Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: hDQLBjreLwrqfSmuEbdrMDSBDaNCdwnQUPWhGzcWCUg=
Subject key identifier: D8:16:4A:7A:5B:72:95:EE:F9:E4:17:C3:BE:53:47:5A:7B:CB:2E:8B
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 01A0D34A468953A6D43D110DC7A247E780E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0D88
Signing time: Thu 24 Sep 2026 12:00:55 +0000
Manifest this update: Thu 24 Sep 2026 12:00:55 +0000
Manifest next update: Fri 25 Sep 2026 12:00:55 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: MbeU5F1yXol97SwE/ctAmXxkuysq/bR/H52GP/N6PtQ=)
2: G_3AbkBvxlIP88eiGt3CS6nBjms.roa (hash: HxmAkTnKX1MXFmf40b0A8DoHMlH+AhQxL52OcvMUs9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:46:89:53:a6:d4:3d:11:0d:c7:a2:47:e7:80:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Sep 24 12:00:55 2026 GMT
Not After : Sep 25 12:00:55 2026 GMT
Subject: CN=d8164a7a5b7295eef9e417c3be53475a7bcb2e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:2f:4c:e4:06:dd:94:42:17:26:ed:8e:55:
6c:b5:d5:6b:76:31:b8:b1:d9:b8:4a:9b:10:5a:0b:
7e:8d:73:c3:98:93:1b:3b:1a:5f:0d:e7:0a:a3:87:
21:d9:b1:4b:65:12:e2:50:41:a5:76:d9:03:da:58:
e9:a4:a9:a6:b7:3a:b5:68:53:96:84:fc:f0:a2:70:
74:ff:a5:36:33:3e:bb:55:fb:a4:68:ce:5c:76:3d:
2b:64:1e:a4:4a:10:c3:a0:b4:c3:fc:d7:d9:ac:59:
c7:81:cd:3e:7a:13:90:95:82:9d:92:b8:d8:ee:27:
f0:32:62:08:d3:a0:80:32:8d:fe:73:98:e3:93:d1:
e8:10:02:bb:54:28:da:44:f5:9c:fd:23:86:76:81:
1d:c8:82:25:a5:b5:cb:d3:f2:5d:0d:9d:24:80:18:
ab:fe:36:b2:9d:16:34:19:90:61:58:53:ae:2d:50:
f5:5e:40:c5:3d:5f:73:b5:84:c4:51:b3:6d:b5:69:
b2:0e:c2:17:87:2b:ed:89:5b:80:6c:53:c8:a1:64:
02:3d:8d:ab:65:22:ee:ae:72:ab:03:fa:bf:09:ed:
e4:9f:5b:a1:54:bc:ac:ce:ac:8b:76:d1:1d:9b:ec:
47:0b:3a:c1:3b:a7:ab:4d:e6:f5:63:cf:63:03:30:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:16:4A:7A:5B:72:95:EE:F9:E4:17:C3:BE:53:47:5A:7B:CB:2E:8B
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1a:e5:cb:ae:a9:4d:fa:3e:33:c2:25:59:9d:f0:45:9f:e7:
7b:1b:39:92:eb:f5:14:c3:f7:91:b0:0a:1c:48:3c:a2:18:cf:
46:60:80:d2:a3:bf:f3:51:02:1e:8d:8a:04:df:d4:b8:26:52:
0f:02:3d:2c:4d:32:88:1b:9c:90:1c:a4:d3:b0:17:86:5a:af:
6b:6b:00:3d:9f:a5:f3:e5:f5:31:fb:49:4e:0e:75:92:83:d9:
80:c4:a4:d0:cb:07:47:47:11:f4:b4:63:1f:2a:1c:80:ed:a4:
8d:77:dc:0f:97:8d:74:68:64:f2:87:b9:ff:db:81:c5:7b:26:
5c:5f:11:05:79:ba:d9:61:a4:66:fe:ef:86:16:b5:1f:3c:f5:
ff:7e:22:11:a5:f8:7a:95:9b:aa:af:29:e7:72:39:a7:48:76:
77:3c:22:89:87:f9:ad:ad:91:dc:1e:89:e9:70:45:0f:02:fd:
7b:41:fb:b3:b4:56:50:a1:d2:68:9a:b3:ae:73:b3:0f:a3:57:
c0:19:f2:4a:26:8a:20:ef:9f:78:a0:4e:cb:8c:b8:18:8a:fb:
93:07:6b:6a:16:2e:bd:1b:cf:a1:ee:a0:df:7c:a2:cb:aa:91:
41:93:1b:31:ee:af:09:fb:44:6d:e1:02:a1:8d:8d:58:b2:c5:
d5:d9:ac:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSkaJU6bUPRENx6JH54DgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZGYzMzQ0NTEzMTc2MjUyYTJjYjY5MGJjZjcwNWQ2NDk4
MTExZjUwHhcNMjYwOTI0MTIwMDU1WhcNMjYwOTI1MTIwMDU1WjAzMTEwLwYDVQQD
EyhkODE2NGE3YTViNzI5NWVlZjllNDE3YzNiZTUzNDc1YTdiY2IyZThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyScvTOQG3ZRCFybtjlVstdVrdjG4
sdm4SpsQWgt+jXPDmJMbOxpfDecKo4ch2bFLZRLiUEGldtkD2ljppKmmtzq1aFOW
hPzwonB0/6U2Mz67VfukaM5cdj0rZB6kShDDoLTD/NfZrFnHgc0+ehOQlYKdkrjY
7ifwMmII06CAMo3+c5jjk9HoEAK7VCjaRPWc/SOGdoEdyIIlpbXL0/JdDZ0kgBir
/jaynRY0GZBhWFOuLVD1XkDFPV9ztYTEUbNttWmyDsIXhyvtiVuAbFPIoWQCPY2r
ZSLurnKrA/q/Ce3kn1uhVLyszqyLdtEdm+xHCzrBO6erTeb1Y89jAzDbowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgWSnpbcpXu+eQXw75TR1p7yy6LMB8GA1UdIwQY
MBaAFODfM0RRMXYlKiy2kLz3BdZJgRH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE44elJGRXhkaVVxTExhUXZQY0Yxa21CRWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jYzNiNmUtYjc0OS00NWYxLWE4Njgt
MjVlMjFjOWU3ZGU5LzEvNE44elJGRXhkaVVxTExhUXZQY0Yxa21CRWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9jYzNiNmUtYjc0OS00NWYxLWE4NjgtMjVlMjFjOWU3ZGU5
LzEvNE44elJGRXhkaVVxTExhUXZQY0Yxa21CRWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuhrly66p
Tfo+M8IlWZ3wRZ/nexs5kuv1FMP3kbAKHEg8ohjPRmCA0qO/81ECHo2KBN/UuCZS
DwI9LE0yiBuckByk07AXhlqva2sAPZ+l8+X1MftJTg51koPZgMSk0MsHR0cR9LRj
HyocgO2kjXfcD5eNdGhk8oe5/9uBxXsmXF8RBXm62WGkZv7vhha1Hzz1/34iEaX4
epWbqq8p53I5p0h2dzwiiYf5ra2R3B6J6XBFDwL9e0H7s7RWUKHSaJqzrnOzD6NX
wBnySiaKIO+feKBOy4y4GIr7kwdrahYuvRvPoe6g33yiy6qRQZMbMe6vCftEbeEC
oY2NWLLF1dmsnw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:02 2026 by rpki-client