Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: L8bdiUa4tVwJQEF1o+hbAwNixPWZt6EiBME2IEClPxQ=
Subject key identifier: 6A:8D:71:DC:60:E6:7C:AD:BF:92:42:A2:C1:E1:1F:C5:D6:2C:BE:35
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 01A0D3EF27E8B9839F5724398F2E4B0122A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 15:01:00 +0000
Manifest this update: Thu 24 Sep 2026 15:01:00 +0000
Manifest next update: Fri 25 Sep 2026 15:01:00 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: C/9QMygrnING4q70lLrM3KIhrOMywe71izVngAkbHgQ=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:27:e8:b9:83:9f:57:24:39:8f:2e:4b:01:22:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Sep 24 15:01:00 2026 GMT
Not After : Sep 25 15:01:00 2026 GMT
Subject: CN=6a8d71dc60e67cadbf9242a2c1e11fc5d62cbe35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:fb:5a:31:9d:06:d3:84:10:0d:19:a5:64:
26:12:dc:13:6e:29:a6:3b:ea:46:70:52:6b:a8:3e:
47:84:3d:2a:20:d2:5f:e5:b7:41:96:82:1e:3c:47:
a3:fc:ee:36:21:7d:0b:eb:57:b1:5e:c0:2d:79:50:
3e:02:45:11:8f:5c:97:31:9d:90:95:0c:e4:17:41:
5e:ae:0a:29:67:69:49:90:5b:ae:5c:54:35:82:57:
5b:3f:a2:38:a2:42:90:7b:b5:85:b5:dc:ca:17:e2:
8d:24:e5:bf:06:d6:74:62:d0:42:50:88:f0:93:52:
d9:70:6a:bd:be:54:ff:f5:0d:28:2d:5f:28:cd:b7:
9f:14:5e:99:15:74:53:40:d5:b9:e1:1b:35:02:11:
32:29:f9:2c:e8:a8:5b:1a:c5:a0:f9:ab:e7:e7:4f:
31:15:d6:2e:26:0d:4c:3d:0d:b4:55:39:15:e3:1c:
37:19:71:f4:5b:99:39:99:8e:87:17:fa:1a:96:2c:
ce:45:ab:2b:03:7c:f0:c4:85:7c:be:4e:1a:b9:a1:
fd:f0:bc:f0:00:27:d8:49:ef:b4:87:b0:89:45:a1:
d9:46:e4:ca:03:49:ba:03:fb:4b:78:35:21:3a:7b:
c0:98:35:da:b6:35:c5:fd:64:98:9b:25:8a:bf:d4:
f1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8D:71:DC:60:E6:7C:AD:BF:92:42:A2:C1:E1:1F:C5:D6:2C:BE:35
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:da:6a:44:39:f1:f0:45:9b:99:11:78:f2:6f:7b:e7:1d:b7:
69:58:f0:20:3f:de:62:a3:1d:d2:6b:bf:a7:4a:61:50:e7:a5:
50:3c:d3:a1:24:9a:6d:ca:8a:9d:54:be:1d:29:2b:83:b1:da:
d7:bd:64:2f:9d:fc:5d:ef:24:7e:8f:34:94:49:18:b0:83:df:
9a:7a:de:28:2e:89:cc:d0:44:08:e9:1c:51:a3:17:6c:68:3d:
a7:1f:7e:51:b0:0a:27:e9:1e:c5:0d:44:79:f8:0f:93:d2:66:
03:71:11:0f:f9:b2:d9:05:f4:1f:0c:5f:07:a3:17:3d:e7:ce:
d9:bb:24:86:77:28:71:77:28:04:c4:71:1b:34:e9:91:2f:33:
81:eb:64:a8:88:92:ba:96:3b:34:5e:bb:15:82:e1:c9:58:6b:
34:32:7b:56:66:05:c7:36:62:7a:d0:25:6f:2d:e1:be:70:c8:
54:2d:87:0a:6f:84:8e:d1:7c:9e:9f:93:58:ce:78:61:04:cb:
15:57:a0:f4:e8:03:be:38:e7:b2:99:11:16:75:b7:c1:27:8c:
24:94:d9:c5:f2:9e:4f:74:7d:df:ce:3a:ae:fb:23:12:a8:74:
d4:e5:11:ad:9f:81:8e:3c:28:be:de:a9:df:6e:b1:73:b4:79:
b6:9a:5b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT7yfouYOfVyQ5jy5LASKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDBhMDI1ZTBlNjFhNDRkOTNlNGE4MDFlMzg4OGIyNmU3
YmQyNDEwHhcNMjYwOTI0MTUwMTAwWhcNMjYwOTI1MTUwMTAwWjAzMTEwLwYDVQQD
Eyg2YThkNzFkYzYwZTY3Y2FkYmY5MjQyYTJjMWUxMWZjNWQ2MmNiZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKL7WjGdBtOEEA0ZpWQmEtwTbimm
O+pGcFJrqD5HhD0qINJf5bdBloIePEej/O42IX0L61exXsAteVA+AkURj1yXMZ2Q
lQzkF0FergopZ2lJkFuuXFQ1gldbP6I4okKQe7WFtdzKF+KNJOW/BtZ0YtBCUIjw
k1LZcGq9vlT/9Q0oLV8ozbefFF6ZFXRTQNW54Rs1AhEyKfks6KhbGsWg+avn508x
FdYuJg1MPQ20VTkV4xw3GXH0W5k5mY6HF/oalizORasrA3zwxIV8vk4auaH98Lzw
ACfYSe+0h7CJRaHZRuTKA0m6A/tLeDUhOnvAmDXatjXF/WSYmyWKv9TxNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqNcdxg5nytv5JCosHhH8XWLL41MB8GA1UdIwQY
MBaAFOJAoCXg5hpE2T5KgB44iLJue9JBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUt
Yzc5ZDRlZWI1YWQ2LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82ZWM5NDMtNzBlMi00MzM1LTg0ZmUtYzc5ZDRlZWI1YWQ2
LzEvNGtDZ0plRG1Ha1RaUGtxQUhqaUlzbTU3MGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtpqRDnx
8EWbmRF48m975x23aVjwID/eYqMd0mu/p0phUOelUDzToSSabcqKnVS+HSkrg7Ha
171kL538Xe8kfo80lEkYsIPfmnreKC6JzNBECOkcUaMXbGg9px9+UbAKJ+kexQ1E
efgPk9JmA3ERD/my2QX0HwxfB6MXPefO2bskhncocXcoBMRxGzTpkS8zgetkqIiS
upY7NF67FYLhyVhrNDJ7VmYFxzZietAlby3hvnDIVC2HCm+EjtF8np+TWM54YQTL
FVeg9OgDvjjnspkRFnW3wSeMJJTZxfKeT3R93846rvsjEqh01OURrZ+Bjjwovt6p
326xc7R5tppblA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:10:55 2026 by rpki-client