Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: P25rXR95PTOUhqkP9hvNaaycR6IKR6NNG/8HDVj/Gdc=
Subject key identifier: E0:8E:BF:C7:A0:AB:E4:69:02:9C:69:5E:17:FD:77:A7:D0:78:29:08
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 01A0CD7EE5E69DE02F29BE81E7E075980369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 13D1
Signing time: Wed 23 Sep 2026 09:00:40 +0000
Manifest this update: Wed 23 Sep 2026 09:00:40 +0000
Manifest next update: Thu 24 Sep 2026 09:00:40 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: kQDxJ0hbQvFrcKZ/Q6f71Wzk5wd7g/1LTE4rrfmUTBA=)
2: bOTyO1jGNXvTUzXi3EztaGmz3K4.roa (hash: 5vKYEUvZMHjV6NuMxD9j9IkwxVI/1099N+1KTRpjjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:e5:e6:9d:e0:2f:29:be:81:e7:e0:75:98:03:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Sep 23 09:00:40 2026 GMT
Not After : Sep 24 09:00:40 2026 GMT
Subject: CN=e08ebfc7a0abe469029c695e17fd77a7d0782908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:31:a7:e9:7e:f7:b6:ba:eb:ce:94:3f:7f:
2c:70:e6:30:62:43:83:65:c5:c3:b0:e3:b0:91:65:
87:0e:49:2c:46:30:8d:a2:30:ff:47:7e:41:d3:fd:
b5:61:21:1f:6a:65:1d:3b:6f:81:8c:2f:33:6c:93:
81:74:a4:8a:08:2b:e3:14:56:13:d5:09:f7:b5:96:
80:9b:ca:ee:c1:27:60:b0:e3:20:dd:ee:53:de:b8:
e9:ed:b4:c1:c0:c2:95:14:51:4e:63:67:73:df:55:
9f:5a:ef:d1:b2:05:b2:3e:a5:64:ee:ad:48:e7:a3:
e9:81:13:6d:56:5a:27:a0:e4:a4:38:7f:61:bd:b2:
bc:73:71:a0:b1:9d:6c:bb:96:5c:13:08:7e:34:10:
80:d1:73:38:27:69:f4:1f:3c:64:b8:58:8f:ef:5d:
c4:2e:d5:39:89:a1:3b:4f:14:c6:43:6c:3f:48:64:
09:92:16:db:ed:76:7c:bc:ae:c6:81:08:d1:8b:41:
68:9a:42:fe:0d:af:fc:da:c6:83:6b:a3:15:c2:b6:
23:0f:3d:a4:fe:17:40:23:ab:d3:bf:4a:1d:df:c2:
88:a3:9d:9b:89:d8:8d:93:72:63:f8:8c:01:f2:8b:
7c:3e:0e:a1:dd:51:e7:90:0a:e1:59:6a:d1:c7:78:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8E:BF:C7:A0:AB:E4:69:02:9C:69:5E:17:FD:77:A7:D0:78:29:08
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:80:0e:1c:54:64:89:a5:ec:b5:f8:a6:4b:cf:4b:0d:b6:c3:
16:ba:64:c3:15:e2:80:3c:44:a3:9a:ff:1d:39:a1:c9:41:f7:
2f:1c:63:54:e0:55:14:ef:6b:54:8c:ed:1c:1f:55:ed:e4:a2:
35:db:a3:b0:81:3f:e6:a5:54:cd:9d:2a:22:09:ca:75:c2:33:
97:c3:be:79:ae:f9:49:36:46:d0:6c:35:19:11:e4:38:dc:9a:
4d:0c:78:16:1e:6f:8c:82:bb:8a:d1:03:21:45:4c:42:28:43:
de:8f:4a:51:ad:be:50:23:72:5a:81:fd:1d:e5:9c:11:cf:57:
4a:53:b8:8c:3f:4c:31:9c:a1:55:2e:2a:79:42:63:d4:42:26:
c4:22:a9:34:2c:43:09:8d:2d:63:f0:fc:b4:91:22:63:d6:0a:
07:5d:fb:d5:79:ee:1e:38:8f:ec:bf:02:b5:cd:e8:7f:5e:77:
81:97:a6:0d:82:46:9b:e3:e9:d2:89:a2:14:55:55:d5:0e:af:
76:bf:95:ab:42:6e:96:a1:7e:84:72:e6:6e:e1:57:ff:19:4f:
b9:9a:09:29:46:64:ce:18:66:e6:92:03:54:ce:7d:05:a8:68:
15:60:1b:96:f7:9f:9c:49:0d:6f:4e:e7:8c:dc:30:c3:c3:9a:
4c:80:7e:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfuXmneAvKb6B5+B1mANpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmUwMDExZWJlNGYyMTZjNThkM2FiNDI4MTJiOTg0MDJi
ZTBiMmMwHhcNMjYwOTIzMDkwMDQwWhcNMjYwOTI0MDkwMDQwWjAzMTEwLwYDVQQD
EyhlMDhlYmZjN2EwYWJlNDY5MDI5YzY5NWUxN2ZkNzdhN2QwNzgyOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s4xp+l+97a6686UP38scOYwYkOD
ZcXDsOOwkWWHDkksRjCNojD/R35B0/21YSEfamUdO2+BjC8zbJOBdKSKCCvjFFYT
1Qn3tZaAm8ruwSdgsOMg3e5T3rjp7bTBwMKVFFFOY2dz31WfWu/RsgWyPqVk7q1I
56PpgRNtVlonoOSkOH9hvbK8c3GgsZ1su5ZcEwh+NBCA0XM4J2n0HzxkuFiP713E
LtU5iaE7TxTGQ2w/SGQJkhbb7XZ8vK7GgQjRi0FomkL+Da/82saDa6MVwrYjDz2k
/hdAI6vTv0od38KIo52bidiNk3Jj+IwB8ot8Pg6h3VHnkArhWWrRx3jpXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCOv8egq+RpApxpXhf9d6fQeCkIMB8GA1UdIwQY
MBaAFA/+ABHr5PIWxY06tCgSuYQCvgssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzIt
NmNjMGRhZjM0MWM0LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS85NjE4NGQtNTk4MS00NzAyLTlkMzItNmNjMGRhZjM0MWM0
LzEvRF80QUVldms4aGJGalRxMEtCSzVoQUstQ3l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIAOHFRk
iaXstfimS89LDbbDFrpkwxXigDxEo5r/HTmhyUH3LxxjVOBVFO9rVIztHB9V7eSi
NdujsIE/5qVUzZ0qIgnKdcIzl8O+ea75STZG0Gw1GRHkONyaTQx4Fh5vjIK7itED
IUVMQihD3o9KUa2+UCNyWoH9HeWcEc9XSlO4jD9MMZyhVS4qeUJj1EImxCKpNCxD
CY0tY/D8tJEiY9YKB1371XnuHjiP7L8Ctc3of153gZemDYJGm+Pp0omiFFVV1Q6v
dr+Vq0JulqF+hHLmbuFX/xlPuZoJKUZkzhhm5pIDVM59BahoFWAblvefnEkNb07n
jNwww8OaTIB+YQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:09:58 2026 by rpki-client