Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: qGx9RFpQIqYdyrhBTMtepq73X8pNRDEtiPFgeUEt+4Y=
Subject key identifier: A8:A8:7F:7D:83:49:E1:7A:36:B4:A3:EA:74:14:3A:54:43:2D:7E:3F
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 01A0CEC8B5309F18B54980E380A7273BB437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 15C7
Signing time: Wed 23 Sep 2026 15:00:55 +0000
Manifest this update: Wed 23 Sep 2026 15:00:55 +0000
Manifest next update: Thu 24 Sep 2026 15:00:55 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: a8M72pJFWUlzIDqt8cFLPiH0Ld5lDhXS67A0O8eT2gY=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:b5:30:9f:18:b5:49:80:e3:80:a7:27:3b:b4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Sep 23 15:00:55 2026 GMT
Not After : Sep 24 15:00:55 2026 GMT
Subject: CN=a8a87f7d8349e17a36b4a3ea74143a54432d7e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:cb:51:c7:45:97:0a:1b:46:d3:c0:34:d8:
65:4d:7a:c0:c4:0e:03:2c:6b:d5:ed:ae:7c:cd:7f:
35:18:1f:22:ce:37:44:39:49:84:13:e2:13:28:45:
dd:cd:f1:ef:05:33:09:4e:c4:87:8a:83:6c:ee:59:
75:52:c2:01:2c:cc:84:45:4a:b8:bf:13:a5:bb:3f:
8d:76:02:ef:fc:f3:93:0f:6d:f7:cb:f0:75:6f:a4:
c2:a3:82:f0:08:35:1f:47:e2:0c:e2:c8:ba:5f:4e:
36:91:a6:3d:dd:ae:5c:3d:40:47:a0:c9:e4:25:5e:
50:2e:40:ce:a9:44:04:7f:47:11:2f:e4:4c:ef:97:
0d:72:0c:36:ed:53:bd:70:42:aa:49:fa:d4:61:70:
b7:39:8a:89:a0:70:95:85:c6:06:76:a7:89:96:b1:
20:fd:f7:b8:8e:4f:1c:52:2a:e0:1f:8f:0e:2d:5e:
f8:9b:18:75:d3:33:7f:e2:4e:62:25:35:dd:0d:78:
b6:16:7a:40:48:90:9c:c9:ef:b0:09:af:53:4c:d3:
f9:7d:d6:0c:ce:56:98:d0:13:ad:d5:3e:b6:f9:7b:
2e:01:cf:85:87:e8:25:99:37:5e:74:41:c8:d0:b0:
fd:fd:8a:20:69:b9:86:dc:fd:3e:fe:b1:76:96:e1:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A8:7F:7D:83:49:E1:7A:36:B4:A3:EA:74:14:3A:54:43:2D:7E:3F
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b8:f8:f0:dd:41:73:d4:9d:b1:3d:46:fd:07:a8:d5:37:ab:
ff:23:d9:07:d2:fe:b0:2c:4a:27:fa:4d:0f:1f:83:84:f2:48:
ba:77:6a:bc:a5:52:78:ae:32:46:0c:32:4f:e1:5e:6b:cf:78:
34:db:63:be:2e:c0:18:d5:c7:ac:36:7a:fe:10:3b:3d:c3:f3:
60:49:c1:65:86:14:42:09:bc:f5:29:88:37:eb:c8:0f:16:c5:
a4:71:be:c9:5e:e9:28:15:ba:c5:52:d2:7d:e3:37:87:d9:bb:
88:45:9d:5c:c2:73:d9:8a:51:8e:a2:29:78:b6:97:10:7f:83:
41:77:d2:24:40:46:2a:8e:af:69:c2:c1:31:76:54:db:1a:d1:
3f:5a:e7:fa:84:05:56:6e:32:f4:6e:17:e9:aa:52:00:1c:71:
43:68:c8:87:c0:36:4c:8d:de:1f:01:25:fc:98:62:b7:8a:fd:
01:6e:c7:45:d4:5b:b4:af:4f:c0:d9:a9:eb:6d:08:6a:fb:e8:
17:c8:93:14:b4:7b:6b:04:b4:90:70:5c:38:14:a2:99:10:f7:
22:91:0e:4d:a6:3b:a8:51:e0:01:ca:a6:d8:90:df:91:04:8f:
cb:90:cb:07:6a:a5:6d:eb:f0:f8:25:c1:df:55:12:ee:04:66:
1e:e3:1a:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyLUwnxi1SYDjgKcnO7Q3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm
ZDIwMjYwHhcNMjYwOTIzMTUwMDU1WhcNMjYwOTI0MTUwMDU1WjAzMTEwLwYDVQQD
EyhhOGE4N2Y3ZDgzNDllMTdhMzZiNGEzZWE3NDE0M2E1NDQzMmQ3ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnXLUcdFlwobRtPANNhlTXrAxA4D
LGvV7a58zX81GB8izjdEOUmEE+ITKEXdzfHvBTMJTsSHioNs7ll1UsIBLMyERUq4
vxOluz+NdgLv/POTD233y/B1b6TCo4LwCDUfR+IM4si6X042kaY93a5cPUBHoMnk
JV5QLkDOqUQEf0cRL+RM75cNcgw27VO9cEKqSfrUYXC3OYqJoHCVhcYGdqeJlrEg
/fe4jk8cUirgH48OLV74mxh10zN/4k5iJTXdDXi2FnpASJCcye+wCa9TTNP5fdYM
zlaY0BOt1T62+XsuAc+Fh+glmTdedEHI0LD9/YogabmG3P0+/rF2luH80wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiof32DSeF6NrSj6nQUOlRDLX4/MB8GA1UdIwQY
MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct
ZWRhMjNmMmYxN2U5LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5
LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7j48N1B
c9SdsT1G/Qeo1Ter/yPZB9L+sCxKJ/pNDx+DhPJIundqvKVSeK4yRgwyT+Fea894
NNtjvi7AGNXHrDZ6/hA7PcPzYEnBZYYUQgm89SmIN+vIDxbFpHG+yV7pKBW6xVLS
feM3h9m7iEWdXMJz2YpRjqIpeLaXEH+DQXfSJEBGKo6vacLBMXZU2xrRP1rn+oQF
Vm4y9G4X6apSABxxQ2jIh8A2TI3eHwEl/Jhit4r9AW7HRdRbtK9PwNmp620Iavvo
F8iTFLR7awS0kHBcOBSimRD3IpEOTaY7qFHgAcqm2JDfkQSPy5DLB2qlbevw+CXB
31US7gRmHuMaVg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:42:36 2026 by rpki-client