Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
File: 4A98YCwtJIbuagplJAe5BKfUDeA.mft (raw, json)
Hash identifier: DUuMwLw+97rjH2on3wU22cXk9qJQE6hVC3b+BI5KUck=
Subject key identifier: 7D:F4:2C:5B:83:C4:53:F6:1D:4D:C2:EB:80:43:50:1E:2C:09:2E:60
Authority key identifier: E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
Certificate issuer: /CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Certificate serial: 01A0CE239B7275600D24E057A84531E0303D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:35 +0000
Manifest this update: Wed 23 Sep 2026 12:00:35 +0000
Manifest next update: Thu 24 Sep 2026 12:00:35 +0000
Files and hashes: 1: 4A98YCwtJIbuagplJAe5BKfUDeA.crl (hash: DsKl0EBRC2fKoBRHekVUTFcYNMs24CKW64v67aGppDY=)
2: XYZAtepajrERzVfepYrQ1WLpJn0.roa (hash: NwsD9n0fR/8scpVFCnvi5VpS0JM3A+KLBhhzQOSTM9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:9b:72:75:60:0d:24:e0:57:a8:45:31:e0:30:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Validity
Not Before: Sep 23 12:00:35 2026 GMT
Not After : Sep 24 12:00:35 2026 GMT
Subject: CN=7df42c5b83c453f61d4dc2eb8043501e2c092e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:c2:c8:ab:8d:af:a5:64:f0:ab:73:16:70:
db:90:e0:1c:00:1e:8a:7f:6c:04:75:01:c8:4d:1a:
4c:98:72:cf:5a:4a:0f:cc:8f:65:ed:d7:86:18:2b:
a5:7e:bf:d6:ef:3e:6a:45:e4:8d:6f:83:e9:f9:db:
02:1f:46:87:d9:0a:91:78:40:87:ae:97:0b:b9:3a:
b5:95:c1:7c:07:89:36:82:29:a9:10:56:53:d4:2e:
63:c5:7a:64:e0:79:ff:e8:03:fb:2d:ee:e3:0d:d4:
5c:cd:e7:03:72:37:8d:33:83:cc:ad:cf:78:9e:dc:
d5:24:b7:b6:95:1b:4c:0b:ea:ff:bc:97:d2:c5:5c:
64:22:b0:8a:f6:b1:51:89:00:aa:cc:58:41:54:ee:
c9:0c:d1:49:79:e7:69:5f:8f:ba:bf:c7:c8:41:7f:
c4:68:9b:fb:07:51:6f:26:00:e1:00:a0:55:49:58:
f8:14:06:0e:4f:b5:af:e6:d4:e5:55:be:eb:ac:fa:
8a:f4:42:31:b7:67:df:a7:7b:21:37:19:20:02:80:
09:06:57:a4:eb:8a:92:44:22:b8:3f:62:7b:4d:a9:
05:d0:7e:7a:2f:34:61:04:9d:21:39:d1:f2:06:aa:
9e:fe:62:09:13:1a:34:23:41:37:05:65:23:a9:4f:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:2C:5B:83:C4:53:F6:1D:4D:C2:EB:80:43:50:1E:2C:09:2E:60
X509v3 Authority Key Identifier:
keyid:E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:94:0e:af:b3:9c:3d:2d:ed:74:0d:43:c6:e4:6e:c7:da:5b:
54:22:31:00:8b:ea:9d:cc:ff:28:0d:dc:f5:18:80:7c:db:31:
b2:02:33:8f:01:e4:eb:8a:1c:a8:ee:20:d8:fa:b9:77:ea:f8:
