Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: 1Fb1HVveOE7bqjgkqAY2rSUGT04r+OPSgkKQnTdZL9c=
Subject key identifier: AC:B1:85:6C:FC:A8:68:83:39:77:9C:91:A0:85:C7:89:36:27:A5:FC
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 01A00093DA56282297E0AB8DE1FCA3439DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 07A0
Signing time: Fri 14 Aug 2026 14:01:24 +0000
Manifest this update: Fri 14 Aug 2026 14:01:24 +0000
Manifest next update: Sat 15 Aug 2026 14:01:24 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: Vx4QCZ0rZOIC/PqPq8pO/xpyfzG/erivTHDTkgvHij8=)
2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:da:56:28:22:97:e0:ab:8d:e1:fc:a3:43:9d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Aug 14 14:01:24 2026 GMT
Not After : Aug 15 14:01:24 2026 GMT
Subject: CN=acb1856cfca8688339779c91a085c7893627a5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:17:ab:bd:e6:e9:87:cd:cd:e2:b2:c8:ff:
a4:0d:06:0e:16:b0:be:fe:55:08:a2:fa:90:b8:a8:
86:56:60:45:89:1a:a8:89:1c:d1:67:db:29:85:86:
7c:1b:ef:77:e5:5e:f5:5e:de:b5:c3:bf:a8:33:ae:
18:81:12:0b:26:77:d2:f8:ae:78:d9:f6:15:39:08:
b5:47:7e:58:2e:f9:c0:00:37:e3:b4:46:30:11:24:
0d:4e:e6:df:98:2e:9f:f7:b8:0e:0d:88:17:27:ed:
ba:cb:82:b5:4d:89:b1:ca:67:f9:fc:94:a1:ca:62:
e4:cc:7f:8a:88:fb:b0:00:8a:f4:d6:92:30:ee:77:
a9:54:01:03:11:b7:ce:6b:3e:86:82:5b:ac:61:85:
43:76:53:75:f1:bd:7e:9b:c9:4f:4a:cb:7b:33:e9:
0c:cb:93:39:67:19:44:71:a6:f3:c8:19:5b:42:b1:
c2:4a:f1:c6:e2:79:ec:e4:a3:65:8f:b7:aa:e4:02:
79:1f:ed:af:02:b2:e0:f6:f3:8b:2b:d5:fa:63:7e:
82:d5:d8:24:76:c0:f3:b6:d0:68:13:66:a2:87:62:
de:75:64:28:ee:5a:18:09:3c:89:e8:1c:d7:67:ec:
f6:21:71:88:7d:90:fd:17:fc:77:dd:bc:74:aa:62:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:85:6C:FC:A8:68:83:39:77:9C:91:A0:85:C7:89:36:27:A5:FC
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e3:d4:b7:71:a3:69:65:ed:61:49:0f:56:62:a3:65:99:df:
8b:3e:8d:28:24:83:4b:fc:d5:14:07:8e:68:3b:6c:58:90:0b:
50:d3:1c:3d:0d:0e:69:39:74:77:01:b3:5f:07:11:31:8b:f2:
1e:66:cb:5d:0f:f6:fc:b7:19:99:c2:21:ec:ac:90:88:ec:d5:
91:00:77:23:f0:bf:79:30:92:f0:6e:1d:f9:b1:d8:fb:63:be:
d5:23:ad:c2:f2:60:26:b4:66:fa:c8:03:28:c7:94:25:d5:d3:
1b:21:55:08:9d:5e:8b:5f:23:64:19:e3:fb:92:2c:33:98:b4:
f1:6a:83:f1:3d:65:8a:c8:b5:af:4e:73:1d:b1:a1:13:5c:81:
d8:17:c1:52:f6:3d:3b:ff:f2:d6:52:05:59:3d:c3:02:95:0c:
61:df:75:d2:64:85:4b:e5:78:1b:fe:27:f0:bf:99:bc:bd:18:
4b:bb:34:e5:14:54:a3:0f:cd:41:c8:5f:56:97:05:12:2c:96:
ec:8c:2a:e3:3d:33:31:1e:75:46:6f:ba:47:cf:80:3c:c9:7f:
96:90:a2:d5:8a:8d:5e:ee:a6:32:d3:e3:23:01:6f:c7:07:6f:
9a:5d:a1:fd:3c:cc:ce:c5:8b:57:9b:04:96:8c:56:97:e7:64:
a6:69:16:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk9pWKCKX4KuN4fyjQ53mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDllMjc4Yzc4NjIyNTRjODg3NTVlNDcxNzM5OGE1NTJh
NDkwNDAwHhcNMjYwODE0MTQwMTI0WhcNMjYwODE1MTQwMTI0WjAzMTEwLwYDVQQD
EyhhY2IxODU2Y2ZjYTg2ODgzMzk3NzljOTFhMDg1Yzc4OTM2MjdhNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOgXq73m6YfNzeKyyP+kDQYOFrC+
/lUIovqQuKiGVmBFiRqoiRzRZ9sphYZ8G+935V71Xt61w7+oM64YgRILJnfS+K54
2fYVOQi1R35YLvnAADfjtEYwESQNTubfmC6f97gODYgXJ+26y4K1TYmxymf5/JSh
ymLkzH+KiPuwAIr01pIw7nepVAEDEbfOaz6GglusYYVDdlN18b1+m8lPSst7M+kM
y5M5ZxlEcabzyBlbQrHCSvHG4nns5KNlj7eq5AJ5H+2vArLg9vOLK9X6Y36C1dgk
dsDzttBoE2aih2LedWQo7loYCTyJ6BzXZ+z2IXGIfZD9F/x33bx0qmJlGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyxhWz8qGiDOXeckaCFx4k2J6X8MB8GA1UdIwQY
MBaAFOEJ4njHhiJUyIdV5HFzmKVSpJBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQt
MmYwM2UzMmJkMjFhLzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQtMmYwM2UzMmJkMjFh
LzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuPUt3Gj
aWXtYUkPVmKjZZnfiz6NKCSDS/zVFAeOaDtsWJALUNMcPQ0OaTl0dwGzXwcRMYvy
HmbLXQ/2/LcZmcIh7KyQiOzVkQB3I/C/eTCS8G4d+bHY+2O+1SOtwvJgJrRm+sgD
KMeUJdXTGyFVCJ1ei18jZBnj+5IsM5i08WqD8T1lisi1r05zHbGhE1yB2BfBUvY9
O//y1lIFWT3DApUMYd910mSFS+V4G/4n8L+ZvL0YS7s05RRUow/NQchfVpcFEiyW
7Iwq4z0zMR51Rm+6R8+APMl/lpCi1YqNXu6mMtPjIwFvxwdvml2h/TzMzsWLV5sE
loxWl+dkpmkW+A==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:54 2026 by rpki-client