Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: kOZi8saNLwgsGmkH+O8vv87UynzdtP5aWE5/pEsb198=
Subject key identifier: E2:47:1A:D4:54:8D:2B:63:7B:C7:64:B0:52:07:8F:E1:F5:38:0A:71
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 01A0D4946921EAE68B0D7674979F8A7FE94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 18:01:30 +0000
Manifest this update: Thu 24 Sep 2026 18:01:30 +0000
Manifest next update: Fri 25 Sep 2026 18:01:30 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: yrq5KZDJ9q8Mmz7a0LDfEpXDbNZSqS3z7OFWPz+zNlc=)
2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
3: fXnZtaUDrh43uq-zC1mqapT0DEg.roa (hash: 6JqlPygY2vobl9zvXxHng2bcbozRsoYkuHDvh0Ax49Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:69:21:ea:e6:8b:0d:76:74:97:9f:8a:7f:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Sep 24 18:01:30 2026 GMT
Not After : Sep 25 18:01:30 2026 GMT
Subject: CN=e2471ad4548d2b637bc764b052078fe1f5380a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:86:7a:8c:e6:69:13:47:39:ee:35:d7:6a:
b7:67:0f:20:36:db:bd:99:4c:dc:8f:4b:f7:bc:80:
f2:f4:5d:cd:41:cb:98:ac:9c:c7:77:42:61:18:a3:
d0:e6:64:21:29:5d:58:07:43:ab:2d:12:e7:64:d6:
32:68:c4:27:bf:46:1a:0a:96:4d:6d:d3:cb:90:b5:
eb:e7:07:1a:60:d9:83:75:a0:31:a9:09:d7:15:72:
64:7b:9f:8a:eb:5e:d5:14:9c:12:5a:00:90:ab:ff:
82:2b:a0:d2:25:99:22:f6:9a:85:4a:34:e1:cf:3d:
19:c7:5d:3c:87:24:fd:fe:f8:20:2a:15:26:a9:6b:
e7:18:2c:95:37:b3:f8:e1:3b:5c:c5:c9:bd:75:65:
00:12:e8:d8:45:55:37:50:da:25:a0:9e:11:f5:33:
d6:38:b0:54:91:7e:44:8a:39:33:64:ff:19:aa:82:
59:3a:c8:f5:e2:da:e2:b7:ea:2e:94:b6:72:ca:b3:
5f:11:72:04:68:7a:70:04:2d:e5:e7:22:d0:e6:b8:
8a:87:c3:7a:8f:57:55:c8:cc:d4:f3:23:d9:55:e4:
b7:70:54:05:1d:e3:6b:bf:04:03:33:6f:35:5a:6d:
ec:d2:f3:2b:2f:ba:1e:89:3d:b2:a3:68:a5:b8:71:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:47:1A:D4:54:8D:2B:63:7B:C7:64:B0:52:07:8F:E1:F5:38:0A:71
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:63:8c:d1:7f:62:22:52:44:b4:4a:37:d5:52:df:89:50:d8:
0f:0e:21:83:bd:02:21:8d:62:e7:aa:17:c0:e9:6f:01:8b:29:
cb:b2:3b:2e:45:3a:6c:53:6e:c3:9a:73:1e:9c:c7:ef:77:11:
0c:f4:84:27:77:bd:d0:f0:fa:f1:fa:39:89:bc:cd:93:7b:f7:
db:bd:ad:c9:4f:88:a2:21:ad:87:c6:98:da:a7:86:e7:24:5d:
0e:9e:88:cd:47:cb:f3:e6:b2:61:8c:f3:27:c6:74:fe:9f:97:
05:e2:25:00:4d:96:29:db:fc:75:42:68:74:9f:4d:92:f6:a6:
3d:c5:f9:1e:68:ff:4c:23:97:b4:91:3c:12:3c:7c:15:1e:aa:
a3:e7:40:0a:c8:c0:0d:76:17:ed:7e:ff:8f:cd:53:7a:bc:6b:
a5:79:fd:18:aa:a0:fd:aa:92:0b:77:f5:62:3e:86:ef:23:8a:
42:5a:a2:70:ae:59:38:0c:90:f1:75:cd:d9:35:cc:77:00:2f:
ab:75:43:21:2a:a1:d6:65:bb:d0:f6:91:db:e4:24:90:57:4a:
1f:55:21:ad:1d:6c:3c:7a:12:e4:7e:38:96:ec:8a:5e:5a:db:
b7:40:6e:fd:3b:a1:d5:84:87:bc:de:0b:f2:81:2a:37:d5:49:
c0:37:21:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlGkh6uaLDXZ0l5+Kf+lNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2
MTNiYzUwHhcNMjYwOTI0MTgwMTMwWhcNMjYwOTI1MTgwMTMwWjAzMTEwLwYDVQQD
EyhlMjQ3MWFkNDU0OGQyYjYzN2JjNzY0YjA1MjA3OGZlMWY1MzgwYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/WGeozmaRNHOe4112q3Zw8gNtu9
mUzcj0v3vIDy9F3NQcuYrJzHd0JhGKPQ5mQhKV1YB0OrLRLnZNYyaMQnv0YaCpZN
bdPLkLXr5wcaYNmDdaAxqQnXFXJke5+K617VFJwSWgCQq/+CK6DSJZki9pqFSjTh
zz0Zx108hyT9/vggKhUmqWvnGCyVN7P44Ttcxcm9dWUAEujYRVU3UNoloJ4R9TPW
OLBUkX5EijkzZP8ZqoJZOsj14trit+oulLZyyrNfEXIEaHpwBC3l5yLQ5riKh8N6
j1dVyMzU8yPZVeS3cFQFHeNrvwQDM281Wm3s0vMrL7oeiT2yo2iluHEiIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJHGtRUjStje8dksFIHj+H1OApxMB8GA1UdIwQY
MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt
NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4
LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2OM0X9i
IlJEtEo31VLfiVDYDw4hg70CIY1i56oXwOlvAYspy7I7LkU6bFNuw5pzHpzH73cR
DPSEJ3e90PD68fo5ibzNk3v3272tyU+IoiGth8aY2qeG5yRdDp6IzUfL8+ayYYzz
J8Z0/p+XBeIlAE2WKdv8dUJodJ9NkvamPcX5Hmj/TCOXtJE8Ejx8FR6qo+dACsjA
DXYX7X7/j81TerxrpXn9GKqg/aqSC3f1Yj6G7yOKQlqicK5ZOAyQ8XXN2TXMdwAv
q3VDISqh1mW70PaR2+QkkFdKH1UhrR1sPHoS5H44luyKXlrbt0Bu/Tuh1YSHvN4L
8oEqN9VJwDch8A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:08:40 2026 by rpki-client