Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: aStLRRSIh95Cqa0qFqt0RxGpnl4ws3Yf7rGls+6TEic=
Subject key identifier: D8:73:F4:EF:05:B6:DB:CA:46:B8:32:18:B4:6D:21:D8:0C:D3:7F:AB
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 01A0CF3668778FF48438C00D4BB49553AFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0F11
Signing time: Wed 23 Sep 2026 17:00:44 +0000
Manifest this update: Wed 23 Sep 2026 17:00:44 +0000
Manifest next update: Thu 24 Sep 2026 17:00:44 +0000
Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: rcCh77VqRos+Ky/3O5kL9l0H+ybV4hkCj8ywgbPQiHw=)
2: fECGl5m9a298-w16DgtX4n1DH54.roa (hash: TfrAnyAJp/tVFrms+CEKKrdUp5DsxoN8mEoQwJkSNDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:68:77:8f:f4:84:38:c0:0d:4b:b4:95:53:af:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Sep 23 17:00:44 2026 GMT
Not After : Sep 24 17:00:44 2026 GMT
Subject: CN=d873f4ef05b6dbca46b83218b46d21d80cd37fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:21:65:73:db:e4:0c:93:ae:38:92:52:1b:
8f:cb:59:ae:84:ae:7e:59:81:23:9a:76:fb:82:50:
fe:82:77:da:69:b6:3b:4a:b2:66:a9:d6:fe:fd:b1:
b7:53:4e:d2:2e:92:d4:32:75:14:27:e9:85:9c:8b:
82:33:51:c4:03:51:de:20:18:25:d6:0a:cf:47:60:
e7:c0:64:ed:f0:bf:fc:20:d1:56:ec:8e:71:7e:5d:
18:b7:f0:d7:6d:aa:81:42:b5:9e:16:f6:4b:4c:19:
10:e7:55:89:9c:03:49:34:27:1d:fa:2c:a7:31:13:
ce:fe:27:38:1e:67:cc:e1:d1:9c:ab:4f:a9:77:d7:
de:0f:cd:1e:0d:21:70:17:5d:46:22:9e:89:7a:f4:
dd:de:56:e6:01:8b:71:30:bb:02:a6:cc:17:25:fd:
fd:db:ef:7b:9b:ac:45:85:36:64:11:e2:f1:4e:06:
92:31:b1:e6:a5:ea:c4:f2:2f:9c:19:c2:ac:18:3a:
b0:de:0b:c6:3c:93:b3:0f:a3:01:ce:f2:fb:45:b1:
d0:2d:d9:63:1d:1c:74:04:24:8e:c1:c5:8c:3b:e3:
0b:3e:39:49:8e:e2:d7:78:6a:6a:ab:a9:e7:39:70:
d4:3d:fe:d2:00:bf:6d:21:45:b6:fe:8d:fb:6d:7c:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:73:F4:EF:05:B6:DB:CA:46:B8:32:18:B4:6D:21:D8:0C:D3:7F:AB
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f3:65:7d:99:dc:71:b5:5a:77:a2:a4:ec:27:06:03:b3:f8:
fc:a2:e4:03:9e:d4:65:67:c3:5b:dd:0f:08:b1:5e:ff:e6:35:
f3:ab:15:ae:ec:f3:dd:9a:bd:35:5b:23:73:28:10:03:50:dc:
ff:be:6e:e4:2e:ca:b5:1f:5f:1c:9b:ae:cb:11:75:b0:98:99:
5c:ca:0c:57:cf:10:29:fe:d5:4a:1e:f6:32:00:ac:9f:ec:13:
a5:c9:1f:e4:af:37:f7:3c:3f:de:3c:f8:31:13:96:11:01:33:
3d:c7:8f:9f:da:27:29:a0:98:22:b8:5e:5e:23:e6:8e:78:34:
80:3c:a9:33:5d:b3:80:70:7d:b0:46:2c:18:4b:9f:49:c2:17:
ad:f8:04:69:54:11:85:6a:db:3c:6d:e5:2f:ff:ba:a1:42:3f:
de:e9:f3:7f:b0:ff:3b:db:65:12:c6:b2:31:c9:2b:cd:98:e1:
28:80:ab:83:85:c9:24:db:44:c6:83:2b:92:3d:d7:9a:4f:b4:
d4:a0:f2:1b:fc:68:97:b3:d7:a0:7a:18:36:c3:66:a2:f8:f2:
27:ed:c3:85:16:5a:01:c5:d9:ad:80:a2:c0:16:60:84:01:86:
e0:5e:d7:15:fc:09:96:f9:e4:ff:e6:40:aa:1e:06:4c:84:3c:
7f:e5:83:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNmh3j/SEOMANS7SVU6//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTBlOWNjM2I3ZTM2M2Q3MjZiZDcwMjc1MGI1M2YyOWIw
NTBhN2QwHhcNMjYwOTIzMTcwMDQ0WhcNMjYwOTI0MTcwMDQ0WjAzMTEwLwYDVQQD
EyhkODczZjRlZjA1YjZkYmNhNDZiODMyMThiNDZkMjFkODBjZDM3ZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiohZXPb5AyTrjiSUhuPy1muhK5+
WYEjmnb7glD+gnfaabY7SrJmqdb+/bG3U07SLpLUMnUUJ+mFnIuCM1HEA1HeIBgl
1grPR2DnwGTt8L/8INFW7I5xfl0Yt/DXbaqBQrWeFvZLTBkQ51WJnANJNCcd+iyn
MRPO/ic4HmfM4dGcq0+pd9feD80eDSFwF11GIp6JevTd3lbmAYtxMLsCpswXJf39
2+97m6xFhTZkEeLxTgaSMbHmperE8i+cGcKsGDqw3gvGPJOzD6MBzvL7RbHQLdlj
HRx0BCSOwcWMO+MLPjlJjuLXeGpqq6nnOXDUPf7SAL9tIUW2/o37bXwRNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhz9O8FttvKRrgyGLRtIdgM03+rMB8GA1UdIwQY
MBaAFOKQ6cw7fjY9cmvXAnULU/KbBQp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEt
OTExM2ZkN2FmZDZjLzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEtOTExM2ZkN2FmZDZj
LzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/NlfZnc
cbVad6Kk7CcGA7P4/KLkA57UZWfDW90PCLFe/+Y186sVruzz3Zq9NVsjcygQA1Dc
/75u5C7KtR9fHJuuyxF1sJiZXMoMV88QKf7VSh72MgCsn+wTpckf5K839zw/3jz4
MROWEQEzPcePn9onKaCYIrheXiPmjng0gDypM12zgHB9sEYsGEufScIXrfgEaVQR
hWrbPG3lL/+6oUI/3unzf7D/O9tlEsayMckrzZjhKICrg4XJJNtExoMrkj3Xmk+0
1KDyG/xol7PXoHoYNsNmovjyJ+3DhRZaAcXZrYCiwBZghAGG4F7XFfwJlvnk/+ZA
qh4GTIQ8f+WD2Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:17:56 2026 by rpki-client