Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
File: 8457gT6aM4MKE7jBiDhMLcTHXJc.mft (raw, json)
Hash identifier: zJhqw7GuPgwPJ0AUMHVnpn6X1FyhQb2HGgZ06OnKYb4=
Subject key identifier: 24:35:B0:5F:86:A8:67:56:25:E0:FD:41:73:BD:E1:0B:24:A6:4E:57
Authority key identifier: F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
Certificate issuer: /CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Certificate serial: 01A0CE23F680A9C539A9480C416147A0D0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:58 +0000
Manifest this update: Wed 23 Sep 2026 12:00:58 +0000
Manifest next update: Thu 24 Sep 2026 12:00:58 +0000
Files and hashes: 1: 1lHC3eEb4JgrWUhgQdZGe237xNE.roa (hash: tiibMI6HO4qP8jmiKq9SAdjkuilfWtaVHKPxHUTz4wg=)
2: 8457gT6aM4MKE7jBiDhMLcTHXJc.crl (hash: bAy6/X1JNOM81HU/iWIqbMPCWjsVKWpZc0fbKtrRak0=)
3: PYTmdV0F9SG-733WM6hd2UxmEKQ.roa (hash: C/kjeN97nB1/VJQ7m/rVNOnzP/hxeC+2PpOB/KvRfaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:f6:80:a9:c5:39:a9:48:0c:41:61:47:a0:d0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Validity
Not Before: Sep 23 12:00:58 2026 GMT
Not After : Sep 24 12:00:58 2026 GMT
Subject: CN=2435b05f86a8675625e0fd4173bde10b24a64e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:6a:69:a9:8d:15:11:bb:49:e0:3b:e2:af:
bc:32:36:98:4f:9a:fe:ec:a6:e6:1e:58:ea:c8:50:
33:e9:25:38:c0:f6:28:c3:20:de:fe:10:2e:8b:aa:
77:ab:0e:e9:50:e9:57:7f:ea:06:46:ed:bc:10:f8:
a6:92:49:ca:35:b6:44:e0:a3:64:f0:bf:20:b1:b0:
17:b2:45:61:66:ce:a1:69:f7:c1:dc:90:aa:f3:b5:
ec:fc:29:02:0e:23:1a:4c:a3:b2:31:40:e8:36:df:
f9:5c:d7:00:d5:f1:20:8e:93:1c:dd:89:9b:52:b7:
76:79:64:ac:3b:f2:91:cf:5e:75:e5:1c:03:69:2a:
a1:dc:a8:eb:b5:64:49:85:c0:38:7c:37:80:d9:1d:
c8:22:0f:47:3d:e1:1e:c4:18:ce:a2:76:2e:2c:4e:
c9:e7:9b:07:1e:15:49:09:d6:d4:f1:cc:44:d0:e0:
f5:cb:b9:99:85:e3:19:ae:46:50:6d:3c:c3:c9:71:
e8:a6:fe:dc:22:12:60:4f:ba:04:be:12:84:0b:4a:
79:6b:35:5d:44:31:d7:b4:48:10:8c:6a:e9:f6:16:
7a:dc:53:55:7f:57:a0:70:10:bf:ad:d4:65:2f:b7:
8a:65:d0:30:0c:07:55:8e:28:48:b1:26:53:5d:f4:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:35:B0:5F:86:A8:67:56:25:E0:FD:41:73:BD:E1:0B:24:A6:4E:57
X509v3 Authority Key Identifier:
keyid:F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:20:3b:f4:3e:6a:52:c9:aa:b0:16:7d:74:ff:e8:ea:1a:03:
c4:83:4e:3d:f0:04:33:c4:62:f6:46:25:ac:ab:82:a7:b4:32:
