Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: IBbQp2VuaBtaTYXVyaMGRzpYHv7w1L5B+PhfbCpQHmo=
Subject key identifier: FB:BD:78:9C:FA:FF:46:FC:3B:94:1F:C1:5A:19:31:AE:7D:4D:C5:8D
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 01A10737FEFA92A3341D13BAFF5280F5CA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 0828
Signing time: Sun 04 Oct 2026 14:01:12 +0000
Manifest this update: Sun 04 Oct 2026 14:01:12 +0000
Manifest next update: Mon 05 Oct 2026 14:01:12 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: c3xS26PhUTZCiyfLDoSvVs7Ma4lWvDIAU4byThGPlm0=)
2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:37:fe:fa:92:a3:34:1d:13:ba:ff:52:80:f5:ca:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Oct 4 14:01:12 2026 GMT
Not After : Oct 5 14:01:12 2026 GMT
Subject: CN=fbbd789cfaff46fc3b941fc15a1931ae7d4dc58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:c8:9c:2c:c9:9a:9c:ac:f2:58:7f:36:79:
af:d2:ec:49:8a:28:ea:73:40:3f:68:e0:f2:2f:96:
5f:41:8f:10:f8:1e:d9:6d:92:95:f5:c7:0b:88:db:
6e:a6:50:5a:94:ed:6a:ec:34:1b:6b:61:f2:af:0d:
49:11:4e:25:fa:ff:5a:f0:fd:c6:f1:bf:79:10:de:
5e:91:46:28:3c:18:9d:6f:ad:6d:e7:9d:05:f6:06:
7c:e5:04:11:4c:20:39:b6:a6:b1:18:f4:13:19:26:
c5:6e:4e:e6:dd:a8:fd:a4:93:ba:c3:cc:98:08:10:
fd:92:c2:6d:fc:af:6a:8c:0b:c7:ba:e0:d8:98:60:
6a:5c:4c:2a:04:43:b6:c2:32:f4:d8:5e:df:5a:ad:
8f:d4:05:66:05:bb:48:db:fc:3c:f6:af:72:a0:35:
da:c2:16:e3:df:b9:1d:d2:8d:88:18:4d:a3:8f:42:
4b:23:f1:77:e2:61:d7:4a:8a:58:20:68:ef:c6:75:
7c:07:a8:df:b5:20:65:9a:73:d0:e6:80:3b:5a:ff:
bf:5c:d6:bd:b1:f6:ec:13:35:2c:08:24:8a:31:06:
03:94:41:b6:ec:7d:47:ab:2e:6e:43:61:27:1b:2a:
94:89:39:e5:b7:15:73:78:f8:09:76:12:77:63:da:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:78:9C:FA:FF:46:FC:3B:94:1F:C1:5A:19:31:AE:7D:4D:C5:8D
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:48:e4:82:5e:ec:63:e1:30:0a:28:75:61:55:c1:e8:9f:a0:
6c:61:a2:10:5f:57:19:83:f4:b2:ac:3f:96:ac:65:88:b7:c2:
bb:7d:cb:1e:c4:b1:2a:87:70:b0:fa:17:88:dd:12:73:1a:41:
d1:f8:17:4e:2b:5e:c7:68:8a:cf:6f:8b:59:1f:d1:56:e6:a1:
d4:cd:2e:7d:ce:80:01:69:d5:9d:aa:c4:26:eb:87:5c:b3:9d:
22:35:91:d0:fc:d5:4c:5e:06:95:7d:b6:b5:c3:29:6e:53:e9:
89:58:d2:b9:36:45:12:d0:36:4c:62:5b:c5:00:e2:c9:85:2d:
6e:ab:7e:51:8f:9c:75:65:f1:02:d4:9a:3a:ae:a0:54:e5:5c:
58:8d:a5:a6:83:ba:78:1a:60:62:60:0c:33:37:4c:89:71:36:
2a:00:ad:7f:7d:c2:de:b2:f8:01:fe:95:5a:76:4c:bb:70:3b:
a5:63:2c:6f:de:39:5c:be:21:ae:d6:1d:3e:db:f7:2d:94:4b:
17:49:35:4e:80:16:e6:23:2e:23:93:25:4b:97:21:33:b2:3f:
8c:8d:d0:4f:2c:36:03:9c:e3:5d:80:77:58:00:5f:42:06:67:
d6:ac:54:27:f3:eb:38:c0:e9:a1:e0:9b:fe:89:38:94:12:6d:
4c:8b:c4:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHN/76kqM0HRO6/1KA9cpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDllMjc4Yzc4NjIyNTRjODg3NTVlNDcxNzM5OGE1NTJh
NDkwNDAwHhcNMjYxMDA0MTQwMTEyWhcNMjYxMDA1MTQwMTEyWjAzMTEwLwYDVQQD
EyhmYmJkNzg5Y2ZhZmY0NmZjM2I5NDFmYzE1YTE5MzFhZTdkNGRjNThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFvInCzJmpys8lh/Nnmv0uxJiijq
c0A/aODyL5ZfQY8Q+B7ZbZKV9ccLiNtuplBalO1q7DQba2Hyrw1JEU4l+v9a8P3G
8b95EN5ekUYoPBidb61t550F9gZ85QQRTCA5tqaxGPQTGSbFbk7m3aj9pJO6w8yY
CBD9ksJt/K9qjAvHuuDYmGBqXEwqBEO2wjL02F7fWq2P1AVmBbtI2/w89q9yoDXa
whbj37kd0o2IGE2jj0JLI/F34mHXSopYIGjvxnV8B6jftSBlmnPQ5oA7Wv+/XNa9
sfbsEzUsCCSKMQYDlEG27H1Hqy5uQ2EnGyqUiTnltxVzePgJdhJ3Y9pJgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPu9eJz6/0b8O5QfwVoZMa59TcWNMB8GA1UdIwQY
MBaAFOEJ4njHhiJUyIdV5HFzmKVSpJBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQt
MmYwM2UzMmJkMjFhLzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQtMmYwM2UzMmJkMjFh
LzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0jkgl7s
Y+EwCih1YVXB6J+gbGGiEF9XGYP0sqw/lqxliLfCu33LHsSxKodwsPoXiN0ScxpB
0fgXTitex2iKz2+LWR/RVuah1M0ufc6AAWnVnarEJuuHXLOdIjWR0PzVTF4GlX22
tcMpblPpiVjSuTZFEtA2TGJbxQDiyYUtbqt+UY+cdWXxAtSaOq6gVOVcWI2lpoO6
eBpgYmAMMzdMiXE2KgCtf33C3rL4Af6VWnZMu3A7pWMsb945XL4hrtYdPtv3LZRL
F0k1ToAW5iMuI5MlS5chM7I/jI3QTyw2A5zjXYB3WABfQgZn1qxUJ/PrOMDpoeCb
/ok4lBJtTIvEaQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:09:00 2026 by rpki-client