Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.mft
File: CxS4GCzVzNQ__YJMLKeSHCThzRs.mft (raw, json)
Hash identifier: 7SWLlrAwNDwM1R0a4DY0gT/d7OpOY24r2FOXKxfk8OE=
Subject key identifier: 33:88:65:10:B9:B3:F4:CE:BE:E6:94:49:E6:B0:22:02:7C:5D:76:74
Authority key identifier: 0B:14:B8:18:2C:D5:CC:D4:3F:FD:82:4C:2C:A7:92:1C:24:E1:CD:1B
Certificate issuer: /CN=0b14b8182cd5ccd43ffd824c2ca7921c24e1cd1b
Certificate serial: 01A041607BAB98C0E00725D9080052BB22E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxS4GCzVzNQ__YJMLKeSHCThzRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.mft
Manifest number: 4E
Signing time: Thu 27 Aug 2026 04:00:37 +0000
Manifest this update: Thu 27 Aug 2026 04:00:37 +0000
Manifest next update: Fri 28 Aug 2026 04:00:37 +0000
Files and hashes: 1: CxS4GCzVzNQ__YJMLKeSHCThzRs.crl (hash: Ai+2QGF9SVpG+ox25d1cWyqayktXerYktMyu07dT+0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CxS4GCzVzNQ__YJMLKeSHCThzRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:60:7b:ab:98:c0:e0:07:25:d9:08:00:52:bb:22:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b14b8182cd5ccd43ffd824c2ca7921c24e1cd1b
Validity
Not Before: Aug 27 04:00:37 2026 GMT
Not After : Aug 28 04:00:37 2026 GMT
Subject: CN=33886510b9b3f4cebee69449e6b022027c5d7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:7f:61:2f:17:29:5c:e8:dc:34:0b:27:28:
78:d4:f5:d8:a0:2f:5c:0f:b3:7c:32:62:24:64:9b:
fc:de:0f:c1:c8:36:16:12:a3:66:c8:71:18:fb:35:
b0:53:2b:f1:11:14:a7:e6:e9:45:e5:79:24:23:f1:
08:dc:34:4a:3e:93:14:9b:ab:4f:f4:0e:85:e1:fd:
24:d3:1c:b4:cb:74:17:43:87:2b:ff:ee:41:62:17:
1c:0f:36:b3:6e:5f:21:a8:c8:aa:3e:c4:28:0e:e9:
42:8b:bc:c5:14:98:c0:87:67:cd:2f:6e:ad:b1:ce:
b2:31:08:de:b1:e9:9b:ef:2c:52:4f:d8:07:16:cb:
95:84:37:87:b3:22:b0:f7:cb:77:80:05:75:b6:9f:
7b:0f:44:0f:d8:e8:b8:79:4a:3c:9a:d9:05:75:dc:
e8:80:13:5d:5f:ea:02:cd:a2:15:52:3f:bb:97:f4:
5a:7e:9e:15:ca:29:5b:e6:c2:6d:c6:26:14:df:a3:
f9:33:7f:94:45:6b:c4:95:52:7a:49:1c:4b:5c:21:
3f:ba:c0:b7:a7:03:c5:ae:e2:b8:7a:89:0e:4f:05:
ba:b6:5b:c9:47:a5:64:dc:e3:74:88:e2:f6:af:56:
98:f4:a5:46:86:c1:61:a0:c1:44:3f:a5:9c:b0:b4:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:88:65:10:B9:B3:F4:CE:BE:E6:94:49:E6:B0:22:02:7C:5D:76:74
X509v3 Authority Key Identifier:
keyid:0B:14:B8:18:2C:D5:CC:D4:3F:FD:82:4C:2C:A7:92:1C:24:E1:CD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxS4GCzVzNQ__YJMLKeSHCThzRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/775d38-6990-4371-a45f-8e6b035618a0/1/CxS4GCzVzNQ__YJMLKeSHCThzRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6e:b3:ce:39:45:ec:b3:22:dc:28:6c:fd:73:1b:2c:b2:bd:
