Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: KBsg2W2vQU5KECemyJGphf1Xdysl9vBHYG6VIenF/mQ=
Subject key identifier: ED:6F:9C:64:58:A6:89:51:7C:00:1C:76:CD:D8:50:81:81:67:EE:8D
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 01A0D8DEDDCC7D1A4834B9BF4390290636C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 0810
Signing time: Fri 25 Sep 2026 14:01:19 +0000
Manifest this update: Fri 25 Sep 2026 14:01:19 +0000
Manifest next update: Sat 26 Sep 2026 14:01:19 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: kJ96xqvTd5N5BtVNimmqQb+mw2T1hTp8GfTm+Cp1EoE=)
2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:dd:cc:7d:1a:48:34:b9:bf:43:90:29:06:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Sep 25 14:01:19 2026 GMT
Not After : Sep 26 14:01:19 2026 GMT
Subject: CN=ed6f9c6458a689517c001c76cdd850818167ee8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:80:58:4e:93:e0:59:09:2f:fe:99:f1:ef:
8d:ae:74:23:4e:ba:c0:d7:e6:66:eb:46:82:4f:89:
8c:4a:73:6e:cb:5b:de:9f:d3:86:7e:8c:d9:da:72:
98:ab:13:d3:56:2d:17:76:d0:2c:cb:8f:20:db:1a:
93:e6:1c:64:aa:ac:c4:85:aa:02:ff:64:be:de:42:
49:a1:f9:08:0b:f6:86:26:e3:b2:c2:ba:48:cd:65:
ee:89:eb:77:fd:c2:31:71:da:87:b6:2b:86:ca:66:
42:f9:aa:c0:8c:cf:86:e9:f6:5a:10:9b:3d:63:ec:
81:e9:f7:bd:d4:a2:2b:7e:24:56:95:2b:76:44:f1:
69:8c:c6:ed:f7:ba:54:ba:86:7e:42:50:0b:ab:fe:
2d:c8:4d:db:e1:8c:9a:04:7a:70:c4:d9:89:20:d9:
0c:93:b7:04:4d:89:a8:90:7e:59:d1:48:05:71:68:
90:3e:b8:3e:43:df:53:4b:f7:67:af:14:c4:4b:06:
dc:c3:9b:18:e7:6b:94:d0:19:8a:53:d2:c2:29:74:
df:9a:69:13:93:49:63:68:c3:c0:f1:ef:af:1b:f0:
96:eb:44:b1:89:ab:b1:ec:ed:24:53:34:25:42:81:
55:23:89:c4:96:4b:73:2f:2a:53:36:d6:b1:00:e7:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:9C:64:58:A6:89:51:7C:00:1C:76:CD:D8:50:81:81:67:EE:8D
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5e:fd:50:2d:08:00:94:29:f0:a0:56:3d:5d:95:1d:70:6c:
3f:04:66:c6:97:33:96:88:55:e2:a1:56:56:34:a7:2f:68:f2:
27:8c:de:3b:e2:00:a1:83:51:7e:c5:6e:bb:22:da:23:d9:57:
75:d5:04:9d:60:25:0d:4b:6e:ba:29:fb:97:15:9a:c3:fa:99:
cc:a3:73:20:ac:56:85:14:6e:a9:7f:f8:8c:d6:8d:74:73:c2:
88:32:d1:7a:11:31:a4:68:1b:82:d1:97:33:78:81:47:33:a2:
ec:7e:b8:08:e5:5a:df:37:02:3a:d2:f7:cb:98:e6:f4:65:ea:
23:e4:d6:c3:31:39:01:16:a8:dd:37:82:25:3c:c3:23:7c:74:
8e:a9:ab:1a:68:f5:a7:f9:b2:70:be:0b:5d:99:d6:37:92:19:
da:d9:11:16:0d:b0:df:84:03:c6:d1:a9:63:03:a4:72:45:08:
fb:ac:6c:ce:6c:93:02:91:4d:77:97:4c:d8:df:7b:fa:44:24:
f2:8d:43:8d:64:44:69:cc:c0:05:27:4a:de:b2:85:dd:37:2a:
4a:ad:3e:9e:ca:76:b7:11:16:76:77:2d:99:50:a7:b7:a0:a0:
fe:21:a6:eb:30:4d:90:c3:eb:e0:7f:bb:14:0f:68:b6:74:36:
36:56:ae:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDY3t3MfRpINLm/Q5ApBjbDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDllMjc4Yzc4NjIyNTRjODg3NTVlNDcxNzM5OGE1NTJh
NDkwNDAwHhcNMjYwOTI1MTQwMTE5WhcNMjYwOTI2MTQwMTE5WjAzMTEwLwYDVQQD
EyhlZDZmOWM2NDU4YTY4OTUxN2MwMDFjNzZjZGQ4NTA4MTgxNjdlZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLyAWE6T4FkJL/6Z8e+NrnQjTrrA
1+Zm60aCT4mMSnNuy1ven9OGfozZ2nKYqxPTVi0XdtAsy48g2xqT5hxkqqzEhaoC
/2S+3kJJofkIC/aGJuOywrpIzWXuiet3/cIxcdqHtiuGymZC+arAjM+G6fZaEJs9
Y+yB6fe91KIrfiRWlSt2RPFpjMbt97pUuoZ+QlALq/4tyE3b4YyaBHpwxNmJINkM
k7cETYmokH5Z0UgFcWiQPrg+Q99TS/dnrxTESwbcw5sY52uU0BmKU9LCKXTfmmkT
k0ljaMPA8e+vG/CW60Sxiaux7O0kUzQlQoFVI4nElktzLypTNtaxAOccAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1vnGRYpolRfAAcds3YUIGBZ+6NMB8GA1UdIwQY
MBaAFOEJ4njHhiJUyIdV5HFzmKVSpJBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQt
MmYwM2UzMmJkMjFhLzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQtMmYwM2UzMmJkMjFh
LzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV79UC0I
AJQp8KBWPV2VHXBsPwRmxpczlohV4qFWVjSnL2jyJ4zeO+IAoYNRfsVuuyLaI9lX
ddUEnWAlDUtuuin7lxWaw/qZzKNzIKxWhRRuqX/4jNaNdHPCiDLRehExpGgbgtGX
M3iBRzOi7H64COVa3zcCOtL3y5jm9GXqI+TWwzE5ARao3TeCJTzDI3x0jqmrGmj1
p/mycL4LXZnWN5IZ2tkRFg2w34QDxtGpYwOkckUI+6xszmyTApFNd5dM2N97+kQk
8o1DjWREaczABSdK3rKF3TcqSq0+nsp2txEWdnctmVCnt6Cg/iGm6zBNkMPr4H+7
FA9otnQ2NlauAg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:56:55 2026 by rpki-client