Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
File: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft (raw, json)
Hash identifier: 9iE7xVrBVkyqjsAsb+HepVdRkG+v335fgNcg477oMiA=
Subject key identifier: B9:C0:BE:50:C6:CE:39:16:DF:1C:48:C8:13:20:08:40:25:18:F4:F8
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial: 01A0CCA314782C5BB63361BD0AAA471BCD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
Manifest number: 0399
Signing time: Wed 23 Sep 2026 05:00:34 +0000
Manifest this update: Wed 23 Sep 2026 05:00:34 +0000
Manifest next update: Thu 24 Sep 2026 05:00:34 +0000
Files and hashes: 1: 2QGMBl3UaUnanjS2q3I4CT5kcZg.roa (hash: gT+03r/Akhqe4ZoJErcZDzYA56UUOiJnaMjRSrb0AlM=)
2: 41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl (hash: i1BD6W04KqDpe0bJn+UnToVOU9nKWO9z3iOpaNg7c+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:14:78:2c:5b:b6:33:61:bd:0a:aa:47:1b:cd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
Validity
Not Before: Sep 23 05:00:34 2026 GMT
Not After : Sep 24 05:00:34 2026 GMT
Subject: CN=b9c0be50c6ce3916df1c48c8132008402518f4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:ae:3b:fb:ca:0d:88:e7:7b:58:8d:8f:2b:
e4:e2:d5:a8:39:f0:53:9a:ab:af:ca:d4:02:46:fc:
f1:0a:1c:05:da:0a:d0:05:d0:10:8f:43:09:fb:d7:
3e:6a:8b:28:4a:46:66:0b:1d:ad:e2:23:7e:16:80:
d0:a9:ab:6d:8d:5b:ba:b7:0d:29:06:78:2a:e7:31:
06:b2:ca:be:a6:ac:b6:b3:cf:36:92:db:ea:df:93:
42:fb:9b:9c:dd:ab:5d:53:6b:0e:c9:4f:ae:c1:6f:
7f:d9:35:9c:3a:07:c0:95:74:80:f9:76:f0:30:89:
95:a6:9c:e1:6a:bb:03:14:73:87:68:58:8d:02:db:
96:7b:e3:67:f7:86:fa:7e:eb:18:42:50:01:0f:6b:
c3:4e:7c:13:3a:14:e5:a2:f9:fc:48:03:73:14:86:
27:53:dc:39:4e:82:09:af:f6:29:07:74:dd:0d:18:
87:5c:24:bd:40:90:57:8d:7e:34:bd:51:e6:e8:6c:
6b:75:34:44:8e:58:b4:6c:6e:8a:76:2c:bc:0e:3e:
b5:05:3b:a5:eb:d2:67:bf:55:98:5c:d6:15:23:7c:
11:65:97:f8:96:af:22:eb:ef:4b:62:49:68:fc:2e:
db:87:a0:bb:df:50:37:fc:1c:94:14:2e:f9:0b:d6:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C0:BE:50:C6:CE:39:16:DF:1C:48:C8:13:20:08:40:25:18:F4:F8
X509v3 Authority Key Identifier:
keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:71:bf:0a:cc:cd:7a:cd:6f:cc:56:a9:6a:ce:04:d7:75:1a:
62:01:c2:8d:08:2e:2c:5b:5a:bf:0c:ec:2a:8b:d0:45:85:2d:
fd:45:d1:b9:8d:76:54:e3:ed:cc:f0:04:be:64:d5:24:95:21:
0a:5e:ce:51:f3:a7:f8:52:21:36:3b:69:d7:12:2a:1d:3a:ef:
d2:39:2c:44:54:ff:00:96:25:3f:f3:c5:74:36:73:74:f2:c1:
ba:e7:d8:61:53:4b:64:8a:68:69:e6:cd:9d:63:d3:5c:43:38:
43:6c:28:1d:cc:fe:4a:22:3e:61:67:9c:6e:0e:8f:73:b9:c4:
a8:ad:a6:7c:4d:5b:4f:5a:f2:4d:e1:70:bb:a1:c0:9c:83:5e:
57:00:c5:a6:04:72:96:37:b8:58:87:dc:f3:33:cb:62:96:a2:
98:9e:7a:40:e6:f0:58:da:f3:b5:d8:05:5e:a1:7f:9b:c5:6c:
b6:5a:d6:d0:e5:c6:60:fc:05:f5:82:06:b7:cd:18:0d:4b:91:
12:e1:32:f0:0e:fd:b9:b6:68:fc:d3:8e:bd:ae:2a:48:ba:7a:
60:1b:18:2b:0e:23:ec:65:a9:52:d2:c1:14:a1:16:97:54:fe:
2f:ea:93:c8:03:f1:fe:22:c3:54:2a:d3:ad:2b:49:2d:a5:7c:
4e:11:fd:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMoxR4LFu2M2G9CqpHG80EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNTYwN2E0OTQyMDBmZjFmM2Q1OTllMjVmYzAxM2YzODY0
MGNkNDYwHhcNMjYwOTIzMDUwMDM0WhcNMjYwOTI0MDUwMDM0WjAzMTEwLwYDVQQD
EyhiOWMwYmU1MGM2Y2UzOTE2ZGYxYzQ4YzgxMzIwMDg0MDI1MThmNGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp2uO/vKDYjne1iNjyvk4tWoOfBT
mquvytQCRvzxChwF2grQBdAQj0MJ+9c+aosoSkZmCx2t4iN+FoDQqattjVu6tw0p
Bngq5zEGssq+pqy2s882ktvq35NC+5uc3atdU2sOyU+uwW9/2TWcOgfAlXSA+Xbw
MImVppzharsDFHOHaFiNAtuWe+Nn94b6fusYQlABD2vDTnwTOhTlovn8SANzFIYn
U9w5ToIJr/YpB3TdDRiHXCS9QJBXjX40vVHm6GxrdTREjli0bG6Kdiy8Dj61BTul
69Jnv1WYXNYVI3wRZZf4lq8i6+9LYklo/C7bh6C731A3/ByUFC75C9a7GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnAvlDGzjkW3xxIyBMgCEAlGPT4MB8GA1UdIwQY
MBaAFONWB6SUIA/x89WZ4l/AE/OGQM1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYt
NTA0N2NiMzI3ZDllLzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy84ZDY3NTktNTA2Zi00ZjBhLWJjMzYtNTA0N2NiMzI3ZDll
LzEvNDFZSHBKUWdEX0h6MVpuaVg4QVQ4NFpBelVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHG/CszN
es1vzFapas4E13UaYgHCjQguLFtavwzsKovQRYUt/UXRuY12VOPtzPAEvmTVJJUh
Cl7OUfOn+FIhNjtp1xIqHTrv0jksRFT/AJYlP/PFdDZzdPLBuufYYVNLZIpoaebN
nWPTXEM4Q2woHcz+SiI+YWecbg6Pc7nEqK2mfE1bT1ryTeFwu6HAnINeVwDFpgRy
lje4WIfc8zPLYpaimJ56QObwWNrztdgFXqF/m8VstlrW0OXGYPwF9YIGt80YDUuR
EuEy8A79ubZo/NOOva4qSLp6YBsYKw4j7GWpUtLBFKEWl1T+L+qTyAPx/iLDVCrT
rStJLaV8ThH9uA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:22:17 2026 by rpki-client