Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: kdRh+DJW8FGgO0qtSba3D296Bc/Bx1b1zQBpqD1Kpag=
Subject key identifier: F7:30:55:33:B3:46:61:5B:C4:66:3E:8D:49:30:1B:60:68:2E:25:83
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 01A0D5A6B35A7558119AF4412555BC97E8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 088A
Signing time: Thu 24 Sep 2026 23:01:06 +0000
Manifest this update: Thu 24 Sep 2026 23:01:06 +0000
Manifest next update: Fri 25 Sep 2026 23:01:06 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: Q87d63k18h4JvxZNG6X7Ue3wUJCgXInJzRB9bh49W5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:b3:5a:75:58:11:9a:f4:41:25:55:bc:97:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Sep 24 23:01:06 2026 GMT
Not After : Sep 25 23:01:06 2026 GMT
Subject: CN=f7305533b346615bc4663e8d49301b60682e2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:44:07:6e:f6:e1:e8:fa:e8:5d:06:95:95:
6c:d1:af:1b:39:55:83:a8:47:30:a3:62:b5:40:a5:
ff:cb:9e:05:0b:be:5e:15:c8:98:77:7a:41:c1:04:
27:c5:51:4b:64:75:da:ac:3c:01:1a:b0:30:00:f9:
9b:52:a3:df:11:2b:ad:e1:80:ba:eb:02:78:e4:ab:
23:d2:39:5d:5e:c9:a4:df:df:09:65:1b:89:da:b3:
97:23:15:69:c5:5f:5b:b8:ef:42:c7:84:f0:1f:0d:
a1:fc:b8:4c:d2:08:be:b7:d5:00:1e:43:25:85:ac:
67:ad:67:cc:ef:76:e5:a8:69:6d:d2:99:f4:b0:db:
97:37:32:05:e5:21:5c:ee:d0:5e:f0:68:26:7f:ce:
4f:1e:b6:48:71:a5:1d:67:15:6c:c5:b7:a1:64:d9:
ec:ad:9e:2f:57:7d:b2:ba:db:a8:fe:08:0a:90:4a:
a6:44:45:bc:c1:3e:3c:d4:ea:0f:87:1a:63:d6:d4:
5c:b2:a7:f9:38:31:c3:b5:1d:ca:ba:19:57:02:10:
bd:37:69:93:e0:fc:13:47:ff:5f:44:b4:1b:e1:aa:
93:17:41:34:82:95:9c:61:82:1a:a5:c2:3a:27:a7:
45:74:95:f3:8a:4b:cf:36:86:d3:91:3d:98:c9:54:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:30:55:33:B3:46:61:5B:C4:66:3E:8D:49:30:1B:60:68:2E:25:83
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6b:c9:c0:2d:2a:d8:3f:aa:24:b3:24:1d:c7:63:c5:f4:ce:
4c:0b:28:6f:6e:35:67:18:07:af:93:10:db:73:67:af:76:08:
38:6c:7e:3c:02:9a:60:3b:71:4e:c4:59:05:a0:7f:01:70:23:
7a:15:94:d1:c3:5b:29:69:eb:ba:76:f7:12:da:46:84:fe:4c:
55:e8:10:58:a4:ce:b2:20:02:12:05:07:3c:47:43:d4:ac:d6:
cc:03:93:69:4c:2f:d2:7b:0d:9a:be:a6:2e:5c:09:ce:0e:2a:
64:8a:3f:5f:1a:90:29:be:d6:78:51:5d:8c:6d:6a:32:b0:7f:
50:af:03:70:62:a2:58:4f:0b:68:76:54:fe:d9:1f:aa:12:f6:
6d:16:d1:ed:fa:d4:5c:5a:00:19:dc:ed:30:95:e0:f2:78:a1:
7b:df:c9:0e:b0:1a:40:98:d0:96:83:61:c1:f8:5b:54:5e:63:
94:94:4c:2e:61:f7:95:40:87:71:2b:44:65:29:01:28:0a:65:
1e:0c:ca:bb:5a:b0:b5:b0:19:98:e2:97:00:d6:c5:ec:59:81:
1f:a9:c0:d7:65:4e:e5:c8:7b:f4:7e:ba:f7:cc:2c:bb:46:64:
a0:bd:dd:28:a5:7a:4f:e3:a6:05:de:1c:81:03:d4:f2:b6:11:
b1:5d:0d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVprNadVgRmvRBJVW8l+i0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjIzZjM4OTFiZDdkZTE3OWRlNDEwMzBhMmZkMWZhNThl
NDNkMTcwHhcNMjYwOTI0MjMwMTA2WhcNMjYwOTI1MjMwMTA2WjAzMTEwLwYDVQQD
EyhmNzMwNTUzM2IzNDY2MTViYzQ2NjNlOGQ0OTMwMWI2MDY4MmUyNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoJEB2724ej66F0GlZVs0a8bOVWD
qEcwo2K1QKX/y54FC75eFciYd3pBwQQnxVFLZHXarDwBGrAwAPmbUqPfESut4YC6
6wJ45Ksj0jldXsmk398JZRuJ2rOXIxVpxV9buO9Cx4TwHw2h/LhM0gi+t9UAHkMl
haxnrWfM73blqGlt0pn0sNuXNzIF5SFc7tBe8Ggmf85PHrZIcaUdZxVsxbehZNns
rZ4vV32yutuo/ggKkEqmREW8wT481OoPhxpj1tRcsqf5ODHDtR3KuhlXAhC9N2mT
4PwTR/9fRLQb4aqTF0E0gpWcYYIapcI6J6dFdJXzikvPNobTkT2YyVRbcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcwVTOzRmFbxGY+jUkwG2BoLiWDMB8GA1UdIwQY
MBaAFOHyPziRvX3hed5BAwov0fpY5D0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jM2NkNmEtYzZjMS00MDg3LTk2ZjYt
ODYxNzYzYjVmMDY1LzEvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jM2NkNmEtYzZjMS00MDg3LTk2ZjYtODYxNzYzYjVmMDY1
LzEvNGZJX09KRzlmZUY1M2tFRENpX1ItbGprUFJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2vJwC0q
2D+qJLMkHcdjxfTOTAsob241ZxgHr5MQ23Nnr3YIOGx+PAKaYDtxTsRZBaB/AXAj
ehWU0cNbKWnrunb3EtpGhP5MVegQWKTOsiACEgUHPEdD1KzWzAOTaUwv0nsNmr6m
LlwJzg4qZIo/XxqQKb7WeFFdjG1qMrB/UK8DcGKiWE8LaHZU/tkfqhL2bRbR7frU
XFoAGdztMJXg8nihe9/JDrAaQJjQloNhwfhbVF5jlJRMLmH3lUCHcStEZSkBKApl
HgzKu1qwtbAZmOKXANbF7FmBH6nA12VO5ch79H6698wsu0ZkoL3dKKV6T+OmBd4c
gQPU8rYRsV0Nyg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:55:38 2026 by rpki-client