Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
File: c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft (raw, json)
Hash identifier: 5CfCbJfNz+uqymVw2fHzKbIIbt27CU0H+uW5yUgaF4Q=
Subject key identifier: 3F:6B:23:2D:3E:E0:17:AD:AC:A0:35:E9:42:BF:8F:A7:DA:3E:0C:2E
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Certificate issuer: /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial: 01A1DF834A9A996855E696A2CB25832F5741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 14:01:25 +0000
Manifest this update: Sun 15 Nov 2026 14:01:25 +0000
Manifest next update: Mon 16 Nov 2026 14:01:25 +0000
Files and hashes: 1: SVarLmaFK1gZU_TfSGis_la3Ar8.asa (hash: AxUYPkNtLAYd85/HBabHn3Sr8OfRouCMGQZAizRdgPY=)
2: c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl (hash: Qwfyz665iTTBqkZDB2JSMSnms7yzSaB5IrJxCzqibEY=)
3: r-lSdkFJmIx7S9lbAiwH1l8mV0U.roa (hash: ZccLhzPfTQovlv2pD2Hypaasm3jNsKh86uT4/OsCE2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:4a:9a:99:68:55:e6:96:a2:cb:25:83:2f:57:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
Validity
Not Before: Nov 15 14:01:25 2026 GMT
Not After : Nov 16 14:01:25 2026 GMT
Subject: CN=3f6b232d3ee017adaca035e942bf8fa7da3e0c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:5c:7d:13:a2:5b:0a:95:d7:74:5c:4e:5b:
6f:b8:6b:d5:09:ce:c2:2b:ee:ac:19:70:a7:7c:ab:
11:c1:07:30:70:6f:93:c4:7b:a4:75:7b:92:17:48:
8c:b2:e6:91:9f:ed:e6:99:b5:15:fc:fe:56:43:f5:
dd:12:3f:2d:4f:1d:5d:8e:fc:65:51:c0:14:8d:49:
b2:ca:a1:d8:8e:2e:69:17:ba:fe:c2:ad:8d:45:6b:
ee:71:37:f0:24:5f:5a:97:e4:e2:8d:4f:66:db:1c:
9e:26:85:44:d7:38:0e:c1:e3:b3:5d:0b:a1:6d:37:
83:ae:ca:3f:2f:2e:8c:9c:8e:bd:4e:2c:39:36:c8:
76:60:e7:89:d5:52:49:fd:4e:ae:d5:7f:77:9f:87:
9e:da:fe:92:bd:2c:5d:0a:17:87:c1:47:82:b6:d4:
cf:54:ab:6d:0f:bf:dc:50:ba:fb:55:7b:48:9b:14:
d3:8c:a8:12:a5:34:69:fd:9a:c8:f0:fe:26:66:20:
bd:0e:85:1f:d1:0c:d6:d6:8c:9c:ec:38:7b:9a:1d:
3a:5f:b5:04:c8:c6:bd:1f:9a:b5:69:1e:56:81:9c:
55:4c:16:68:67:ae:6a:6c:45:9b:43:01:ff:7b:51:
db:81:ab:f5:d2:f7:53:90:f3:96:1e:d6:5c:6f:c1:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:23:2D:3E:E0:17:AD:AC:A0:35:E9:42:BF:8F:A7:DA:3E:0C:2E
X509v3 Authority Key Identifier:
keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:38:f6:11:9a:91:3d:8e:dd:18:22:48:8e:2f:54:d6:b6:56:
