Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: G9VNS0aS8aPbMI8uOGRQpXYHXMp9qVoc9SXBR6i4SRM=
Subject key identifier: 9C:BB:31:29:28:02:9E:33:16:C2:55:30:E7:DE:4A:E1:39:F8:DD:C7
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 01A13E25FB364BB3B43A4206A3B7CE6EF641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1A38
Signing time: Thu 15 Oct 2026 06:00:38 +0000
Manifest this update: Thu 15 Oct 2026 06:00:38 +0000
Manifest next update: Fri 16 Oct 2026 06:00:38 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: cR6FDWFfRZ0LehoSjK/AOaA7GD4YdlLBiCNvomEvykM=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:fb:36:4b:b3:b4:3a:42:06:a3:b7:ce:6e:f6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Oct 15 06:00:38 2026 GMT
Not After : Oct 16 06:00:38 2026 GMT
Subject: CN=9cbb312928029e3316c25530e7de4ae139f8ddc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f0:86:54:89:fd:e5:91:3e:f9:1a:7a:d1:ed:
e4:53:99:dd:92:a1:8b:68:1f:cb:87:cb:ea:e9:54:
4d:b2:56:fc:7c:15:c6:13:e8:4e:67:2e:e5:b7:c3:
95:9c:f3:71:de:71:36:97:6e:ab:d8:18:a8:43:a9:
a2:b9:cc:c2:a0:25:0f:e7:07:b8:2c:8c:79:1c:1e:
95:6c:f8:8e:f5:93:64:28:4e:2d:d9:f4:61:f8:1a:
b5:05:8e:ac:36:11:6c:a6:b0:32:a9:af:fb:c0:7a:
3a:d4:0b:bc:0c:b2:5b:5a:cf:d0:0b:68:62:c0:d8:
c4:89:e4:1b:07:a9:d7:03:92:ef:dd:21:a1:90:f5:
35:bc:92:f1:0b:8f:9e:3f:ea:94:2d:0a:c4:c2:05:
af:42:fa:8e:42:2e:ca:52:74:67:a4:1e:a3:8a:58:
cb:de:60:e6:f9:64:80:60:7a:82:d1:f3:0e:8d:8a:
53:b2:03:0a:62:ff:24:18:ae:90:45:7a:23:4e:11:
3e:7d:58:5a:4a:2e:8b:a2:f7:96:f5:69:df:e2:80:
87:0e:37:a0:e2:e4:0b:06:eb:e7:32:23:a8:72:0c:
03:68:9a:bc:ae:3c:8e:31:58:ec:17:1c:4b:6b:ba:
ed:d9:6b:cb:08:e4:e8:c2:da:98:a6:77:9e:c0:ff:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BB:31:29:28:02:9E:33:16:C2:55:30:E7:DE:4A:E1:39:F8:DD:C7
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a9:d2:62:ae:77:19:08:e0:ce:94:2f:3e:0f:bd:aa:32:e5:
96:80:5f:76:6f:59:0f:47:db:31:0d:37:dc:8c:ab:ca:2c:87:
d3:f2:a1:b4:79:0c:85:e4:cc:5a:07:d6:d6:4d:8c:e3:36:b4:
33:1d:13:ad:2b:c8:ae:58:bc:e1:90:ea:14:dd:c5:d0:9d:3a:
3f:8e:91:ed:8e:cf:ab:8a:1b:2f:a2:f7:e2:05:b2:6e:b4:cf:
ac:fc:31:33:13:0d:12:09:13:59:a2:a9:f3:c6:71:80:82:32:
0c:fc:2f:3c:1f:71:e6:65:47:a5:21:c6:b0:cc:5e:66:29:a9:
74:2f:09:d5:ba:0b:8a:18:c2:e8:48:83:1f:aa:7b:0e:d4:5a:
a3:8d:a6:ea:81:bb:33:51:98:b5:2c:0a:71:49:d5:fb:e5:e3:
58:ee:43:96:4f:bb:be:20:25:0a:59:de:8f:b1:97:7c:c4:ac:
69:a9:51:e8:47:06:31:af:e2:40:e1:6d:44:94:10:fd:c9:6c:
c6:04:62:9d:9b:36:cf:90:9e:a8:6c:80:5a:f5:a3:b2:63:b1:
91:e7:78:ed:2a:ae:68:1c:dd:a5:3d:1e:3e:29:02:ac:56:59:
27:34:18:69:e7:3d:52:46:88:67:90:ba:d6:8b:43:51:bd:c1:
c2:b1:8f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jfs2S7O0OkIGo7fObvZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZWE1OTM0NjQ4NThlMjkzOTUyMzQ1Y2Y0ZTk3NzkyYzg4
MTEwNTcwHhcNMjYxMDE1MDYwMDM4WhcNMjYxMDE2MDYwMDM4WjAzMTEwLwYDVQQD
Eyg5Y2JiMzEyOTI4MDI5ZTMzMTZjMjU1MzBlN2RlNGFlMTM5ZjhkZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfCGVIn95ZE++Rp60e3kU5ndkqGL
aB/Lh8vq6VRNslb8fBXGE+hOZy7lt8OVnPNx3nE2l26r2BioQ6miuczCoCUP5we4
LIx5HB6VbPiO9ZNkKE4t2fRh+Bq1BY6sNhFsprAyqa/7wHo61Au8DLJbWs/QC2hi
wNjEieQbB6nXA5Lv3SGhkPU1vJLxC4+eP+qULQrEwgWvQvqOQi7KUnRnpB6jiljL
3mDm+WSAYHqC0fMOjYpTsgMKYv8kGK6QRXojThE+fVhaSi6LoveW9Wnf4oCHDjeg
4uQLBuvnMiOocgwDaJq8rjyOMVjsFxxLa7rt2WvLCOTowtqYpneewP/HpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJy7MSkoAp4zFsJVMOfeSuE5+N3HMB8GA1UdIwQY
MBaAFOLqWTRkhY4pOVI0XPTpd5LIgRBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEt
NjJlNGJhZWU0ZmM1LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9jMzkzMmYtZjQ3Ni00ZDVjLWJiNWEtNjJlNGJhZWU0ZmM1
LzEvNHVwWk5HU0ZqaWs1VWpSYzlPbDNrc2lCRUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6nSYq53
GQjgzpQvPg+9qjLlloBfdm9ZD0fbMQ033IyryiyH0/KhtHkMheTMWgfW1k2M4za0
Mx0TrSvIrli84ZDqFN3F0J06P46R7Y7Pq4obL6L34gWybrTPrPwxMxMNEgkTWaKp
88ZxgIIyDPwvPB9x5mVHpSHGsMxeZimpdC8J1boLihjC6EiDH6p7DtRao42m6oG7
M1GYtSwKcUnV++XjWO5Dlk+7viAlClnej7GXfMSsaalR6EcGMa/iQOFtRJQQ/cls
xgRinZs2z5CeqGyAWvWjsmOxked47SquaBzdpT0ePikCrFZZJzQYaec9UkaIZ5C6
1otDUb3BwrGPrg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:14 2026 by rpki-client