Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
File: c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft (raw, json)
Hash identifier: LRDCC779X9v0mIBvQ7FUTHaqWEKZItX5k4UOG/X1vOE=
Subject key identifier: 68:DA:28:2C:BE:B1:C1:68:D7:0B:34:86:7E:52:1E:58:52:EB:14:F9
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Certificate issuer: /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial: 01A0D3150A5A74D0719E5A1F3DDCEBA16900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
Manifest number: 19FF
Signing time: Thu 24 Sep 2026 11:02:46 +0000
Manifest this update: Thu 24 Sep 2026 11:02:46 +0000
Manifest next update: Fri 25 Sep 2026 11:02:46 +0000
Files and hashes: 1: SVarLmaFK1gZU_TfSGis_la3Ar8.asa (hash: AxUYPkNtLAYd85/HBabHn3Sr8OfRouCMGQZAizRdgPY=)
2: c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl (hash: PKewtHCvDr5jASJo1RPoMa/3FV3sikBRbYV4g74iCso=)
3: r-lSdkFJmIx7S9lbAiwH1l8mV0U.roa (hash: ZccLhzPfTQovlv2pD2Hypaasm3jNsKh86uT4/OsCE2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:0a:5a:74:d0:71:9e:5a:1f:3d:dc:eb:a1:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
Validity
Not Before: Sep 24 11:02:46 2026 GMT
Not After : Sep 25 11:02:46 2026 GMT
Subject: CN=68da282cbeb1c168d70b34867e521e5852eb14f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:18:fb:82:18:30:ac:6c:be:76:58:25:91:
a8:47:dd:c4:ed:a9:4e:64:36:4e:2b:c7:31:8f:bf:
10:c8:ee:f4:16:73:bc:2d:02:38:81:e8:9c:9d:8e:
9f:4e:5d:c4:36:53:cc:8e:73:a3:63:56:e9:b0:24:
61:65:c6:84:06:ec:0f:1d:14:13:31:22:70:ab:13:
da:c9:2e:f7:c6:7b:d6:de:e7:a7:96:65:ab:50:12:
ef:ac:08:fe:ea:a8:be:27:d7:02:b9:a6:a8:d2:bf:
cb:a1:36:36:1c:d8:b1:35:b8:8e:bd:62:a9:26:70:
74:6a:f5:c4:7c:a5:46:55:9b:4c:ac:7d:d1:93:d4:
6a:a0:c4:6e:d9:bc:70:43:29:4b:62:91:ae:9b:97:
00:4d:30:a0:48:44:73:16:99:69:b0:a1:9d:4f:30:
67:9f:3f:a2:9b:2f:96:fa:c7:f3:67:80:cc:02:07:
b0:de:2f:50:eb:71:f1:7c:d4:56:26:3d:c1:d0:e0:
23:c3:47:1e:51:18:1c:9b:f7:d9:ac:4e:3a:6e:e2:
1c:00:7c:dc:97:68:be:5a:17:67:d4:b8:02:18:f7:
eb:bc:7f:26:12:05:ca:97:1f:e7:35:e6:4e:9d:c6:
d3:c8:cb:26:7c:6b:fe:8b:6c:82:99:d4:e7:69:10:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DA:28:2C:BE:B1:C1:68:D7:0B:34:86:7E:52:1E:58:52:EB:14:F9
X509v3 Authority Key Identifier:
keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:07:b4:15:00:ba:15:2d:01:57:5e:63:d6:f7:a9:05:7f:fd:
96:b8:4b:cb:a0:59:5e:ba:d1:05:66:a1:97:46:6e:11:0a:14:
4d:95:bb:da:33:3f:28:16:1a:ae:4c:82:ac:ae:4c:9c:52:ce:
27:4c:63:15:08:30:c3:9b:ca:24:14:61:3d:6c:1d:63:c0:c6:
5e:f6:f1:4d:c7:0c:d8:02:2f:f6:36:e0:1c:79:f9:16:6a:c0:
c8:b0:11:3d:e9:47:43:26:ad:ce:fe:74:e1:d4:f5:d3:8c:2d:
58:2e:6b:e5:90:13:a3:7e:13:a9:96:fb:f0:b7:65:6b:56:b5:
06:55:fb:c2:83:24:94:82:b8:11:6e:14:61:8e:aa:35:82:a9:
e8:f8:29:21:cf:1b:4e:00:8c:4a:80:da:d1:c0:a8:43:db:2e:
c0:e9:2c:da:11:90:6e:87:9e:32:74:d8:c4:b8:aa:41:00:86:
4e:51:4f:3e:e4:51:be:18:50:01:56:1c:a6:1b:77:47:4b:85:
77:ea:ee:7a:bc:4f:56:47:f5:4e:60:2d:8e:79:8d:b4:88:e1:
a5:ca:e9:31:fa:62:d3:07:d7:77:04:a1:82:35:f7:6b:81:af:
e3:a4:c6:84:e5:aa:6b:d2:61:08:c2:d2:07:a2:dc:54:60:fb:
73:58:dc:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFQpadNBxnlofPdzroWkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOGZkOTQ2NzgyMWQwNTI4NmY0YjMzYmU4NjE3NjY1MWI2
YWZmM2UwHhcNMjYwOTI0MTEwMjQ2WhcNMjYwOTI1MTEwMjQ2WjAzMTEwLwYDVQQD
Eyg2OGRhMjgyY2JlYjFjMTY4ZDcwYjM0ODY3ZTUyMWU1ODUyZWIxNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBgY+4IYMKxsvnZYJZGoR93E7alO
ZDZOK8cxj78QyO70FnO8LQI4geicnY6fTl3ENlPMjnOjY1bpsCRhZcaEBuwPHRQT
MSJwqxPayS73xnvW3uenlmWrUBLvrAj+6qi+J9cCuaao0r/LoTY2HNixNbiOvWKp
JnB0avXEfKVGVZtMrH3Rk9RqoMRu2bxwQylLYpGum5cATTCgSERzFplpsKGdTzBn
nz+imy+W+sfzZ4DMAgew3i9Q63HxfNRWJj3B0OAjw0ceURgcm/fZrE46buIcAHzc
l2i+Whdn1LgCGPfrvH8mEgXKlx/nNeZOncbTyMsmfGv+i2yCmdTnaRBaaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjaKCy+scFo1ws0hn5SHlhS6xT5MB8GA1UdIwQY
MBaAFHOP2UZ4IdBShvSzO+hhdmUbav8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iN2NkOTEtN2U0YS00NmNmLTk0OTgt
MDlmYWMwNjk3NjQ5LzEvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iN2NkOTEtN2U0YS00NmNmLTk0OTgtMDlmYWMwNjk3NjQ5
LzEvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAege0FQC6
FS0BV15j1vepBX/9lrhLy6BZXrrRBWahl0ZuEQoUTZW72jM/KBYarkyCrK5MnFLO
J0xjFQgww5vKJBRhPWwdY8DGXvbxTccM2AIv9jbgHHn5FmrAyLARPelHQyatzv50
4dT104wtWC5r5ZATo34TqZb78Ldla1a1BlX7woMklIK4EW4UYY6qNYKp6PgpIc8b
TgCMSoDa0cCoQ9suwOks2hGQboeeMnTYxLiqQQCGTlFPPuRRvhhQAVYcpht3R0uF
d+ruerxPVkf1TmAtjnmNtIjhpcrpMfpi0wfXdwShgjX3a4Gv46TGhOWqa9JhCMLS
B6LcVGD7c1jcwA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:13:42 2026 by rpki-client