Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
File: RSsOTTKQu-kEcHOua_f3Gik60vo.mft (raw, json)
Hash identifier: ThkY/YmTGNEGl774/P1u0vDY1Hw5WdVA8AJ5PZX75Jo=
Subject key identifier: 30:0A:F0:DB:9D:DB:AF:8D:28:90:9B:DA:F2:D2:17:A0:28:FA:13:93
Authority key identifier: 45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
Certificate issuer: /CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Certificate serial: 01A0D3F0ED2BA5104E4C0576F541F5F44288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:56 +0000
Manifest this update: Thu 24 Sep 2026 15:02:56 +0000
Manifest next update: Fri 25 Sep 2026 15:02:56 +0000
Files and hashes: 1: RSsOTTKQu-kEcHOua_f3Gik60vo.crl (hash: xFEK2b4nGUO/vjA/40kFWIEGm/LVtKl/sIWzVSWbc34=)
2: exbERZ2VE3H_IUCLP_voeLboHP0.roa (hash: JPKk8iUpWJU1p64IlQPmjoNyJZy0+8MtOgNIjDKxPyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:ed:2b:a5:10:4e:4c:05:76:f5:41:f5:f4:42:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452b0e4d3290bbe9047073ae6bf7f71a293ad2fa
Validity
Not Before: Sep 24 15:02:56 2026 GMT
Not After : Sep 25 15:02:56 2026 GMT
Subject: CN=300af0db9ddbaf8d28909bdaf2d217a028fa1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:ab:0a:63:5f:35:bb:06:14:38:01:68:b0:
93:d6:c2:57:d7:70:98:a0:9a:ab:ee:1a:60:da:b0:
63:a8:0e:01:3b:38:0b:43:2d:d3:69:0f:2a:ca:96:
55:6d:86:af:2e:57:2b:d1:fd:f3:9f:fa:cd:85:7f:
65:6e:46:7f:de:02:01:8a:3b:d6:27:e3:98:39:70:
74:bc:ea:70:e2:a5:ff:fe:e7:da:4e:a0:93:1f:07:
e3:89:2a:d6:35:48:23:2b:c2:75:c2:1a:88:2a:0c:
a1:fb:2d:40:0e:05:07:27:75:1c:72:fd:0f:8b:40:
41:0f:d8:db:a6:ce:74:51:e7:0c:03:12:af:3e:1a:
b7:cc:34:b0:a4:fc:26:fa:c8:05:3e:a1:ea:89:cf:
23:e0:ff:f7:b0:f3:2a:9a:d8:47:d0:52:27:88:81:
fb:d0:b8:2d:fe:02:88:23:f8:ee:6c:dd:a8:91:e2:
62:05:9d:79:e4:0f:89:6d:be:e5:a6:9b:8e:18:38:
ce:b9:2c:4b:95:ea:5a:f7:9b:7e:f5:20:9d:79:b2:
a6:48:9e:14:0e:fd:bc:8d:08:b0:33:f0:f9:41:af:
2f:a4:b9:bc:8f:22:c0:ff:a1:be:ae:06:a1:55:16:
e9:76:21:52:7d:47:37:1e:74:ab:e2:81:9a:b8:94:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:F0:DB:9D:DB:AF:8D:28:90:9B:DA:F2:D2:17:A0:28:FA:13:93
X509v3 Authority Key Identifier:
keyid:45:2B:0E:4D:32:90:BB:E9:04:70:73:AE:6B:F7:F7:1A:29:3A:D2:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSsOTTKQu-kEcHOua_f3Gik60vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/RSsOTTKQu-kEcHOua_f3Gik60vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:24:46:5f:46:d9:a0:0a:8f:e7:02:ec:49:28:b2:0a:81:
