:69:27:ec:
cf:af:bd:3a:6a:49:b6:28:f3:08:6a:5e:0b:67:c5:17:d5:48:
60:31:f1:fe:ca:0f:7a:12:dd:dd:7a:af:10:35:93:92:68:52:
12:c1:97:08:ab:5a:c8:b8:29:3d:c6:61:cc:16:38:d1:04:79:
66:50:1f:85:77:3d:0f:69:c8:5e:6b:df:f3:02:9c:b7:eb:8a:
2d:ac:0c:ad:95:8d:d1:88:b3:7a:43:30:bb:90:6d:63:1a:71:
77:a0:2c:89:66:fa:f9:e9:0a:51:e3:34:1e:e1:8e:8d:84:c2:
a7:7d:88:61:78:e8:0c:67:f7:95:23:6c:3d:9b:09:3d:63:7e:
f2:94:e0:44:28:44:c0:bd:2a:55:fd:63:d7:e8:b5:cd:6f:72:
28:25:00:cb:e7:1c:ff:c6:1e:ec:68:ea:3a:ed:6c:a5:bb:54:
51:a2:16:ba:ff:6f:fe:87:ea:ed:b8:72:04:8a:db:8f:d8:05:
7e:11:f0:31:35:91:cb:f1:b4:3f:ba:ed:d7:b2:b1:5e:e9:0d:
27:35:cc:75:92:4f:52:e1:17:5d:49:d0:a9:69:64:1e:18:c5:
58:8c:5d:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBNcRFopbo74LA05/kiwYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMzZjMTQwZDU3YzA2MDM5ODFkOTA0NmQ0YzcyYWFkYzY0
OTdiOGYwHhcNMjYxMDAzMTAwMTAzWhcNMjYxMDA0MTAwMTAzWjAzMTEwLwYDVQQD
Eyg4ODY1ZTU5NmQ2Nzk4NWJkYjkwNDY3MzExNThiZmU3NjUzYWZkODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYmdP61v/mBoDEkhUEr89vsjciK3
80D/zIDHPvXz2KNle9ZgmGDk+YDaHGr7SEaKRHZMNbjgRQg3Sjuug6J5LFNYjKOq
V106JQJSCUL7T4N56Oss1478b5raLelSjtGdMj7Xd3z9E87cWp3WTXz1OB2SUXMF
ZvtbjpH2rXyxYHLjVQZWhG1++fh6nF2TJ0wYgQCLlsTRA2RoEwVNyR3X6NojajZk
QYaEb3mnx8Pdxihztblw/nTX7bDl4DtC402lq0h+18pPE0kp3bqLEzUrGN/5R5bY
/RhbYcKWh7Y7tKGIC1DelxfFww5OddQCrpJMRSIunB2cugFmR91Zh9az2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhl5ZbWeYW9uQRnMRWL/nZTr9gEMB8GA1UdIwQY
MBaAFOE2wUDVfAYDmB2QRtTHKq3GSXuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFRiQlFOVjhCZ09ZSFpCRzFNY3FyY1pKZTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lMGI0OTMtYzBkZC00NTAyLWE2NTgt
ODAwYTA3NTRmODQzLzEvNFRiQlFOVjhCZ09ZSFpCRzFNY3FyY1pKZTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lMGI0OTMtYzBkZC00NTAyLWE2NTgtODAwYTA3NTRmODQz
LzEvNFRiQlFOVjhCZ09ZSFpCRzFNY3FyY1pKZTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRBXLMHx
hSrXUpKlel+tgdpl+aKCrdr2EAEfmlTv+Q3RaSfsz6+9OmpJtijzCGpeC2fFF9VI
YDHx/soPehLd3XqvEDWTkmhSEsGXCKtayLgpPcZhzBY40QR5ZlAfhXc9D2nIXmvf
8wKct+uKLawMrZWN0YizekMwu5BtYxpxd6AsiWb6+ekKUeM0HuGOjYTCp32IYXjo
DGf3lSNsPZsJPWN+8pTgRChEwL0qVf1j1+i1zW9yKCUAy+cc/8Ye7GjqOu1spbtU
UaIWuv9v/ofq7bhyBIrbj9gFfhHwMTWRy/G0P7rt17KxXukNJzXMdZJPUuEXXUnQ
qWlkHhjFWIxdMA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 17:40:31 2026 by rpki-client