b6:30:86:14:d0:02:49:38:93:42:b5:61:fb:8f:98:5d:38:e9:
bc:0b:82:44:91:c8:bf:de:df:8d:02:84:2d:88:ae:03:4d:b8:
97:26:d1:fe:aa:d5:19:df:1e:80:e7:97:5d:b0:00:fc:dc:4a:
fa:2a:ea:49:6c:1a:bb:46:97:90:f4:89:49:66:7f:16:00:00:
24:1c:40:20:2c:4a:05:14:6c:18:81:9a:8b:c4:ee:ca:42:c9:
85:b3:86:dc:f5:e1:9e:d8:90:43:dc:bc:63:aa:68:25:68:4c:
49:0c:dc:eb:c6:34:ba:60:b4:6c:0d:35:63:40:4b:b5:ed:52:
e3:7d:85:23:15:1b:46:d3:d0:ee:42:fc:cf:5b:bd:36:09:2b:
7d:83:d0:b5:d8:4d:3b:41:79:65:00:38:ef:eb:e5:6a:9f:c8:
7d:4e:20:b1:76:ab:29:bb:c2:27:97:41:cc:d3:f9:d6:d6:37:
17:11:f3:cf:c9:8e:df:61:41:fc:0a:a6:95:4f:a6:f6:69:3b:
c6:f7:42:13:bc:76:bb:8a:b8:19:90:66:f2:a7:9f:96:9a:f6:
1b:4b:c0:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI/aAqcU5qUgMQWFHoNC1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOGU3YjgxM2U5YTMzODMwYTEzYjhjMTg4Mzg0YzJkYzRj
NzVjOTcwHhcNMjYwOTIzMTIwMDU4WhcNMjYwOTI0MTIwMDU4WjAzMTEwLwYDVQQD
EygyNDM1YjA1Zjg2YTg2NzU2MjVlMGZkNDE3M2JkZTEwYjI0YTY0ZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSJqaamNFRG7SeA74q+8MjaYT5r+
7KbmHljqyFAz6SU4wPYowyDe/hAui6p3qw7pUOlXf+oGRu28EPimkknKNbZE4KNk
8L8gsbAXskVhZs6haffB3JCq87Xs/CkCDiMaTKOyMUDoNt/5XNcA1fEgjpMc3Ymb
Urd2eWSsO/KRz1515RwDaSqh3KjrtWRJhcA4fDeA2R3IIg9HPeEexBjOonYuLE7J
55sHHhVJCdbU8cxE0OD1y7mZheMZrkZQbTzDyXHopv7cIhJgT7oEvhKEC0p5azVd
RDHXtEgQjGrp9hZ63FNVf1egcBC/rdRlL7eKZdAwDAdVjihIsSZTXfR8AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQ1sF+GqGdWJeD9QXO94Qskpk5XMB8GA1UdIwQY
MBaAFPOOe4E+mjODChO4wYg4TC3Ex1yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODQ1N2dUNmFNNE1LRTdqQmlEaE1MY1RIWEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0Njct
OTkzOWRmMWQwZDA5LzEvODQ1N2dUNmFNNE1LRTdqQmlEaE1MY1RIWEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0NjctOTkzOWRmMWQwZDA5
LzEvODQ1N2dUNmFNNE1LRTdqQmlEaE1MY1RIWEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCA79D5q
UsmqsBZ9dP/o6hoDxINOPfAEM8Ri9kYlrKuCp7QytjCGFNACSTiTQrVh+4+YXTjp
vAuCRJHIv97fjQKELYiuA024lybR/qrVGd8egOeXXbAA/NxK+irqSWwau0aXkPSJ
SWZ/FgAAJBxAICxKBRRsGIGai8TuykLJhbOG3PXhntiQQ9y8Y6poJWhMSQzc68Y0
umC0bA01Y0BLte1S432FIxUbRtPQ7kL8z1u9NgkrfYPQtdhNO0F5ZQA47+vlap/I
fU4gsXarKbvCJ5dBzNP51tY3FxHzz8mO32FB/AqmlU+m9mk7xvdCE7x2u4q4GZBm
8qeflpr2G0vAyQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:52:29 2026 by rpki-client