84:08:d7:39:a9:bc:4c:cc:41:67:44:19:31:06:9e:df:70:e3:
9f:2f:fa:50:a6:be:d2:ef:a0:d2:47:2e:1e:86:32:8c:83:5f:
9b:d4:fc:57:55:5f:9c:e5:61:ff:1b:29:3f:84:a4:2f:66:3c:
47:df:af:94:59:71:7b:d1:0a:74:19:95:14:94:64:16:28:8f:
d4:d4:eb:13:44:8a:81:58:98:c5:aa:92:3a:04:b1:d0:4b:79:
87:c3:77:3c:e4:cc:8d:f4:a4:c6:42:44:fe:61:8a:6d:9a:86:
9e:70:f1:32:65:1d:5b:a6:ff:ed:24:8d:60:e8:cc:91:2e:f4:
35:e7:ab:3d:55:b7:a8:8b:ec:7d:f3:e6:b5:16:f9:b8:56:0b:
89:da:18:d9:dc:8d:85:42:a9:4c:2d:e0:0f:d4:9e:77:7e:49:
da:91:0c:a7:b2:af:ad:72:f7:62:64:ec:f0:cb:e4:29:05:dc:
93:1c:9e:88:b8:0d:fe:b3:b3:12:5b:42:fc:63:71:56:3a:77:
74:7e:42:78:b4:aa:f9:a6:3c:38:1d:44:dc:a8:70:f3:8e:78:
7c:18:34:f3:e8:f5:89:8e:9e:75:65:96:5b:3e:8d:9a:62:f3:
5a:69:fc:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8O0rpRBOTAV29UH19EKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MmIwZTRkMzI5MGJiZTkwNDcwNzNhZTZiZjdmNzFhMjkz
YWQyZmEwHhcNMjYwOTI0MTUwMjU2WhcNMjYwOTI1MTUwMjU2WjAzMTEwLwYDVQQD
EygzMDBhZjBkYjlkZGJhZjhkMjg5MDliZGFmMmQyMTdhMDI4ZmExMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAurCmNfNbsGFDgBaLCT1sJX13CY
oJqr7hpg2rBjqA4BOzgLQy3TaQ8qypZVbYavLlcr0f3zn/rNhX9lbkZ/3gIBijvW
J+OYOXB0vOpw4qX//ufaTqCTHwfjiSrWNUgjK8J1whqIKgyh+y1ADgUHJ3Uccv0P
i0BBD9jbps50UecMAxKvPhq3zDSwpPwm+sgFPqHqic8j4P/3sPMqmthH0FIniIH7
0Lgt/gKII/jubN2okeJiBZ155A+Jbb7lppuOGDjOuSxLlepa95t+9SCdebKmSJ4U
Dv28jQiwM/D5Qa8vpLm8jyLA/6G+rgahVRbpdiFSfUc3HnSr4oGauJR4jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAK8Nud26+NKJCb2vLSF6Ao+hOTMB8GA1UdIwQY
MBaAFEUrDk0ykLvpBHBzrmv39xopOtL6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNzT1RUS1F1LWtFY0hPdWFfZjNHaWs2MHZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt
ODA0YzQ2NzkwOTNmLzEvUlNzT1RUS1F1LWtFY0hPdWFfZjNHaWs2MHZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm
LzEvUlNzT1RUS1F1LWtFY0hPdWFfZjNHaWs2MHZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9UkRl9G
2aAKj+cC7EkosgqBhAjXOam8TMxBZ0QZMQae33Djny/6UKa+0u+g0kcuHoYyjINf
m9T8V1VfnOVh/xspP4SkL2Y8R9+vlFlxe9EKdBmVFJRkFiiP1NTrE0SKgViYxaqS
OgSx0Et5h8N3POTMjfSkxkJE/mGKbZqGnnDxMmUdW6b/7SSNYOjMkS70NeerPVW3
qIvsffPmtRb5uFYLidoY2dyNhUKpTC3gD9Sed35J2pEMp7KvrXL3YmTs8MvkKQXc
kxyeiLgN/rOzEltC/GNxVjp3dH5CeLSq+aY8OB1E3Khw8454fBg08+j1iY6edWWW
Wz6NmmLzWmn89g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:47 2026 by rpki-client