f7:d6:60:9e:d9:0f:24:76:06:f8:5e:25:08:65:27:6b:ad:b4:
2b:6d:b4:6f:e0:ad:a4:33:b9:b4:12:ef:7e:cc:ab:03:c9:28:
0d:41:da:00:5d:1c:0d:1f:0f:52:c0:de:5e:16:2d:2d:3e:42:
c3:46:e7:77:5a:44:1d:0b:06:fe:31:29:3e:fa:7d:37:e6:c6:
27:44:f1:47:4d:81:4d:9b:7c:68:35:85:39:e4:a7:47:87:6f:
4e:3d:49:5d:0e:1a:af:72:53:ba:54:68:5e:60:55:0a:e7:58:
77:8e:38:96:d9:06:50:ba:7e:b3:90:45:35:63:52:50:4d:f3:
b1:6b:44:c6:a3:a8:a9:e5:06:95:12:e5:d4:db:92:82:1a:20:
9d:3f:c2:8c:80:48:11:93:dc:16:bb:20:d1:5f:ac:bc:cf:f2:
d3:be:2c:1b:68:14:65:a4:a5:06:66:a9:b9:10:97:ef:e5:c3:
18:42:d1:66:c6:50:2e:1e:70:50:c3:03:19:4f:9e:1b:bc:92:
45:8c:89:d9:93:f4:de:e2:cf:83:07:df:e4:06:3a:c9:e5:d8:
23:1c:92:34:fc:00:5c:07:b4:73:61:46:1e:62:6d:a5:63:39:
9b:0d:29:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBYHurmMDgByXZCABSuyLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMTRiODE4MmNkNWNjZDQzZmZkODI0YzJjYTc5MjFjMjRl
MWNkMWIwHhcNMjYwODI3MDQwMDM3WhcNMjYwODI4MDQwMDM3WjAzMTEwLwYDVQQD
EygzMzg4NjUxMGI5YjNmNGNlYmVlNjk0NDllNmIwMjIwMjdjNWQ3Njc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnp/YS8XKVzo3DQLJyh41PXYoC9c
D7N8MmIkZJv83g/ByDYWEqNmyHEY+zWwUyvxERSn5ulF5XkkI/EI3DRKPpMUm6tP
9A6F4f0k0xy0y3QXQ4cr/+5BYhccDzazbl8hqMiqPsQoDulCi7zFFJjAh2fNL26t
sc6yMQjesemb7yxST9gHFsuVhDeHsyKw98t3gAV1tp97D0QP2Oi4eUo8mtkFddzo
gBNdX+oCzaIVUj+7l/Rafp4Vyilb5sJtxiYU36P5M3+URWvElVJ6SRxLXCE/usC3
pwPFruK4eokOTwW6tlvJR6Vk3ON0iOL2r1aY9KVGhsFhoMFEP6WcsLQ6yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOIZRC5s/TOvuaUSeawIgJ8XXZ0MB8GA1UdIwQY
MBaAFAsUuBgs1czUP/2CTCynkhwk4c0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3hTNEdDelZ6TlFfX1lKTUxLZVNIQ1RoelJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83NzVkMzgtNjk5MC00MzcxLWE0NWYt
OGU2YjAzNTYxOGEwLzEvQ3hTNEdDelZ6TlFfX1lKTUxLZVNIQ1RoelJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS83NzVkMzgtNjk5MC00MzcxLWE0NWYtOGU2YjAzNTYxOGEw
LzEvQ3hTNEdDelZ6TlFfX1lKTUxLZVNIQ1RoelJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcG6zzjlF
7LMi3Chs/XMbLLK999ZgntkPJHYG+F4lCGUna620K220b+CtpDO5tBLvfsyrA8ko
DUHaAF0cDR8PUsDeXhYtLT5Cw0bnd1pEHQsG/jEpPvp9N+bGJ0TxR02BTZt8aDWF
OeSnR4dvTj1JXQ4ar3JTulRoXmBVCudYd444ltkGULp+s5BFNWNSUE3zsWtExqOo
qeUGlRLl1NuSghognT/CjIBIEZPcFrsg0V+svM/y074sG2gUZaSlBmapuRCX7+XD
GELRZsZQLh5wUMMDGU+eG7ySRYyJ2ZP03uLPgwff5AY6yeXYIxySNPwAXAe0c2FG
HmJtpWM5mw0p5g==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:48 2026 by rpki-client