
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
File: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft (raw, json)
Hash identifier: u10eCSs38hm/CCDK8t+EsdZBTSy1AALeE6tfq/38dl4=
Subject key identifier: A1:B4:34:5F:DD:02:98:4A:5A:6F:D9:4A:12:71:D5:CB:68:31:FB:14
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Certificate issuer: /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial: 01A0C96B6D1518D88EE03040F6ED458AF6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
Manifest number: 01E6
Signing time: Tue 22 Sep 2026 14:00:55 +0000
Manifest this update: Tue 22 Sep 2026 14:00:55 +0000
Manifest next update: Wed 23 Sep 2026 14:00:55 +0000
Files and hashes: 1: 0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl (hash: 4sGtx30cgsKCbygJfGwMIynnpfyT14/Vw6zcK8Q7+nw=)
2: z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (hash: ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:6d:15:18:d8:8e:e0:30:40:f6:ed:45:8a:f6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Validity
Not Before: Sep 22 14:00:55 2026 GMT
Not After : Sep 23 14:00:55 2026 GMT
Subject: CN=a1b4345fdd02984a5a6fd94a1271d5cb6831fb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:1f:f8:8e:57:ab:6c:a5:9d:c2:82:02:ef:
6c:90:aa:91:bb:22:28:f4:38:34:ae:7f:88:32:a7:
f5:ab:0f:6a:c9:d8:9a:fc:ed:80:39:af:c9:ea:e6:
c1:e2:6c:a0:c7:5a:88:69:38:9d:c3:f0:13:c5:15:
96:13:bf:be:d6:da:a9:c3:74:22:8a:06:cb:e6:66:
f0:39:bf:a3:ed:10:6d:d0:22:9d:4a:27:60:10:18:
40:be:62:25:35:a3:dd:fa:5d:73:ca:92:3a:d4:74:
14:98:6b:e9:bb:f3:b0:0c:59:bd:60:d4:30:ca:18:
97:bd:b9:25:90:0d:a3:f1:52:9d:2e:59:63:36:7a:
6f:22:ff:8a:53:c1:75:f7:7a:57:71:50:47:fc:d9:
09:92:41:42:5c:72:d3:f9:55:6c:24:da:c0:be:2e:
85:8a:b9:77:69:08:5d:a4:68:cb:7a:2f:f9:ea:00:
34:43:b1:02:4c:d6:43:99:05:3e:8c:09:16:8c:fa:
9b:f2:c7:79:81:87:55:e6:e1:13:c1:7b:ee:ca:03:
55:76:c5:a1:4a:03:19:4f:c2:3a:b1:c4:3c:13:d5:
92:56:e8:4a:26:b6:3d:38:91:2b:1a:a8:7f:69:ed:
1a:75:02:ca:89:af:1c:02:cf:4c:e3:0d:38:16:3e:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B4:34:5F:DD:02:98:4A:5A:6F:D9:4A:12:71:D5:CB:68:31:FB:14
X509v3 Authority Key Identifier:
keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:aa:7e:4d:33:ac:1e:d1:af:fe:ef:29:6b:68:c4:3f:1e:1d:
d2:f8:a7:56:31:61:1f:fa:f9:70:af:9c:a1:ae:2e:08:ea:2f:
da:10:6a:be:aa:50:c7:2f:5a:1c:dc:06:b8:44:f7:47:0d:cd:
41:0b:d3:25:72:5a:f0:f1:06:02:e6:f7:49:be:59:76:f5:53:
16:19:8f:8f:96:a0:52:57:e6:4a:37:6b:1a:b2:4f:bd:8b:1e:
fb:c0:d8:8f:70:1e:9f:68:c9:72:85:97:00:e4:87:15:56:1e:
d5:33:79:a5:fc:c8:98:45:b3:44:32:eb:f2:40:f3:72:67:4f:
e7:ed:ca:0f:36:62:fb:95:4f:22:99:2f:c0:b7:4a:5d:a5:fa:
56:2d:ef:3c:8a:42:72:82:96:aa:3f:df:6a:e1:7e:60:a3:16:
68:6e:75:1c:c2:a2:7e:4e:ca:72:49:f0:de:c0:06:cf:ac:34:
18:15:d2:fb:f7:64:24:e1:61:aa:8c:39:da:ae:f1:76:85:0b:
cd:d1:23:ac:fd:67:98:83:0c:24:23:37:37:a9:8b:79:ef:8a:
a2:21:71:ad:59:64:31:43:26:d6:63:1c:f6:3d:1b:28:3b:03:
8b:e8:46:75:1e:73:24:64:97:6c:ae:7b:2f:43:52:d8:c2:d3:
f1:c5:8d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa20VGNiO4DBA9u1FivbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmUxZjU4MWNkMTFlMWQwYTJiNjkzYTUzZDNhNWI2ZmRl
ZDRkZmEwHhcNMjYwOTIyMTQwMDU1WhcNMjYwOTIzMTQwMDU1WjAzMTEwLwYDVQQD
EyhhMWI0MzQ1ZmRkMDI5ODRhNWE2ZmQ5NGExMjcxZDVjYjY4MzFmYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD0f+I5Xq2ylncKCAu9skKqRuyIo
9Dg0rn+IMqf1qw9qydia/O2AOa/J6ubB4mygx1qIaTidw/ATxRWWE7++1tqpw3Qi
igbL5mbwOb+j7RBt0CKdSidgEBhAvmIlNaPd+l1zypI61HQUmGvpu/OwDFm9YNQw
yhiXvbklkA2j8VKdLlljNnpvIv+KU8F193pXcVBH/NkJkkFCXHLT+VVsJNrAvi6F
irl3aQhdpGjLei/56gA0Q7ECTNZDmQU+jAkWjPqb8sd5gYdV5uETwXvuygNVdsWh
SgMZT8I6scQ8E9WSVuhKJrY9OJErGqh/ae0adQLKia8cAs9M4w04Fj5MxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKG0NF/dAphKWm/ZShJx1ctoMfsUMB8GA1UdIwQY
MBaAFNIuH1gc0R4dCitpOlPTpbb97U36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk0ZldCelJIaDBLSzJrNlU5T2x0djN0VGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mNWI0M2EtY2JlNi00YWM1LTk3NTgt
M2ZhMTk0NjIzMTNjLzEvMGk0ZldCelJIaDBLSzJrNlU5T2x0djN0VGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9mNWI0M2EtY2JlNi00YWM1LTk3NTgtM2ZhMTk0NjIzMTNj
LzEvMGk0ZldCelJIaDBLSzJrNlU5T2x0djN0VGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKp+TTOs
HtGv/u8pa2jEPx4d0vinVjFhH/r5cK+coa4uCOov2hBqvqpQxy9aHNwGuET3Rw3N
QQvTJXJa8PEGAub3Sb5ZdvVTFhmPj5agUlfmSjdrGrJPvYse+8DYj3Aen2jJcoWX
AOSHFVYe1TN5pfzImEWzRDLr8kDzcmdP5+3KDzZi+5VPIpkvwLdKXaX6Vi3vPIpC
coKWqj/fauF+YKMWaG51HMKifk7Kcknw3sAGz6w0GBXS+/dkJOFhqow52q7xdoUL
zdEjrP1nmIMMJCM3N6mLee+KoiFxrVlkMUMm1mMc9j0bKDsDi+hGdR5zJGSXbK57
L0NS2MLT8cWNeQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:58:46 2026 by rpki-client