Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier: SthLhXbnFAfvZmVVQ9IAGdsfhwumQ58bpUt0ZgXQ84g=
Subject key identifier: 97:B7:2F:33:60:33:43:1C:57:70:25:07:FA:EF:73:98:3A:36:1E:0E
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial: 01A0D803FCD1D3FE86C3C214E8C01ADC259F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number: 0351
Signing time: Fri 25 Sep 2026 10:02:14 +0000
Manifest this update: Fri 25 Sep 2026 10:02:14 +0000
Manifest next update: Sat 26 Sep 2026 10:02:14 +0000
Files and hashes: 1: 1-IhTXgGcHna0z1HZ0_9dxgp5QcU.asa (hash: 6m+rYZuTH6ZFe+0jPO7RV/O142SmgbtLoMG4QGsoGg4=)
2: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: Q6vENUCdPJgzBiIyAvRlZvGo4WYBXtuJHqcF2+6VRig=)
3: YQM4WIIUNaL9-PCZN-_YZ52UVSY.roa (hash: 6uJ//EEMyi6s/7I5zLsMnq2mwES70jTLQRVEP2+rnOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:03:fc:d1:d3:fe:86:c3:c2:14:e8:c0:1a:dc:25:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Validity
Not Before: Sep 25 10:02:14 2026 GMT
Not After : Sep 26 10:02:14 2026 GMT
Subject: CN=97b72f336033431c57702507faef73983a361e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:ac:5f:45:0a:95:42:02:02:45:0b:6a:38:
4a:d1:52:2a:51:f5:dd:5c:4a:30:2c:05:94:13:c6:
f0:ed:d5:fb:3e:3f:bf:99:9b:eb:e1:42:4a:0b:eb:
45:b2:97:8b:a0:cd:db:80:54:54:09:cd:a5:2f:26:
d6:ee:4d:58:22:10:b1:ee:ad:26:e3:6c:9d:e2:d2:
b8:76:10:3e:c2:12:f7:40:64:99:4e:72:1c:71:fd:
63:24:d6:ec:9f:e3:bd:cb:e4:57:4f:fe:33:62:51:
61:6a:9c:6c:cb:ae:f0:b6:48:16:7e:ed:32:15:53:
2a:1c:16:ca:d7:4a:31:cb:96:bd:b0:3e:47:b5:ce:
39:26:cc:2b:eb:dc:9e:e0:62:70:b5:47:9e:d8:ae:
27:02:f8:e7:d0:bf:5e:6f:b9:32:07:14:7c:80:72:
8d:a7:5c:2c:d6:45:95:d0:19:48:43:61:bf:66:c2:
af:0d:83:9f:4c:50:4e:f2:0e:62:1b:40:b3:a5:39:
1a:a9:14:d2:31:2a:de:11:64:9f:02:ac:33:0d:ce:
d4:f8:bc:91:28:7b:66:f6:8b:56:2b:8d:52:af:10:
84:30:47:2c:be:71:94:b8:1a:0d:8a:66:cb:9e:38:
fe:e0:e6:e4:de:b7:3d:27:46:e5:a4:85:ef:e2:e1:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B7:2F:33:60:33:43:1C:57:70:25:07:FA:EF:73:98:3A:36:1E:0E
X509v3 Authority Key Identifier:
keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0b:ac:fb:ae:17:0b:82:5b:5a:b4:2e:bb:fc:3d:97:0a:f1:
40:39:f3:39:e0:57:68:d8:50:31:d5:a4:87:df:6a:bd:cd:7a:
e2:83:4b:5d:ff:ce:59:5f:de:03:39:f9:92:a4:50:78:aa:e6:
36:b7:b3:2c:26:6d:c0:9d:eb:69:4d:fc:b7:f5:a9:5e:b7:0a:
2a:29:21:6f:4c:e9:a4:90:a4:aa:15:07:01:0c:05:d4:7f:82:
70:cd:0a:14:88:d4:56:01:8d:74:61:fc:fe:56:96:1f:48:3c:
3d:05:2b:c2:ab:ee:8c:75:d8:ff:11:cf:75:74:b5:9e:1f:3c:
92:6d:25:11:13:b2:9f:01:34:55:e1:84:c8:32:dd:ab:35:a4:
d8:eb:43:c9:27:c3:12:22:e9:57:29:c1:c7:ff:40:d1:9f:3d:
f8:24:dd:d5:c8:e9:8e:92:af:4f:5e:90:d9:e0:29:10:de:5b:
25:e7:98:ff:77:58:6a:44:e0:2d:76:bd:46:e3:cd:76:cc:06:
7f:7f:04:c2:02:92:65:44:b3:a6:58:38:32:1e:a6:42:7d:d5:
bc:88:16:1d:0c:05:52:d2:ed:ae:6e:a2:ef:8e:62:37:95:ed:
84:20:a4:44:db:b4:83:86:10:12:e1:28:6a:1e:a7:52:e2:ba:
f1:07:68:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYA/zR0/6Gw8IU6MAa3CWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDE1ZTM2Y2RiMzg4Mjc2ZjA0YTYwNmIwMjI2NjI2MGUy
YTE5ZjgwHhcNMjYwOTI1MTAwMjE0WhcNMjYwOTI2MTAwMjE0WjAzMTEwLwYDVQQD
Eyg5N2I3MmYzMzYwMzM0MzFjNTc3MDI1MDdmYWVmNzM5ODNhMzYxZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4asX0UKlUICAkULajhK0VIqUfXd
XEowLAWUE8bw7dX7Pj+/mZvr4UJKC+tFspeLoM3bgFRUCc2lLybW7k1YIhCx7q0m
42yd4tK4dhA+whL3QGSZTnIccf1jJNbsn+O9y+RXT/4zYlFhapxsy67wtkgWfu0y
FVMqHBbK10oxy5a9sD5Htc45Jswr69ye4GJwtUee2K4nAvjn0L9eb7kyBxR8gHKN
p1ws1kWV0BlIQ2G/ZsKvDYOfTFBO8g5iG0CzpTkaqRTSMSreEWSfAqwzDc7U+LyR
KHtm9otWK41SrxCEMEcsvnGUuBoNimbLnjj+4Obk3rc9J0blpIXv4uHINwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJe3LzNgM0McV3AlB/rvc5g6Nh4OMB8GA1UdIwQY
MBaAFOHRXjbNs4gnbwSmBrAiZiYOKhn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMt
MjM0NDJhMTRhNWY3LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83MjU2MzUtNDFmZS00MGQ1LTgxYWMtMjM0NDJhMTRhNWY3
LzEvNGRGZU5zMnppQ2R2QktZR3NDSm1KZzRxR2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQus+64X
C4JbWrQuu/w9lwrxQDnzOeBXaNhQMdWkh99qvc164oNLXf/OWV/eAzn5kqRQeKrm
NrezLCZtwJ3raU38t/WpXrcKKikhb0zppJCkqhUHAQwF1H+CcM0KFIjUVgGNdGH8
/laWH0g8PQUrwqvujHXY/xHPdXS1nh88km0lEROynwE0VeGEyDLdqzWk2OtDySfD
EiLpVynBx/9A0Z89+CTd1cjpjpKvT16Q2eApEN5bJeeY/3dYakTgLXa9RuPNdswG
f38EwgKSZUSzplg4Mh6mQn3VvIgWHQwFUtLtrm6i745iN5XthCCkRNu0g4YQEuEo
ah6nUuK68Qdobw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:05:55 2026 by rpki-client