Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier: jwhdMHl5euRKYO5hN3CUmsw2gvYj7w4tDBcOnr2xiR8=
Subject key identifier: 24:BA:C2:79:6D:A7:EF:00:07:28:6C:48:87:81:28:61:1C:02:DE:59
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial: 01A106930D00FD398808569017D2D207C8BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number: 1A16
Signing time: Sun 04 Oct 2026 11:01:02 +0000
Manifest this update: Sun 04 Oct 2026 11:01:02 +0000
Manifest next update: Mon 05 Oct 2026 11:01:02 +0000
Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: e7JO2s+PIUxy67k074BoMpGr1DFtp7QGseIlR+UR/yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:0d:00:fd:39:88:08:56:90:17:d2:d2:07:c8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Validity
Not Before: Oct 4 11:01:02 2026 GMT
Not After : Oct 5 11:01:02 2026 GMT
Subject: CN=24bac2796da7ef0007286c48878128611c02de59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:06:9c:59:38:79:6f:24:4b:72:3a:2a:4e:
a5:aa:f1:c0:fa:dd:99:db:c1:19:df:05:9a:f6:bb:
cd:a4:a5:c0:bc:3a:4a:d6:59:29:7d:e9:7f:bb:75:
17:a7:fd:2f:d8:a4:87:07:bd:91:7c:ce:e0:5b:b5:
03:86:d6:40:6f:3a:21:53:ad:0b:59:05:91:6c:95:
19:22:c1:df:d9:cb:8d:ec:9c:ca:ba:f6:9b:71:94:
2e:27:06:47:07:e8:4a:2f:ca:36:dd:82:5a:d0:57:
2a:f8:18:c8:51:80:8b:b8:8d:4a:58:b9:f7:54:c1:
7d:72:f0:bb:fc:41:51:37:3b:7b:ba:64:cb:54:25:
49:52:62:53:82:5e:43:a4:d7:83:52:c1:19:b2:a6:
05:a4:b4:9e:d2:14:37:c8:cf:e6:4b:19:86:c5:84:
80:5c:50:9c:e3:aa:64:60:15:23:63:96:50:e5:f1:
6a:b0:7d:a2:9f:0c:31:22:c6:cf:b5:e8:7a:94:88:
4e:d2:18:68:ed:de:e5:a8:68:16:30:9a:9d:19:0f:
f8:77:4d:36:1f:70:36:9f:86:78:a2:39:45:5c:a4:
8f:37:7e:d4:6f:be:a6:20:10:7f:2a:36:1d:77:e9:
73:a7:f2:15:aa:2f:37:5f:b7:a7:07:e5:20:30:7a:
ba:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BA:C2:79:6D:A7:EF:00:07:28:6C:48:87:81:28:61:1C:02:DE:59
X509v3 Authority Key Identifier:
keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:1d:cc:9d:7b:78:31:eb:b4:b3:07:01:65:27:2a:8d:b1:
c0:fc:cc:24:9e:07:37:77:fa:7e:16:21:a6:f2:91:8e:e7:e2:
a3:d9:5c:b2:cb:e8:32:29:f3:06:2c:52:5a:39:d9:44:e6:34:
30:53:27:5e:55:b2:36:66:a6:31:cf:ce:8e:02:a2:66:f0:98:
23:d3:99:c9:f0:e1:34:0e:ac:d7:a5:11:42:c4:43:eb:8b:e7:
dd:96:30:39:c3:bf:97:34:eb:6e:0c:44:07:c3:74:7f:09:70:
53:cb:46:5b:b0:dc:f0:33:62:5d:39:40:ca:c5:e6:db:8f:23:
73:be:15:50:19:95:50:e1:25:5b:69:c0:f7:96:f0:fd:ad:10:
b4:78:86:bf:5e:30:5b:51:34:64:7a:1f:b3:dc:70:3b:a6:dd:
44:26:c3:65:41:a9:5b:55:38:3f:e7:b1:ec:59:35:e5:f2:78:
b1:63:47:d3:3f:b5:f6:a1:b7:2d:fb:2d:dc:67:e7:e5:7b:13:
0a:93:4b:b2:24:09:f0:22:51:7c:03:e4:ad:59:ea:11:c1:eb:
c2:d6:8b:62:24:ed:42:bb:76:d2:c2:f2:b6:fc:75:19:c7:8b:
bf:86:1d:70:42:a4:a5:b2:4a:e8:fd:05:d2:8b:6f:ff:ef:7f:
37:74:27:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGkw0A/TmICFaQF9LSB8i/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYjU2ZmYyZmFlNWY2MjE5NDkyYzEyZDgzZTEyMzlkNmFk
NmUxMmYwHhcNMjYxMDA0MTEwMTAyWhcNMjYxMDA1MTEwMTAyWjAzMTEwLwYDVQQD
EygyNGJhYzI3OTZkYTdlZjAwMDcyODZjNDg4NzgxMjg2MTFjMDJkZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQwGnFk4eW8kS3I6Kk6lqvHA+t2Z
28EZ3wWa9rvNpKXAvDpK1lkpfel/u3UXp/0v2KSHB72RfM7gW7UDhtZAbzohU60L
WQWRbJUZIsHf2cuN7JzKuvabcZQuJwZHB+hKL8o23YJa0Fcq+BjIUYCLuI1KWLn3
VMF9cvC7/EFRNzt7umTLVCVJUmJTgl5DpNeDUsEZsqYFpLSe0hQ3yM/mSxmGxYSA
XFCc46pkYBUjY5ZQ5fFqsH2inwwxIsbPteh6lIhO0hho7d7lqGgWMJqdGQ/4d002
H3A2n4Z4ojlFXKSPN37Ub76mIBB/KjYdd+lzp/IVqi83X7enB+UgMHq6ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS6wnltp+8AByhsSIeBKGEcAt5ZMB8GA1UdIwQY
MBaAFOK1b/L65fYhlJLBLYPhI51q1uEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODkt
NGY2N2ZmNTgxMTQxLzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xMDhiZmYtNmU3MC00M2QyLWFkODktNGY2N2ZmNTgxMTQx
LzEvNHJWdjh2cmw5aUdVa3NFdGctRWpuV3JXNFM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJkdzJ17
eDHrtLMHAWUnKo2xwPzMJJ4HN3f6fhYhpvKRjufio9lcssvoMinzBixSWjnZROY0
MFMnXlWyNmamMc/OjgKiZvCYI9OZyfDhNA6s16URQsRD64vn3ZYwOcO/lzTrbgxE
B8N0fwlwU8tGW7Dc8DNiXTlAysXm248jc74VUBmVUOElW2nA95bw/a0QtHiGv14w
W1E0ZHofs9xwO6bdRCbDZUGpW1U4P+ex7Fk15fJ4sWNH0z+19qG3Lfst3Gfn5XsT
CpNLsiQJ8CJRfAPkrVnqEcHrwtaLYiTtQrt20sLytvx1GceLv4YdcEKkpbJK6P0F
0otv/+9/N3QnsA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:43:46 2026 by rpki-client