Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: OdPM9NX2lwF0a40Z8ydlwSv8naePlG0oIlAQFmmtt38=
Subject key identifier: DB:7E:BD:B3:79:2B:E0:6F:31:BA:B9:15:96:2F:F3:25:C6:E9:A3:46
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 01A0D83C20E9FCB00C4F7E21042161C43B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 1657
Signing time: Fri 25 Sep 2026 11:03:34 +0000
Manifest this update: Fri 25 Sep 2026 11:03:34 +0000
Manifest next update: Sat 26 Sep 2026 11:03:34 +0000
Files and hashes: 1: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: rQrghKzLHALYohJcEHRaXcM/8igDT+fbXtuz/SPIXGo=)
2: _kQ6sm_mo_p1SKdQoRItAP8rezY.roa (hash: FamL8pGq13zRSsk9bbJZ26sKBwj3qZkJI9rn7zZOeO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:20:e9:fc:b0:0c:4f:7e:21:04:21:61:c4:3b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Sep 25 11:03:34 2026 GMT
Not After : Sep 26 11:03:34 2026 GMT
Subject: CN=db7ebdb3792be06f31bab915962ff325c6e9a346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:31:46:e0:83:13:8c:26:de:98:87:11:61:
8e:d8:d4:fc:4c:71:43:69:0a:2e:72:0b:4d:1b:15:
59:83:d4:7d:90:df:72:58:76:bd:0a:66:ef:9c:aa:
69:c6:a1:3f:ca:8f:be:68:93:b0:59:35:62:ae:28:
13:4f:17:25:42:52:13:08:7a:f1:13:d1:2c:a4:4d:
cd:92:3f:c4:4b:d4:9b:ab:54:c8:ca:7c:c6:ff:50:
4d:b2:6d:43:e7:57:5b:95:27:77:e2:7e:94:c7:61:
8e:d6:37:da:ef:5c:73:04:7f:c7:8f:da:11:2e:55:
35:48:29:db:70:d5:f5:0c:48:04:4c:df:90:8a:33:
01:88:66:09:15:ec:80:ce:e9:54:bc:8c:ec:76:11:
c3:3b:64:8f:cb:8d:a2:66:bd:91:e2:ca:94:70:c6:
3a:44:0b:50:6b:72:ee:d2:ce:5e:f3:3b:a2:37:8b:
14:c0:17:14:47:cc:51:6c:74:44:c5:9f:51:0a:71:
6d:fa:64:7c:6b:78:64:ad:4a:91:a0:ea:cd:65:88:
fb:4e:ed:6f:8c:23:77:3e:71:1b:45:52:0d:c9:00:
5a:0e:6c:a1:41:bb:04:f5:3d:01:8a:6e:92:a8:31:
3f:ed:4e:1c:97:b7:80:1c:99:bb:bd:5a:cf:74:5c:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:BD:B3:79:2B:E0:6F:31:BA:B9:15:96:2F:F3:25:C6:E9:A3:46
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:84:7e:5b:95:41:ac:17:c2:dd:b0:5b:f4:76:42:e4:b8:86:
81:a2:6f:17:e4:45:89:99:62:67:c5:3d:5a:ff:54:5f:84:57:
56:78:48:d8:df:1f:d7:e8:10:97:56:39:0b:8a:2d:82:a9:a3:
09:38:df:23:5b:c2:9a:d2:b9:cf:c1:0d:80:fd:c3:98:a4:76:
e1:bf:89:a3:c7:22:5c:0a:19:a9:c1:39:79:34:da:3b:a1:ac:
90:50:1e:31:91:55:dc:25:7d:97:74:5f:4c:c9:10:44:5d:9d:
7f:9d:3f:c0:09:7d:f2:11:32:81:06:49:cb:4e:fc:9a:40:23:
85:6e:a7:0e:9a:c5:3f:ed:b3:0c:30:8a:c2:94:3d:d6:b4:f1:
27:5a:c1:eb:c1:bd:8d:c6:0f:53:6a:e4:11:eb:45:cd:a0:0d:
91:ea:1b:b9:a0:50:f9:4c:dd:5f:60:ec:4d:2a:f8:24:7f:6a:
3d:1e:08:68:45:27:54:8d:2b:55:1c:86:7b:4d:ac:c8:6d:94:
18:00:28:2b:59:65:08:b9:88:7e:d0:c0:fd:8b:b5:2c:28:4c:
71:0d:b0:5b:4a:c0:cb:86:86:13:3e:b6:66:e1:65:43:aa:b3:
bf:a9:a8:8a:4a:61:53:ac:a5:df:6f:d2:ce:1e:b1:0f:42:84:
ad:f2:aa:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYPCDp/LAMT34hBCFhxDtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZGFjMTUwODQ4MzI1ZjBmNzI1ODcwNjRmOGFiYTM3YzVm
ZjM3OTAwHhcNMjYwOTI1MTEwMzM0WhcNMjYwOTI2MTEwMzM0WjAzMTEwLwYDVQQD
EyhkYjdlYmRiMzc5MmJlMDZmMzFiYWI5MTU5NjJmZjMyNWM2ZTlhMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOsxRuCDE4wm3piHEWGO2NT8THFD
aQoucgtNGxVZg9R9kN9yWHa9CmbvnKppxqE/yo++aJOwWTVirigTTxclQlITCHrx
E9EspE3Nkj/ES9Sbq1TIynzG/1BNsm1D51dblSd34n6Ux2GO1jfa71xzBH/Hj9oR
LlU1SCnbcNX1DEgETN+QijMBiGYJFeyAzulUvIzsdhHDO2SPy42iZr2R4sqUcMY6
RAtQa3Lu0s5e8zuiN4sUwBcUR8xRbHRExZ9RCnFt+mR8a3hkrUqRoOrNZYj7Tu1v
jCN3PnEbRVINyQBaDmyhQbsE9T0Bim6SqDE/7U4cl7eAHJm7vVrPdFzIbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNt+vbN5K+BvMbq5FZYv8yXG6aNGMB8GA1UdIwQY
MBaAFOLawVCEgyXw9yWHBk+KujfF/zeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUt
M2I5ZTNjNTNiYWIwLzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9mMDk3NTktNmNlYi00NzU0LWJiZTUtM2I5ZTNjNTNiYWIw
LzEvNHRyQlVJU0RKZkQzSlljR1Q0cTZOOFhfTjVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIR+W5VB
rBfC3bBb9HZC5LiGgaJvF+RFiZliZ8U9Wv9UX4RXVnhI2N8f1+gQl1Y5C4otgqmj
CTjfI1vCmtK5z8ENgP3DmKR24b+Jo8ciXAoZqcE5eTTaO6GskFAeMZFV3CV9l3Rf
TMkQRF2df50/wAl98hEygQZJy078mkAjhW6nDprFP+2zDDCKwpQ91rTxJ1rB68G9
jcYPU2rkEetFzaANkeobuaBQ+UzdX2DsTSr4JH9qPR4IaEUnVI0rVRyGe02syG2U
GAAoK1llCLmIftDA/Yu1LChMcQ2wW0rAy4aGEz62ZuFlQ6qzv6moikphU6yl32/S
zh6xD0KErfKqXQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:50:18 2026 by rpki-client