ac:e0:0a:85:dc:33:2b:47:cd:3e:ae:2c:66:52:82:e1:35:09:
b1:5e:27:4d:76:63:1b:c7:64:60:26:f6:26:76:18:68:da:19:
d6:e9:ef:c0:5e:3a:6d:1f:2e:ec:09:96:7f:2a:8a:6b:1b:b2:
d3:a3:dc:89:a2:52:94:4a:d8:be:55:52:ee:cc:c0:b1:9e:ee:
0d:ed:ee:a9:14:0b:31:e5:7a:6e:03:7d:7c:30:93:71:c3:9e:
db:fc:b5:ca:53:35:6a:49:cd:f6:6c:eb:94:91:f6:2b:65:7a:
12:44:0f:9f:36:92:13:2d:5a:8a:76:e7:71:8d:4d:0d:e8:a8:
15:d9:7d:37:ed:e9:02:99:e2:3a:a8:89:3d:2f:89:bf:87:57:
ec:90:6e:15:98:16:fc:04:36:a8:93:ab:3c:4f:fd:50:b8:ee:
b9:e3:04:71:67:cc:4a:9c:f6:8d:5d:2d:a3:2a:80:65:90:4e:
66:19:cf:6d:ae:a2:6d:4d:bc:01:30:7b:c4:f0:26:48:58:0c:
f1:50:b8:6d:30:04:a5:21:34:6c:32:cf:78:f2:8d:27:54:17:
09:5f:e2:12:9e:b9:f6:bf:74:70:a9:a0:e9:45:39:a8:7e:d1:
1a:51:bd:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfg0qamWhV5paiyyWDL1dBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczOGZkOTQ2NzgyMWQwNTI4NmY0YjMzYmU4NjE3NjY1MWI2
YWZmM2UwHhcNMjYxMTE1MTQwMTI1WhcNMjYxMTE2MTQwMTI1WjAzMTEwLwYDVQQD
EygzZjZiMjMyZDNlZTAxN2FkYWNhMDM1ZTk0MmJmOGZhN2RhM2UwYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1FcfROiWwqV13RcTltvuGvVCc7C
K+6sGXCnfKsRwQcwcG+TxHukdXuSF0iMsuaRn+3mmbUV/P5WQ/XdEj8tTx1djvxl
UcAUjUmyyqHYji5pF7r+wq2NRWvucTfwJF9al+TijU9m2xyeJoVE1zgOweOzXQuh
bTeDrso/Ly6MnI69Tiw5Nsh2YOeJ1VJJ/U6u1X93n4ee2v6SvSxdCheHwUeCttTP
VKttD7/cULr7VXtImxTTjKgSpTRp/ZrI8P4mZiC9DoUf0QzW1oyc7Dh7mh06X7UE
yMa9H5q1aR5WgZxVTBZoZ65qbEWbQwH/e1Hbgav10vdTkPOWHtZcb8FNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9rIy0+4BetrKA16UK/j6faPgwuMB8GA1UdIwQY
MBaAFHOP2UZ4IdBShvSzO+hhdmUbav8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iN2NkOTEtN2U0YS00NmNmLTk0OTgt
MDlmYWMwNjk3NjQ5LzEvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iN2NkOTEtN2U0YS00NmNmLTk0OTgtMDlmYWMwNjk3NjQ5
LzEvYzRfWlJuZ2gwRktHOUxNNzZHRjJaUnRxX3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDj2EZqR
PY7dGCJIji9U1rZWrOAKhdwzK0fNPq4sZlKC4TUJsV4nTXZjG8dkYCb2JnYYaNoZ
1unvwF46bR8u7AmWfyqKaxuy06PciaJSlErYvlVS7szAsZ7uDe3uqRQLMeV6bgN9
fDCTccOe2/y1ylM1aknN9mzrlJH2K2V6EkQPnzaSEy1ainbncY1NDeioFdl9N+3p
ApniOqiJPS+Jv4dX7JBuFZgW/AQ2qJOrPE/9ULjuueMEcWfMSpz2jV0toyqAZZBO
ZhnPba6ibU28ATB7xPAmSFgM8VC4bTAEpSE0bDLPePKNJ1QXCV/iEp659r90cKmg
6UU5qH7RGlG9Kg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:50:52 2026 by rpki-client