Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
File: I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft (raw, json)
Hash identifier: qLPLqht7Gk58hv0cGdJClHaURJLAHRBl+wN4vfVK1e8=
Subject key identifier: 46:E8:A2:CF:77:5F:D7:63:11:34:6E:C0:E7:8E:0F:A8:0D:DC:9E:15
Authority key identifier: 23:8B:D0:FA:94:D0:08:25:D6:A9:1E:2D:FC:E6:A9:2A:36:F2:5F:B9
Certificate issuer: /CN=238bd0fa94d00825d6a91e2dfce6a92a36f25fb9
Certificate serial: 01A0DC8540592E09C851EEBB1FD755211FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
Manifest number: 46
Signing time: Sat 26 Sep 2026 07:01:55 +0000
Manifest this update: Sat 26 Sep 2026 07:01:55 +0000
Manifest next update: Sun 27 Sep 2026 07:01:55 +0000
Files and hashes: 1: I4vQ-pTQCCXWqR4t_OapKjbyX7k.crl (hash: O693wLoDhtiTeyWo6FRKvlAFSQ3w7xVxn5C2jImwSXs=)
2: dI13xkmvpmBEYbpkxQ6Dmi7062M.asa (hash: 75E6S1aKT5Pa2f20bYr6fZVc14KGFerjIYrruRaVExA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:40:59:2e:09:c8:51:ee:bb:1f:d7:55:21:1f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238bd0fa94d00825d6a91e2dfce6a92a36f25fb9
Validity
Not Before: Sep 26 07:01:55 2026 GMT
Not After : Sep 27 07:01:55 2026 GMT
Subject: CN=46e8a2cf775fd76311346ec0e78e0fa80ddc9e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:c9:4b:99:25:6e:1b:68:dc:39:93:31:64:
4f:c9:5d:f3:2c:8b:09:5e:4d:4e:cf:50:dc:a0:6c:
48:d6:f2:2f:31:db:18:a7:e7:a3:0e:ad:b5:05:01:
8c:a7:74:e7:7c:3a:89:73:10:b7:71:22:a9:5c:b6:
c0:ac:98:2f:4a:2b:98:0a:a1:83:ae:60:ce:88:f4:
d3:1f:41:3a:64:0e:02:f8:9d:1d:00:b1:a9:05:a7:
81:30:7c:01:64:94:de:c5:ac:db:6c:47:c2:e9:56:
80:06:b4:e9:fe:3a:9a:74:f3:b9:43:91:a9:e9:a8:
e1:22:46:c7:72:5d:2f:22:99:79:2c:d0:5c:4b:c3:
13:53:22:64:c1:53:8d:85:a5:89:58:45:02:06:6b:
51:df:fc:d1:1c:ba:4c:3d:03:27:f0:39:f9:5d:c6:
97:01:63:5b:03:48:84:15:bf:31:98:aa:65:ce:43:
39:de:01:92:f0:6d:39:01:6d:fb:90:e7:e1:a5:6f:
cd:d6:00:9f:4f:12:ab:d6:3a:9d:a2:ae:57:80:09:
d6:a0:64:84:83:36:0b:93:1b:34:8b:7f:58:4c:64:
21:6b:91:98:24:7f:d9:0f:51:1e:8d:2c:92:55:aa:
75:b7:d1:93:2c:76:2c:5b:b6:13:62:8b:33:b1:0d:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E8:A2:CF:77:5F:D7:63:11:34:6E:C0:E7:8E:0F:A8:0D:DC:9E:15
X509v3 Authority Key Identifier:
keyid:23:8B:D0:FA:94:D0:08:25:D6:A9:1E:2D:FC:E6:A9:2A:36:F2:5F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4vQ-pTQCCXWqR4t_OapKjbyX7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0ee259-9fa2-48df-9d08-888677db764f/1/I4vQ-pTQCCXWqR4t_OapKjbyX7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:61:a8:a9:53:04:3a:15:ee:64:3f:1b:b5:ba:45:ce:79:8e:
54:87:18:85:96:a9:eb:a3:23:72:ca:f0:f2:8d:2d:52:36:10:
52:c6:f9:b4:40:a6:84:12:60:0e:78:e8:44:9c:95:ca:b9:70:
6e:52:9e:fd:15:34:eb:bf:35:58:0a:96:9d:8b:93:21:df:d1:
3b:7a:ea:b8:65:ff:6b:ee:9e:a1:bb:82:58:bd:e8:13:5e:35:
0c:f2:97:07:d5:09:24:08:38:f9:c8:ac:93:c2:32:a4:a2:6e:
7f:0b:2a:1d:99:5c:67:63:c2:39:e3:e0:d0:1a:c0:92:56:9a:
e2:1a:69:7f:cf:58:f1:01:bc:06:91:42:02:3d:e2:c6:2c:96:
77:8a:55:8f:3d:8d:4a:ec:e4:d2:c9:36:6f:fe:2b:75:10:dc:
e4:01:ae:75:9b:5d:a4:87:df:e8:6d:b7:37:2a:5c:89:2b:a6:
8a:0a:ea:2c:6f:6f:60:70:e8:27:d7:90:59:e1:0b:ad:59:da:
67:45:0d:9d:5f:c1:cd:01:bb:9d:44:4a:7a:c5:77:91:a9:30:
0a:00:14:8c:5b:eb:bb:67:b2:ea:ef:62:78:1b:b3:59:07:54:
35:c2:de:a2:fd:64:2b:22:9e:6d:77:80:36:38:49:f1:83:ff:
40:e5:6b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchUBZLgnIUe67H9dVIR/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOGJkMGZhOTRkMDA4MjVkNmE5MWUyZGZjZTZhOTJhMzZm
MjVmYjkwHhcNMjYwOTI2MDcwMTU1WhcNMjYwOTI3MDcwMTU1WjAzMTEwLwYDVQQD
Eyg0NmU4YTJjZjc3NWZkNzYzMTEzNDZlYzBlNzhlMGZhODBkZGM5ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjHJS5klbhto3DmTMWRPyV3zLIsJ
Xk1Oz1DcoGxI1vIvMdsYp+ejDq21BQGMp3TnfDqJcxC3cSKpXLbArJgvSiuYCqGD
rmDOiPTTH0E6ZA4C+J0dALGpBaeBMHwBZJTexazbbEfC6VaABrTp/jqadPO5Q5Gp
6ajhIkbHcl0vIpl5LNBcS8MTUyJkwVONhaWJWEUCBmtR3/zRHLpMPQMn8Dn5XcaX
AWNbA0iEFb8xmKplzkM53gGS8G05AW37kOfhpW/N1gCfTxKr1jqdoq5XgAnWoGSE
gzYLkxs0i39YTGQha5GYJH/ZD1EejSySVap1t9GTLHYsW7YTYoszsQ1kUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEboos93X9djETRuwOeOD6gN3J4VMB8GA1UdIwQY
MBaAFCOL0PqU0Agl1qkeLfzmqSo28l+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTR2US1wVFFDQ1hXcVI0dF9PYXBLamJ5WDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZWUyNTktOWZhMi00OGRmLTlkMDgt
ODg4Njc3ZGI3NjRmLzEvSTR2US1wVFFDQ1hXcVI0dF9PYXBLamJ5WDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZWUyNTktOWZhMi00OGRmLTlkMDgtODg4Njc3ZGI3NjRm
LzEvSTR2US1wVFFDQ1hXcVI0dF9PYXBLamJ5WDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGGoqVME
OhXuZD8btbpFznmOVIcYhZap66Mjcsrw8o0tUjYQUsb5tECmhBJgDnjoRJyVyrlw
blKe/RU06781WAqWnYuTId/RO3rquGX/a+6eobuCWL3oE141DPKXB9UJJAg4+cis
k8IypKJufwsqHZlcZ2PCOePg0BrAklaa4hppf89Y8QG8BpFCAj3ixiyWd4pVjz2N
Suzk0sk2b/4rdRDc5AGudZtdpIff6G23NypciSumigrqLG9vYHDoJ9eQWeELrVna
Z0UNnV/BzQG7nURKesV3kakwCgAUjFvru2ey6u9ieBuzWQdUNcLeov1kKyKebXeA
NjhJ8YP/QOVr6A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:57:29 2026 by rpki-client