Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: g9hX0LKHkF8L1iCPr6cP3JABJfelXwbmGBDPzUdiWVE=
Subject key identifier: 89:D8:53:54:BD:60:D9:81:94:69:05:67:18:73:47:1A:B6:A1:AE:3B
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 01A0D872A454015E4EEA3CC69AB3AD9890FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 09F3
Signing time: Fri 25 Sep 2026 12:03:06 +0000
Manifest this update: Fri 25 Sep 2026 12:03:06 +0000
Manifest next update: Sat 26 Sep 2026 12:03:06 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: utisj1Pn56E9GDQOPxe+Rc7RH9f7jdKMN3q/dHGPRPo=)
2: PhborNJW4v901OmJBHlugkCPu9Q.roa (hash: Woe0vtydZEfAzh9wNFeDl+e4gU+OEGllk8tizf6C77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 12:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:a4:54:01:5e:4e:ea:3c:c6:9a:b3:ad:98:90:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Sep 25 12:03:06 2026 GMT
Not After : Sep 26 12:03:06 2026 GMT
Subject: CN=89d85354bd60d981946905671873471ab6a1ae3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:aa:17:64:6b:f7:18:be:d5:9a:22:53:dc:
9f:2e:d1:eb:5d:e4:06:f9:00:c2:2b:07:a5:e9:42:
9a:77:e8:2b:46:05:f3:d9:5c:78:18:91:bd:19:b8:
57:ce:c9:ca:d5:46:80:f8:de:c0:c6:df:76:87:5b:
92:2c:10:d7:16:73:bd:50:74:a0:09:be:7e:17:10:
1d:de:21:dd:c5:7a:97:c4:8f:13:0f:a3:12:79:8d:
b0:c0:9a:d7:c2:03:18:db:75:23:b5:20:ad:5e:30:
1e:55:f9:d9:65:0c:18:55:e2:a7:49:09:66:f1:ec:
32:20:b6:4a:d6:20:9c:91:30:27:7e:0a:e9:15:51:
d4:be:e2:10:12:29:4a:e3:a3:74:4e:76:b1:4d:28:
ef:18:07:30:03:2b:f2:97:91:ed:aa:bf:75:0a:dc:
f8:45:46:6c:1f:89:b9:b0:76:89:a6:cb:5e:4e:6e:
88:aa:4a:39:a4:5e:bc:cc:22:21:f8:57:e9:5e:98:
0b:79:dc:d0:ff:b5:8b:49:0f:3d:38:7c:eb:97:6d:
13:82:cc:c8:e5:7e:7a:92:2c:83:68:d6:f8:1b:c2:
d9:b9:19:2f:e7:72:2f:ec:e2:37:40:8a:ce:e6:be:
24:02:40:07:35:5d:ed:f0:a3:3f:70:9f:9b:82:69:
f9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D8:53:54:BD:60:D9:81:94:69:05:67:18:73:47:1A:B6:A1:AE:3B
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:91:b3:7d:8c:52:11:0c:fd:04:e2:71:2a:e4:62:ba:91:48:
73:1c:ca:8c:b7:c1:dd:ba:de:21:82:27:69:80:53:44:d9:59:
96:17:da:d5:fb:a5:6e:b5:d0:6e:fe:d0:89:21:68:32:9d:5b:
f7:c1:c0:80:90:b8:93:90:37:89:77:06:55:c4:6b:af:26:65:
28:60:59:a1:82:da:72:14:ee:c9:ee:e3:8f:89:cd:a2:fd:e5:
d4:71:71:b3:0d:5c:8c:67:6e:66:94:c0:09:06:1b:e2:0e:26:
06:99:ce:fb:1b:ee:35:ff:a8:b8:6d:49:80:3d:69:c0:42:0d:
25:62:a7:da:4c:ee:3b:ec:81:93:6f:0e:fa:96:37:65:ca:ee:
fb:f1:3b:1c:0f:b9:db:83:5e:dd:af:f3:e3:e0:b6:d8:91:5f:
28:22:76:82:81:b1:bc:07:13:7e:d5:08:35:17:6e:09:1f:15:
0b:4f:d7:da:a0:12:ca:0d:f4:cb:22:8b:b3:4c:2a:2f:45:d2:
43:ba:60:12:b1:53:4f:46:ff:92:dd:e0:2a:cb:1d:39:2a:35:
ab:13:17:ec:d2:38:9e:cf:de:30:e3:4b:c7:3d:8c:65:3c:ed:
c7:29:0f:a3:9e:47:2d:1d:e4:82:2a:6c:28:c5:fc:77:fe:f8:
d1:ff:d4:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcqRUAV5O6jzGmrOtmJD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTg2MzFlZGI0ODExMzIzMjVhMWQxODZmYmRlMDFmYTE1
Nzc5MTAwHhcNMjYwOTI1MTIwMzA2WhcNMjYwOTI2MTIwMzA2WjAzMTEwLwYDVQQD
Eyg4OWQ4NTM1NGJkNjBkOTgxOTQ2OTA1NjcxODczNDcxYWI2YTFhZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRWqF2Rr9xi+1ZoiU9yfLtHrXeQG
+QDCKwel6UKad+grRgXz2Vx4GJG9GbhXzsnK1UaA+N7Axt92h1uSLBDXFnO9UHSg
Cb5+FxAd3iHdxXqXxI8TD6MSeY2wwJrXwgMY23UjtSCtXjAeVfnZZQwYVeKnSQlm
8ewyILZK1iCckTAnfgrpFVHUvuIQEilK46N0TnaxTSjvGAcwAyvyl5Htqr91Ctz4
RUZsH4m5sHaJpsteTm6Iqko5pF68zCIh+FfpXpgLedzQ/7WLSQ89OHzrl20TgszI
5X56kiyDaNb4G8LZuRkv53Iv7OI3QIrO5r4kAkAHNV3t8KM/cJ+bgmn5bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInYU1S9YNmBlGkFZxhzRxq2oa47MB8GA1UdIwQY
MBaAFOKoYx7bSBEyMlodGG+94B+hV3kQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAt
NDZkNmJhZWZkYWIxLzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YWMwNTYtYmFhNC00YzcxLWI5NDAtNDZkNmJhZWZkYWIx
LzEvNHFoakh0dElFVEl5V2gwWWI3M2dINkZYZVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppGzfYxS
EQz9BOJxKuRiupFIcxzKjLfB3breIYInaYBTRNlZlhfa1fulbrXQbv7QiSFoMp1b
98HAgJC4k5A3iXcGVcRrryZlKGBZoYLachTuye7jj4nNov3l1HFxsw1cjGduZpTA
CQYb4g4mBpnO+xvuNf+ouG1JgD1pwEINJWKn2kzuO+yBk28O+pY3Zcru+/E7HA+5
24Ne3a/z4+C22JFfKCJ2goGxvAcTftUINRduCR8VC0/X2qASyg30yyKLs0wqL0XS
Q7pgErFTT0b/kt3gKssdOSo1qxMX7NI4ns/eMONLxz2MZTztxykPo55HLR3kgips
KMX8d/740f/Uvg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:26:27 2026 by rpki-client