Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: XjqGIOOKCtQ5Wg5rGfY4tjmOMWxXqspROcFeEKvbWLk=
Subject key identifier: 6D:AD:17:AD:60:59:11:EC:60:D6:04:DA:0E:69:2B:FF:71:89:B2:7D
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 01A1DCB92BBFBBBD77321166B8DFEA38CA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 0DAC
Signing time: Sun 15 Nov 2026 01:01:25 +0000
Manifest this update: Sun 15 Nov 2026 01:01:25 +0000
Manifest next update: Mon 16 Nov 2026 01:01:25 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: xZk4CUwULaqgcCy+7EhZ1jOe1MpVXnxfpJFI54u4tXY=)
2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:2b:bf:bb:bd:77:32:11:66:b8:df:ea:38:ca:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Nov 15 01:01:25 2026 GMT
Not After : Nov 16 01:01:25 2026 GMT
Subject: CN=6dad17ad605911ec60d604da0e692bff7189b27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:a7:8a:71:9d:b3:ee:6b:fc:45:92:47:37:
82:a1:12:00:03:96:29:9b:83:2c:4d:83:7d:ff:f7:
33:3a:9f:ac:f6:bc:5b:93:ed:26:e4:ab:c1:2a:c4:
1e:04:dc:9b:d4:22:1b:38:29:48:d6:5d:2e:0e:31:
ad:1a:0c:ae:83:ce:19:db:e8:67:f5:ca:01:52:3c:
bf:21:9f:5c:b3:ce:f5:cd:c5:22:84:0d:58:e8:c2:
99:9d:1a:32:ef:08:81:1f:c2:7d:34:57:7f:9e:3b:
01:ce:b1:f1:94:41:49:f3:93:c1:72:de:3e:f0:7d:
f0:48:e1:fa:ee:49:d7:29:e7:6a:f8:d4:a0:4c:9c:
fe:4d:19:79:00:6e:c1:48:03:29:08:9b:3b:a3:6b:
bc:65:bf:0a:f7:4c:61:1d:ec:5f:0b:31:07:3f:12:
e6:90:0a:e8:6b:e0:5b:16:59:7c:f6:c6:8f:7a:e1:
50:d4:d7:37:61:b5:54:c9:0f:04:0e:c4:db:85:19:
f4:62:de:d3:0c:53:02:8c:78:5b:9f:97:35:c2:c5:
ad:be:a7:25:68:9d:c3:76:7d:2d:9e:b8:73:21:2f:
21:6f:9f:e2:a7:60:d6:72:6f:68:ef:e1:77:d3:2e:
a5:9d:e3:b0:88:cb:ce:cc:3f:7f:df:ef:08:e7:83:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:17:AD:60:59:11:EC:60:D6:04:DA:0E:69:2B:FF:71:89:B2:7D
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ec:a6:e6:1c:85:51:30:c3:ef:33:53:99:2c:1b:4a:7d:21:
44:5b:61:55:59:2a:e5:33:d0:dd:76:86:fc:22:bd:7b:ca:17:
2a:2e:1f:48:e1:03:55:be:16:73:87:3f:f2:cd:73:d4:c5:44:
5d:f3:2b:c9:cc:1b:91:0c:04:2a:36:f3:01:03:70:e0:67:e7:
de:8a:e7:97:8f:8a:58:99:c1:85:a0:b9:d7:3c:ae:12:61:12:
fa:31:ea:59:93:70:29:97:39:80:40:07:e3:85:8b:18:3a:72:
3f:d7:d3:f9:98:1d:2c:5e:5a:89:e4:1d:db:e3:e3:e4:f8:d9:
d0:26:bb:39:7e:8d:de:15:a0:b2:8f:54:ea:76:4d:89:77:75:
50:4c:67:1a:53:24:ad:a4:1b:dc:0b:66:81:c4:d2:54:10:ea:
f2:b3:fc:63:97:f0:85:81:c5:4e:5f:9d:c5:4e:a7:f6:d7:e9:
82:9b:7e:de:9c:3e:31:ac:d1:a8:ba:04:c8:64:f7:38:ed:cd:
ec:e8:50:5d:81:66:61:17:0d:69:74:aa:5d:63:a6:68:ff:3c:
28:de:a0:ea:79:82:b3:07:7a:af:c9:81:4a:97:89:ba:6d:cd:
b3:21:49:fc:da:44:c7:8b:04:15:3c:56:d7:74:f7:14:dc:80:
bf:a8:8c:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuSu/u713MhFmuN/qOMqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMzQ5NGUwY2MxMmM3NWFlZDFkMDFkZWIxNWJlNGUyNjYy
YjQ4NWEwHhcNMjYxMTE1MDEwMTI1WhcNMjYxMTE2MDEwMTI1WjAzMTEwLwYDVQQD
Eyg2ZGFkMTdhZDYwNTkxMWVjNjBkNjA0ZGEwZTY5MmJmZjcxODliMjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL2ninGds+5r/EWSRzeCoRIAA5Yp
m4MsTYN9//czOp+s9rxbk+0m5KvBKsQeBNyb1CIbOClI1l0uDjGtGgyug84Z2+hn
9coBUjy/IZ9cs871zcUihA1Y6MKZnRoy7wiBH8J9NFd/njsBzrHxlEFJ85PBct4+
8H3wSOH67knXKedq+NSgTJz+TRl5AG7BSAMpCJs7o2u8Zb8K90xhHexfCzEHPxLm
kAroa+BbFll89saPeuFQ1Nc3YbVUyQ8EDsTbhRn0Yt7TDFMCjHhbn5c1wsWtvqcl
aJ3Ddn0tnrhzIS8hb5/ip2DWcm9o7+F30y6lneOwiMvOzD9/3+8I54NI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2tF61gWRHsYNYE2g5pK/9xibJ9MB8GA1UdIwQY
MBaAFOI0lODMEsda7R0B3rFb5OJmK0haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUt
MjI3NDBiZjJkNWVhLzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wZGI1ZTYtODY3Yy00YzNjLWJiNGUtMjI3NDBiZjJkNWVh
LzEvNGpTVTRNd1N4MXJ0SFFIZXNWdms0bVlyU0ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuym5hyF
UTDD7zNTmSwbSn0hRFthVVkq5TPQ3XaG/CK9e8oXKi4fSOEDVb4Wc4c/8s1z1MVE
XfMrycwbkQwEKjbzAQNw4Gfn3ornl4+KWJnBhaC51zyuEmES+jHqWZNwKZc5gEAH
44WLGDpyP9fT+ZgdLF5aieQd2+Pj5PjZ0Ca7OX6N3hWgso9U6nZNiXd1UExnGlMk
raQb3AtmgcTSVBDq8rP8Y5fwhYHFTl+dxU6n9tfpgpt+3pw+MazRqLoEyGT3OO3N
7OhQXYFmYRcNaXSqXWOmaP88KN6g6nmCswd6r8mBSpeJum3NsyFJ/NpEx4sEFTxW
13T3FNyAv6iMnA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:05 2026 by rpki-client