
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
File: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json)
Hash identifier: J0dqVhII2uranL2liw9ru1+mhgRg3pRdBTBdJqZmg+g=
Subject key identifier: D7:B9:05:0C:1D:22:0C:65:91:79:5D:BC:43:E3:40:3E:64:1B:B0:CA
Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
Certificate issuer: /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Certificate serial: 01A0D048AEC66C44297DDDBC7EB65C6DC012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
Manifest number: 050A
Signing time: Wed 23 Sep 2026 22:00:19 +0000
Manifest this update: Wed 23 Sep 2026 22:00:19 +0000
Manifest next update: Thu 24 Sep 2026 22:00:19 +0000
Files and hashes: 1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: cLnMQMeTCGNDcBHSjvNlM6uCmlo7uFS6udp7L3yKkXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:ae:c6:6c:44:29:7d:dd:bc:7e:b6:5c:6d:c0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Validity
Not Before: Sep 23 22:00:19 2026 GMT
Not After : Sep 24 22:00:19 2026 GMT
Subject: CN=d7b9050c1d220c6591795dbc43e3403e641bb0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:63:ff:a4:08:b7:d3:2e:2f:06:91:f9:23:
51:4e:5c:62:55:e3:4e:3b:2c:44:1a:03:1c:28:f9:
3b:e0:3e:80:6e:98:9b:24:34:45:e7:64:a4:d3:7e:
f6:f3:3c:53:fc:30:e2:51:3e:9c:82:25:0b:54:22:
b2:a2:ef:eb:3a:b8:bf:c7:b4:7f:2d:73:5d:1a:3f:
54:87:81:a3:c1:cc:69:d9:9e:13:0d:5f:f2:c8:55:
1b:42:3d:a3:b9:5d:22:4d:90:8b:26:e9:bc:86:9e:
8f:52:a7:e7:b5:06:18:04:38:12:fb:36:b8:d3:08:
d6:f5:5c:d1:04:89:13:72:e5:c5:a2:82:52:d9:09:
90:71:8e:c8:2e:f5:75:fa:27:a2:f8:a1:c4:ff:9d:
9c:ca:88:fd:1f:0f:38:0c:8b:8f:a4:bd:58:dc:dd:
50:bb:6d:92:8f:22:c8:ea:5b:16:fb:e7:48:e1:95:
d8:49:89:45:6a:3d:12:93:bc:ee:f0:79:69:13:d3:
df:39:e2:ce:fc:4b:fa:ef:c4:01:92:36:ee:90:d3:
55:cf:0c:e6:47:f4:68:f2:3b:da:f3:09:fe:ba:40:
ce:d4:44:d7:38:58:ee:1b:87:f0:55:bf:88:55:79:
27:62:a0:49:7e:9d:2b:75:75:90:89:a8:5d:77:2a:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B9:05:0C:1D:22:0C:65:91:79:5D:BC:43:E3:40:3E:64:1B:B0:CA
X509v3 Authority Key Identifier:
keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3a:d4:1d:b4:a6:fa:be:a5:e1:9c:8e:bf:c0:03:8f:d9:28:
b6:35:fb:76:08:9c:fb:49:0f:17:36:8c:1d:23:c4:87:85:49:
1d:a9:b0:e9:62:96:94:55:da:1a:96:ad:06:a5:dc:3e:25:3f:
5b:51:e7:06:14:51:90:43:6a:85:48:3a:63:9a:4e:13:66:1d:
4c:1a:24:10:cf:0e:75:4c:d2:d1:e4:e5:64:89:53:76:78:04:
ce:cb:01:31:f4:f8:40:49:41:53:54:0a:c8:a3:59:2d:af:19:
98:cd:01:94:e6:36:93:1f:3f:17:c0:d5:16:1f:25:da:77:c6:
54:b9:cf:09:4d:94:d1:f9:9a:18:6b:33:70:3d:06:1b:b0:3a:
4a:94:3a:b7:e0:40:81:41:3d:af:da:a8:1f:cd:ed:c3:d1:c0:
ed:19:35:1c:f9:f5:5a:80:39:2c:37:a5:15:d6:22:ed:ab:3d:
53:4d:72:dd:30:fc:a4:5a:c2:a7:89:9a:2f:b9:9c:0e:8e:83:
0a:3f:26:be:9c:33:9e:2f:96:b5:aa:73:d0:f9:52:dd:66:87:
27:fc:ad:89:08:ee:c3:99:3d:75:5d:f1:eb:4b:f4:47:2f:d8:
5f:2a:49:06:a9:2c:b0:c9:99:58:14:cf:b6:23:25:91:22:88:
e5:d9:ce:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSK7GbEQpfd28frZcbcASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWJjODc0YWZjMjk5Y2YxMGU1YjE3ZGM4YTQzYTI0ZmI5
YzRhZTYwHhcNMjYwOTIzMjIwMDE5WhcNMjYwOTI0MjIwMDE5WjAzMTEwLwYDVQQD
EyhkN2I5MDUwYzFkMjIwYzY1OTE3OTVkYmM0M2UzNDAzZTY0MWJiMGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjJj/6QIt9MuLwaR+SNRTlxiVeNO
OyxEGgMcKPk74D6AbpibJDRF52Sk03728zxT/DDiUT6cgiULVCKyou/rOri/x7R/
LXNdGj9Uh4Gjwcxp2Z4TDV/yyFUbQj2juV0iTZCLJum8hp6PUqfntQYYBDgS+za4
0wjW9VzRBIkTcuXFooJS2QmQcY7ILvV1+iei+KHE/52cyoj9Hw84DIuPpL1Y3N1Q
u22SjyLI6lsW++dI4ZXYSYlFaj0Sk7zu8HlpE9PfOeLO/Ev678QBkjbukNNVzwzm
R/Ro8jva8wn+ukDO1ETXOFjuG4fwVb+IVXknYqBJfp0rdXWQiahddypupQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe5BQwdIgxlkXldvEPjQD5kG7DKMB8GA1UdIwQY
MBaAFOAbyHSvwpnPEOWxfcikOiT7nErmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAt
NWM4NTdhZjE5MTg4LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NzQwNTktYWRiOC00ZTY5LTkxODAtNWM4NTdhZjE5MTg4
LzEvNEJ2SWRLX0NtYzhRNWJGOXlLUTZKUHVjU3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTrUHbSm
+r6l4ZyOv8ADj9kotjX7dgic+0kPFzaMHSPEh4VJHamw6WKWlFXaGpatBqXcPiU/
W1HnBhRRkENqhUg6Y5pOE2YdTBokEM8OdUzS0eTlZIlTdngEzssBMfT4QElBU1QK
yKNZLa8ZmM0BlOY2kx8/F8DVFh8l2nfGVLnPCU2U0fmaGGszcD0GG7A6SpQ6t+BA
gUE9r9qoH83tw9HA7Rk1HPn1WoA5LDelFdYi7as9U01y3TD8pFrCp4maL7mcDo6D
Cj8mvpwzni+Wtapz0PlS3WaHJ/ytiQjuw5k9dV3x60v0Ry/YXypJBqkssMmZWBTP
tiMlkSKI5dnOOw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:18:34 2026 by rpki-client