ef:f8:4b:93:a4:ee:e3:73:1f:94:1f:44:ea:d0:f0:23:62:d7:
b4:dd:55:e8:0c:20:6c:3b:d5:31:c2:60:21:c1:ac:7a:66:cc:
86:6e:96:83:b5:24:4a:a3:4b:18:b9:40:50:d5:15:a2:52:b1:
30:1d:5a:d4:00:4c:51:08:e1:7e:1d:1d:eb:bd:08:91:a1:a4:
c0:c1:d7:54:f2:35:ca:fa:1b:bd:25:7c:5f:dc:4f:06:1a:d5:
7d:c2:37:0e:cb:e3:33:2e:9b:50:bf:39:e2:a2:fa:1a:c4:76:
5b:4c:f3:85:bf:58:02:5b:de:ab:cc:f4:48:fc:bd:e4:df:c8:
fe:5b:12:a3:cd:46:0f:0d:07:92:b5:12:6f:76:70:d0:6a:dd:
d6:5a:64:8d:74:8c:e2:0a:9d:1a:35:1c:e8:3a:58:33:f1:9d:
fa:0e:c8:1e:5c:a3:dd:87:36:cd:4c:4e:a9:b5:ce:92:3b:39:
8c:c1:3c:3d:75:f8:3f:15:76:43:6a:1d:00:4b:ec:3a:04:c2:
5b:64:8c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI5tydWANJOBXqEUx4DA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMGY3YzYwMmMyZDI0ODZlZTZhMGE2NTI0MDdiOTA0YTdk
NDBkZTAwHhcNMjYwOTIzMTIwMDM1WhcNMjYwOTI0MTIwMDM1WjAzMTEwLwYDVQQD
Eyg3ZGY0MmM1YjgzYzQ1M2Y2MWQ0ZGMyZWI4MDQzNTAxZTJjMDkyZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J7CyKuNr6Vk8KtzFnDbkOAcAB6K
f2wEdQHITRpMmHLPWkoPzI9l7deGGCulfr/W7z5qReSNb4Pp+dsCH0aH2QqReECH
rpcLuTq1lcF8B4k2gimpEFZT1C5jxXpk4Hn/6AP7Le7jDdRczecDcjeNM4PMrc94
ntzVJLe2lRtMC+r/vJfSxVxkIrCK9rFRiQCqzFhBVO7JDNFJeedpX4+6v8fIQX/E
aJv7B1FvJgDhAKBVSVj4FAYOT7Wv5tTlVb7rrPqK9EIxt2ffp3shNxkgAoAJBlek
64qSRCK4P2J7TakF0H56LzRhBJ0hOdHyBqqe/mIJExo0I0E3BWUjqU+N7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH30LFuDxFP2HU3C64BDUB4sCS5gMB8GA1UdIwQY
MBaAFOAPfGAsLSSG7moKZSQHuQSn1A3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEE5OFlDd3RKSWJ1YWdwbEpBZTVCS2ZVRGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQt
YWRlMmJhYmNiOGQwLzEvNEE5OFlDd3RKSWJ1YWdwbEpBZTVCS2ZVRGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yN2M0YzEtMTU3Ny00ZWUxLWFhMjQtYWRlMmJhYmNiOGQw
LzEvNEE5OFlDd3RKSWJ1YWdwbEpBZTVCS2ZVRGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApQOr7Oc
PS3tdA1DxuRux9pbVCIxAIvqncz/KA3c9RiAfNsxsgIzjwHk64ocqO4g2Pq5d+r4
7/hLk6Tu43MflB9E6tDwI2LXtN1V6AwgbDvVMcJgIcGsembMhm6Wg7UkSqNLGLlA
UNUVolKxMB1a1ABMUQjhfh0d670IkaGkwMHXVPI1yvobvSV8X9xPBhrVfcI3Dsvj
My6bUL854qL6GsR2W0zzhb9YAlveq8z0SPy95N/I/lsSo81GDw0HkrUSb3Zw0Grd
1lpkjXSM4gqdGjUc6DpYM/Gd+g7IHlyj3Yc2zUxOqbXOkjs5jME8PXX4PxV2Q2od
AEvsOgTCW2SM2A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:05:05 2026 by rpki-client