
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: 8w7KBGlxHNU/xRAOwdsSDJjaPwyEiGsLyxOlElFIk7k=
Subject key identifier: 04:0A:D0:84:0E:4C:75:90:78:D1:0F:5C:2B:1B:1E:E4:51:89:13:0C
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 01A0CE91D935CF51F9B844C43CB449AA8DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 0E15
Signing time: Wed 23 Sep 2026 14:00:59 +0000
Manifest this update: Wed 23 Sep 2026 14:00:59 +0000
Manifest next update: Thu 24 Sep 2026 14:00:59 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: j/2Oo42UWvUF7q6AEZgdqwf7qxRzeMu8g1BAmHxLOA8=)
2: Xe_49qP_RwifxY8lxqIdGWlN9Yo.roa (hash: 0p7ZxsSara0zAMrBMjKosv4Q0grMmOgXjOvvhV5ruz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:d9:35:cf:51:f9:b8:44:c4:3c:b4:49:aa:8d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Sep 23 14:00:59 2026 GMT
Not After : Sep 24 14:00:59 2026 GMT
Subject: CN=040ad0840e4c759078d10f5c2b1b1ee45189130c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:13:7e:82:90:a4:94:a1:63:6f:f6:9e:57:
00:7a:01:af:0a:3d:ff:1a:4f:17:a4:d9:7b:0c:fb:
a0:85:30:db:51:28:21:c8:7b:00:ee:20:ba:9d:d3:
f6:d7:fe:e0:e4:90:27:7a:8f:24:59:32:89:05:9d:
43:b3:0c:fc:48:36:72:28:d6:4f:4e:96:85:b5:de:
17:33:81:b7:f0:aa:29:07:ca:c8:2c:21:b1:27:c2:
e4:04:36:6b:66:4a:d9:69:9b:60:96:7f:36:5c:b5:
d4:fd:4e:78:0a:44:09:84:22:cd:d6:c5:a5:81:5e:
9b:f2:08:96:bb:61:d6:c6:98:7d:af:5e:03:25:a4:
fa:56:1b:41:64:8e:99:38:f3:de:61:7b:94:86:0e:
00:68:8d:ba:7b:d8:25:b8:43:5f:c0:42:39:c2:aa:
83:24:2d:dd:33:83:8a:79:27:06:c3:5f:b9:b9:21:
1c:ef:17:63:c4:af:d6:c3:17:e5:06:ae:18:ec:e0:
0e:f8:27:61:56:a9:10:fb:c6:3b:97:f8:19:5b:42:
5a:e0:7e:85:0f:99:0c:e2:44:c3:84:85:7b:7d:35:
30:1c:05:71:32:cb:0a:40:76:1e:4c:69:0a:72:4e:
b2:ab:5d:68:f7:43:e9:0b:a6:54:6a:32:e4:c9:3a:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:D0:84:0E:4C:75:90:78:D1:0F:5C:2B:1B:1E:E4:51:89:13:0C
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:77:d0:e8:6c:4f:fd:1e:76:2a:87:bc:ca:78:83:2d:42:58:
11:ff:33:a4:fe:42:e9:35:90:48:08:31:e1:81:bd:e2:ce:91:
4c:f9:af:cb:46:d3:ef:a6:c8:1a:39:1e:ae:56:40:45:d8:f3:
50:09:86:5e:3c:65:5e:fa:62:9d:60:a2:72:6d:7e:1d:5f:f9:
5c:af:9b:80:a4:b6:87:80:a3:cc:50:0c:5e:c8:a4:89:5e:dc:
4c:55:3c:02:c6:b6:cb:b6:db:7b:7a:92:56:ff:3b:ea:11:57:
3d:75:b4:71:98:25:22:d5:a2:60:2f:5f:25:0b:ca:53:7c:1c:
28:55:47:44:3e:64:de:f5:5b:27:06:cc:f2:32:24:e8:51:a2:
db:89:70:9f:88:b9:af:61:b8:15:42:01:ee:03:34:f0:c7:82:
de:e1:6c:4e:fe:a0:1e:9d:8e:e2:cf:97:a8:6e:d2:0d:e4:95:
27:0e:a2:dd:ed:ce:25:21:6b:f0:d4:f4:b3:08:43:95:8f:eb:
a8:d3:12:a5:5a:9e:75:e5:c8:b6:5a:8f:85:df:67:b0:89:d9:
8f:63:59:64:18:73:9b:30:62:27:f6:c8:53:c5:5a:3a:e3:44:
90:d9:ef:4a:76:be:29:aa:31:6d:40:7d:df:b7:33:00:c3:3c:
a8:14:46:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkdk1z1H5uETEPLRJqo3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzRjNGUxYjAwY2U1YmZiMGQ5NmQ0YzIxZWZkMDU4ZDNi
NWNhNzkwHhcNMjYwOTIzMTQwMDU5WhcNMjYwOTI0MTQwMDU5WjAzMTEwLwYDVQQD
EygwNDBhZDA4NDBlNGM3NTkwNzhkMTBmNWMyYjFiMWVlNDUxODkxMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaATfoKQpJShY2/2nlcAegGvCj3/
Gk8XpNl7DPughTDbUSghyHsA7iC6ndP21/7g5JAneo8kWTKJBZ1Dswz8SDZyKNZP
TpaFtd4XM4G38KopB8rILCGxJ8LkBDZrZkrZaZtgln82XLXU/U54CkQJhCLN1sWl
gV6b8giWu2HWxph9r14DJaT6VhtBZI6ZOPPeYXuUhg4AaI26e9gluENfwEI5wqqD
JC3dM4OKeScGw1+5uSEc7xdjxK/WwxflBq4Y7OAO+CdhVqkQ+8Y7l/gZW0Ja4H6F
D5kM4kTDhIV7fTUwHAVxMssKQHYeTGkKck6yq11o90PpC6ZUajLkyTrzPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQK0IQOTHWQeNEPXCsbHuRRiRMMMB8GA1UdIwQY
MBaAFNZ0xOGwDOW/sNltTCHv0FjTtcp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4Nzgt
YmE1NTcyZTc3NGVkLzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iYjIxZmMtYjI1Mi00YWIyLTk4NzgtYmE1NTcyZTc3NGVk
LzEvMW5URTRiQU01Yi13MlcxTUllX1FXTk8xeW5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXfQ6GxP
/R52Koe8yniDLUJYEf8zpP5C6TWQSAgx4YG94s6RTPmvy0bT76bIGjkerlZARdjz
UAmGXjxlXvpinWCicm1+HV/5XK+bgKS2h4CjzFAMXsikiV7cTFU8Asa2y7bbe3qS
Vv876hFXPXW0cZglItWiYC9fJQvKU3wcKFVHRD5k3vVbJwbM8jIk6FGi24lwn4i5
r2G4FUIB7gM08MeC3uFsTv6gHp2O4s+XqG7SDeSVJw6i3e3OJSFr8NT0swhDlY/r
qNMSpVqedeXItlqPhd9nsInZj2NZZBhzmzBiJ/bIU8VaOuNEkNnvSna+KaoxbUB9
37czAMM8qBRGuw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:45:58 2026 by rpki-client