Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: M9sbnU5Xb51W2NKI/UNyzHgOpnvPYhw32YGN2ra0MWc=
Subject key identifier: 82:3B:37:51:28:5B:35:42:08:06:F7:B6:E9:79:4A:A4:42:4F:03:57
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 01A0CA479D15382F0FA2A9F610D2E36B6D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 1177
Signing time: Tue 22 Sep 2026 18:01:25 +0000
Manifest this update: Tue 22 Sep 2026 18:01:25 +0000
Manifest next update: Wed 23 Sep 2026 18:01:25 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: tPuCUsmUYqcMXQZbGFRYqrBBfBbg9se0tqr7dBZcanw=)
2: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (hash: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk=)
3: Rxb43DOTKVOmi4goggBKGgm61i4.asa (hash: //HomCPkgLqtqfTXCv3j8181AokJrm6q+KQdYo1h/Z8=)
4: fzfszWt-kJZcfbCPsxciTP6C4Dk.roa (hash: Xaxe3Hu1PY1WZ5xZc3wZj9w0NSOK2DQVeSn4qSIA58I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:9d:15:38:2f:0f:a2:a9:f6:10:d2:e3:6b:6d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Sep 22 18:01:25 2026 GMT
Not After : Sep 23 18:01:25 2026 GMT
Subject: CN=823b3751285b35420806f7b6e9794aa4424f0357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:4b:45:e6:c0:cf:8d:87:de:69:ca:ca:b1:
64:39:75:a4:63:2d:ab:29:67:d4:bd:d3:11:b5:80:
5a:32:ab:bd:5a:50:a8:24:7f:f5:b5:b9:d8:bb:ed:
39:58:51:73:1a:fb:07:81:6b:a4:8e:a5:a9:c2:a1:
6b:ba:3a:bd:53:2b:9d:3a:01:87:96:75:f5:bf:36:
82:b6:3a:f2:89:2e:0d:1d:79:d2:5d:ec:8a:71:9a:
b0:a8:6f:08:d8:f6:f3:e9:64:62:03:48:18:ca:38:
e8:a8:12:e8:1f:f3:46:3a:be:99:cc:f7:bc:49:5e:
3a:d0:31:e3:62:ec:0e:b3:44:1a:80:1b:00:5f:0a:
a9:dc:d2:e0:1e:6d:d9:3e:69:38:e5:cc:c4:09:21:
84:9f:97:9a:92:a6:22:e1:22:89:84:52:3a:45:ef:
e8:31:e4:d4:57:03:66:17:b9:47:32:51:55:6a:d4:
6a:45:0d:41:4f:a2:4b:2c:66:31:ff:1e:0e:e7:b4:
1e:f6:5b:8a:92:85:e8:b6:81:c3:d4:fd:b2:b1:4c:
77:fb:e2:ac:fd:6e:d5:3d:a3:05:23:03:9a:0e:dc:
24:a3:8a:3f:19:a5:3d:27:3d:02:61:1f:fd:36:82:
cd:fa:59:d6:3c:81:e2:63:47:00:f1:f4:30:40:63:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3B:37:51:28:5B:35:42:08:06:F7:B6:E9:79:4A:A4:42:4F:03:57
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:85:e3:1a:2c:e9:f9:50:60:d0:12:92:fb:64:96:4d:a9:4d:
06:63:af:b4:08:93:8e:46:fe:45:47:6d:d5:0a:83:96:4d:57:
bc:61:75:1f:87:a1:41:ec:9d:29:47:85:e8:1c:1c:a5:4c:30:
f5:b5:e6:92:15:7c:49:be:3b:e0:8a:5b:d1:dc:64:3f:bc:7b:
13:fa:b6:e3:99:ca:47:69:82:d8:3d:b3:d5:45:b3:85:16:98:
a8:e7:08:dd:c2:85:38:05:cf:ee:14:54:83:cb:35:3f:28:d2:
b3:c2:52:5e:1c:0e:df:de:e5:db:69:68:c9:6a:4b:0e:15:e5:
ce:84:ea:b2:cf:8e:e8:4d:f9:91:e9:c4:9d:06:10:28:13:17:
2c:23:13:3d:7d:55:4b:af:e0:1e:97:4a:ef:63:f8:90:35:d5:
f3:d8:fc:b4:28:cd:e6:e8:0f:06:49:c1:0a:4a:10:19:38:67:
55:82:03:8a:71:f7:ee:5a:39:19:de:dd:ba:71:70:01:c7:16:
21:79:0f:4c:20:c8:7b:7f:2f:0b:68:23:0e:5f:a4:b2:8a:ce:
ae:f8:ab:d3:e4:88:06:88:a7:41:e4:b1:48:e2:31:87:6c:ec:
f6:80:90:87:f4:1d:54:4f:80:ea:f4:53:d1:7e:44:36:90:92:
a7:3c:09:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR50VOC8Poqn2ENLja20eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZjcwNzA2ZjZjMGNmYmQ5YzczYTdmM2Q4MzAyMzI0MGE0
MmY1MGQwHhcNMjYwOTIyMTgwMTI1WhcNMjYwOTIzMTgwMTI1WjAzMTEwLwYDVQQD
Eyg4MjNiMzc1MTI4NWIzNTQyMDgwNmY3YjZlOTc5NGFhNDQyNGYwMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOVLRebAz42H3mnKyrFkOXWkYy2r
KWfUvdMRtYBaMqu9WlCoJH/1tbnYu+05WFFzGvsHgWukjqWpwqFrujq9UyudOgGH
lnX1vzaCtjryiS4NHXnSXeyKcZqwqG8I2Pbz6WRiA0gYyjjoqBLoH/NGOr6ZzPe8
SV460DHjYuwOs0QagBsAXwqp3NLgHm3ZPmk45czECSGEn5eakqYi4SKJhFI6Re/o
MeTUVwNmF7lHMlFVatRqRQ1BT6JLLGYx/x4O57Qe9luKkoXotoHD1P2ysUx3++Ks
/W7VPaMFIwOaDtwko4o/GaU9Jz0CYR/9NoLN+lnWPIHiY0cA8fQwQGNJKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII7N1EoWzVCCAb3tul5SqRCTwNXMB8GA1UdIwQY
MBaAFOP3Bwb2wM+9nHOn89gwIyQKQvUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTIt
MDlmZjc5MzA4YmJlLzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODZkNDctNjQzNC00MWJkLTlhYTItMDlmZjc5MzA4YmJl
LzEvNF9jSEJ2YkF6NzJjYzZmejJEQWpKQXBDOVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4XjGizp
+VBg0BKS+2SWTalNBmOvtAiTjkb+RUdt1QqDlk1XvGF1H4ehQeydKUeF6BwcpUww
9bXmkhV8Sb474Ipb0dxkP7x7E/q245nKR2mC2D2z1UWzhRaYqOcI3cKFOAXP7hRU
g8s1PyjSs8JSXhwO397l22loyWpLDhXlzoTqss+O6E35kenEnQYQKBMXLCMTPX1V
S6/gHpdK72P4kDXV89j8tCjN5ugPBknBCkoQGThnVYIDinH37lo5Gd7dunFwAccW
IXkPTCDIe38vC2gjDl+ksorOrvir0+SIBoinQeSxSOIxh2zs9oCQh/QdVE+A6vRT
0X5ENpCSpzwJLw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:46:59 2026 by rpki-client