Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: FpDlhEL8yhx4MNaX2Nf3BMZ5cRd0IPwsZQyB9LTkNn4=
Subject key identifier: 87:41:BE:AA:52:10:BE:F8:61:F6:4D:5F:26:7E:8B:6A:D0:CB:B2:59
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 01A0D26E26AF43C2D29E91735F663849A647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 19AB
Signing time: Thu 24 Sep 2026 08:00:29 +0000
Manifest this update: Thu 24 Sep 2026 08:00:29 +0000
Manifest next update: Fri 25 Sep 2026 08:00:29 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: YZdqtA+sa3FiCAqw7RpxX8lH7rTEA8tERWTpCfocG3Q=)
2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:26:af:43:c2:d2:9e:91:73:5f:66:38:49:a6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Sep 24 08:00:29 2026 GMT
Not After : Sep 25 08:00:29 2026 GMT
Subject: CN=8741beaa5210bef861f64d5f267e8b6ad0cbb259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:4b:67:5a:1e:5a:2f:90:3d:f6:92:06:8e:
c5:fb:90:f2:92:5a:35:ef:2f:d7:bc:e8:b2:75:ea:
f5:df:06:88:6a:fd:98:38:2d:61:68:56:3f:3e:eb:
f7:ec:3f:0a:19:fa:71:49:9c:17:59:6a:df:b4:a2:
72:e6:1a:19:a2:7b:e7:26:f7:3b:64:d7:86:45:ee:
44:50:2c:68:2b:f3:8c:43:1a:18:63:2a:62:ad:82:
ba:ab:f2:5d:ad:dd:e7:05:61:cb:21:88:69:fd:73:
53:4b:0e:b5:fd:e1:9d:80:5e:68:ff:de:32:1e:ed:
eb:5f:f5:ae:5c:5a:82:20:78:5a:97:31:96:48:d8:
91:34:8f:65:e1:b1:50:78:54:62:24:a5:48:e9:a0:
96:8e:59:80:b6:8b:69:e1:19:07:c9:4e:51:c0:59:
1a:61:25:9d:4c:eb:25:0e:d8:2b:10:d5:12:0c:6b:
d8:a2:51:eb:7a:81:8d:f4:76:07:22:af:af:9e:47:
03:71:f3:8a:41:f5:14:19:b6:37:4c:e6:e9:c6:0c:
e4:29:17:90:6d:0b:e8:2f:46:34:5f:8d:5f:bb:fa:
cb:6d:88:c8:4e:86:7f:be:66:e9:d1:08:1b:04:9f:
a0:b9:fd:76:d5:0e:c3:0d:a3:34:9a:bc:a0:13:b9:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:41:BE:AA:52:10:BE:F8:61:F6:4D:5F:26:7E:8B:6A:D0:CB:B2:59
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:65:5a:9e:57:9e:3d:b0:52:fe:e7:aa:b8:c7:66:38:53:d5:
70:7a:85:63:bd:6f:23:10:65:64:60:a3:77:8e:cb:b1:71:94:
89:16:02:54:5c:24:8b:dc:23:52:77:52:51:b7:50:2f:cd:46:
99:e5:5f:60:90:38:96:d4:f0:c3:7b:2f:e9:83:35:14:84:53:
cf:95:eb:e6:14:3e:f6:59:81:62:ad:01:1e:9d:38:34:28:c0:
5f:11:a7:af:73:82:2a:5a:40:5a:93:7d:bd:0c:a4:25:53:b4:
78:d5:58:6a:3b:88:14:fa:de:31:40:78:b9:70:80:f2:82:0e:
f5:95:f1:12:8f:51:38:ff:7f:44:e4:34:66:a1:58:6c:aa:ca:
3e:4e:8d:80:6e:80:85:8f:55:af:ca:53:b5:70:96:17:26:be:
f4:52:88:32:1b:a7:e1:6c:9d:b1:33:7e:ef:04:1a:19:0a:0e:
cf:6e:35:d6:c6:5e:05:e6:6a:30:36:40:0c:b7:3d:5c:86:1b:
d4:15:e0:50:24:89:ac:e9:d6:9c:a0:39:2f:fe:9b:f9:6e:5b:
7e:b4:9e:5f:b6:46:06:94:84:6f:5b:56:b6:b7:1d:b2:c8:d9:
98:dc:65:af:2a:7c:6e:fd:95:5c:88:3f:c0:d5:22:85:25:50:
4d:46:b4:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbiavQ8LSnpFzX2Y4SaZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjlhM2NlMGY1OTM5MTA4MTljMzI3MWUxZThkMGJkMTM3
MWE2YmUwHhcNMjYwOTI0MDgwMDI5WhcNMjYwOTI1MDgwMDI5WjAzMTEwLwYDVQQD
Eyg4NzQxYmVhYTUyMTBiZWY4NjFmNjRkNWYyNjdlOGI2YWQwY2JiMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTNLZ1oeWi+QPfaSBo7F+5Dyklo1
7y/XvOiyder13waIav2YOC1haFY/Puv37D8KGfpxSZwXWWrftKJy5hoZonvnJvc7
ZNeGRe5EUCxoK/OMQxoYYypirYK6q/Jdrd3nBWHLIYhp/XNTSw61/eGdgF5o/94y
Hu3rX/WuXFqCIHhalzGWSNiRNI9l4bFQeFRiJKVI6aCWjlmAtotp4RkHyU5RwFka
YSWdTOslDtgrENUSDGvYolHreoGN9HYHIq+vnkcDcfOKQfUUGbY3TObpxgzkKReQ
bQvoL0Y0X41fu/rLbYjIToZ/vmbp0QgbBJ+guf121Q7DDaM0mrygE7kztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdBvqpSEL74YfZNXyZ+i2rQy7JZMB8GA1UdIwQY
MBaAFOG5o84PWTkQgZwyceHo0L0Tcaa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTIt
YmE0YzU2ZDhjMGNlLzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZDhiZTgtYjRiNC00MzZlLTg2ZTItYmE0YzU2ZDhjMGNl
LzEvNGJtanpnOVpPUkNCbkRKeDRlalF2Uk54cHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGVanlee
PbBS/uequMdmOFPVcHqFY71vIxBlZGCjd47LsXGUiRYCVFwki9wjUndSUbdQL81G
meVfYJA4ltTww3sv6YM1FIRTz5Xr5hQ+9lmBYq0BHp04NCjAXxGnr3OCKlpAWpN9
vQykJVO0eNVYajuIFPreMUB4uXCA8oIO9ZXxEo9ROP9/ROQ0ZqFYbKrKPk6NgG6A
hY9Vr8pTtXCWFya+9FKIMhun4WydsTN+7wQaGQoOz2411sZeBeZqMDZADLc9XIYb
1BXgUCSJrOnWnKA5L/6b+W5bfrSeX7ZGBpSEb1tWtrcdssjZmNxlryp8bv2VXIg/
wNUihSVQTUa0Lw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:11:39 2026 by rpki-client