Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: mDEAmISaqyYSLcyQxnXQyidS/wbB0Xn7Z2V+ZnAFDr8=
Subject key identifier: 0C:AC:8E:68:72:A9:4A:13:76:FB:9F:93:DC:E8:06:BE:89:FE:39:33
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 01A0D011FD5DD3D72C89FA7F57CF3AA8B07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0E2E
Signing time: Wed 23 Sep 2026 21:00:34 +0000
Manifest this update: Wed 23 Sep 2026 21:00:34 +0000
Manifest next update: Thu 24 Sep 2026 21:00:34 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: VN0WehA3l+e5EXjJ6AdKDGQOZRJemX7xV9DOzDOqvmo=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:fd:5d:d3:d7:2c:89:fa:7f:57:cf:3a:a8:b0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Sep 23 21:00:34 2026 GMT
Not After : Sep 24 21:00:34 2026 GMT
Subject: CN=0cac8e6872a94a1376fb9f93dce806be89fe3933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:13:27:c3:47:d8:2f:8e:bb:51:af:ec:4a:
e8:c6:65:da:75:ed:fd:f1:38:2c:f2:c0:73:91:8d:
62:85:17:f3:57:62:ff:89:df:a3:a1:8c:0d:61:b1:
67:69:38:c3:5e:a7:08:fa:0d:de:e3:c2:6d:68:94:
73:70:e1:a8:82:fb:50:c8:4d:55:73:3d:5f:4a:44:
c5:9d:02:11:ae:64:67:50:ec:bd:e0:df:d7:50:aa:
f3:b3:78:79:03:5f:ac:aa:89:c4:a4:cb:ed:db:e9:
71:0c:21:45:a1:04:7b:9d:85:64:6d:ce:74:b9:b2:
0c:fc:10:2a:11:c2:c3:7a:22:7f:5e:39:4c:8d:74:
30:87:08:60:54:39:dd:3f:ff:f5:64:3b:5d:4b:33:
7a:3b:33:22:84:0c:e7:5f:77:84:76:a1:8d:d5:42:
35:3f:64:97:6b:6e:cb:a0:58:68:a9:a7:71:89:89:
15:60:6b:b5:4f:33:98:45:a5:e3:71:b4:4c:06:2d:
ea:dc:ca:b9:02:a9:c6:8a:95:e0:88:c6:d0:92:6f:
e5:a7:8d:75:2f:d2:5e:25:49:62:a0:cc:f2:cb:e1:
59:4a:75:22:6b:d0:27:f1:40:ab:06:17:dc:45:01:
31:39:74:73:75:ca:7f:00:6c:ab:57:6c:bd:ad:75:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:8E:68:72:A9:4A:13:76:FB:9F:93:DC:E8:06:BE:89:FE:39:33
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5a:86:e1:3d:84:52:7f:b7:f3:90:f6:d1:20:07:4a:45:34:
a7:9b:09:af:cf:2f:ac:1e:d6:08:3a:92:a0:3f:13:23:93:66:
f4:05:91:8a:b3:fa:0f:dc:e0:9a:a3:6e:9e:59:70:60:a9:89:
b5:49:1e:56:b2:f0:13:00:af:6e:f6:5e:8d:bf:56:77:36:cc:
45:79:0d:28:d2:b2:b3:b2:3a:bb:7d:49:48:db:e7:04:cf:9f:
d7:99:dd:52:1b:78:4e:85:43:ef:05:20:6f:b1:29:be:c2:fc:
ff:55:e5:a6:d7:7d:67:b3:e3:2e:39:dc:78:b6:31:dd:df:09:
65:08:e8:37:6d:da:5b:1a:8f:c6:96:af:d6:1c:d1:c1:b6:35:
13:4d:ae:21:f5:39:15:25:bf:f0:12:85:f7:bf:db:24:b7:b8:
9e:a8:ef:61:56:04:5a:ea:85:3a:a4:b8:88:d6:2a:7f:f6:ce:
88:11:78:b3:df:20:98:9d:46:d1:3a:51:6b:83:d5:9e:d1:d6:
6f:e7:20:08:d0:0e:fa:5f:b2:78:75:14:cf:78:bb:08:bd:e7:
2f:30:51:09:13:6d:e3:7f:9d:83:23:32:d2:9b:86:7c:32:37:
b7:a1:c1:d3:cd:46:25:ef:31:fe:c7:20:a7:8d:43:41:a0:a8:
3b:d0:44:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEf1d09csifp/V886qLB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDJjMmI3NGQ3NTc1YTIyOGE3ZTY0ZjA0MDZmM2EzOTdj
N2FlNTYwHhcNMjYwOTIzMjEwMDM0WhcNMjYwOTI0MjEwMDM0WjAzMTEwLwYDVQQD
EygwY2FjOGU2ODcyYTk0YTEzNzZmYjlmOTNkY2U4MDZiZTg5ZmUzOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnATJ8NH2C+Ou1Gv7EroxmXade39
8Tgs8sBzkY1ihRfzV2L/id+joYwNYbFnaTjDXqcI+g3e48JtaJRzcOGogvtQyE1V
cz1fSkTFnQIRrmRnUOy94N/XUKrzs3h5A1+sqonEpMvt2+lxDCFFoQR7nYVkbc50
ubIM/BAqEcLDeiJ/XjlMjXQwhwhgVDndP//1ZDtdSzN6OzMihAznX3eEdqGN1UI1
P2SXa27LoFhoqadxiYkVYGu1TzOYRaXjcbRMBi3q3Mq5AqnGipXgiMbQkm/lp411
L9JeJUlioMzyy+FZSnUia9An8UCrBhfcRQExOXRzdcp/AGyrV2y9rXXGcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAysjmhyqUoTdvufk9zoBr6J/jkzMB8GA1UdIwQY
MBaAFOJCwrdNdXWiKKfmTwQG86OXx65WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYt
Y2JiOGNmZWU2ZTNjLzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYtY2JiOGNmZWU2ZTNj
LzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFqG4T2E
Un+385D20SAHSkU0p5sJr88vrB7WCDqSoD8TI5Nm9AWRirP6D9zgmqNunllwYKmJ
tUkeVrLwEwCvbvZejb9WdzbMRXkNKNKys7I6u31JSNvnBM+f15ndUht4ToVD7wUg
b7EpvsL8/1Xlptd9Z7PjLjnceLYx3d8JZQjoN23aWxqPxpav1hzRwbY1E02uIfU5
FSW/8BKF97/bJLe4nqjvYVYEWuqFOqS4iNYqf/bOiBF4s98gmJ1G0TpRa4PVntHW
b+cgCNAO+l+yeHUUz3i7CL3nLzBRCRNt43+dgyMy0puGfDI3t6HB081GJe8x/scg
p41DQaCoO9BErQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:10:47 2026 by rpki-client