Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: 22udloOqXtpnZfY4/UWz65HYLBV1xnIOUZIQYLT02FI=
Subject key identifier: 51:2C:5A:FA:33:3D:77:BA:03:82:8D:42:F8:62:36:7A:76:E0:26:29
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 01A11AF5791A068FAB713044EFC1A781DD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0FEA
Signing time: Thu 08 Oct 2026 10:00:57 +0000
Manifest this update: Thu 08 Oct 2026 10:00:57 +0000
Manifest next update: Fri 09 Oct 2026 10:00:57 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: 1P7GKMb+ndgVkLHHyQGUKlqUmU2p4n3q5wkFkoQanOM=)
2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:79:1a:06:8f:ab:71:30:44:ef:c1:a7:81:dd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Oct 8 10:00:57 2026 GMT
Not After : Oct 9 10:00:57 2026 GMT
Subject: CN=512c5afa333d77ba03828d42f862367a76e02629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:8e:ad:ff:a9:e8:c6:ef:8a:69:5c:cc:ef:
ed:ff:1f:41:a8:ce:e9:7f:e3:5b:b6:3a:51:b2:b7:
b6:42:41:0a:df:4b:2f:37:91:54:c2:16:99:a4:78:
2c:26:b4:67:84:b6:70:d6:74:43:d0:8b:27:2f:6e:
50:84:6b:36:43:f7:20:10:9f:fd:cd:42:78:d9:d9:
76:3d:6e:b1:18:8a:79:44:6c:90:1d:b7:13:70:7d:
b5:b6:35:3b:29:46:83:73:8c:6f:f5:a9:35:b5:ab:
59:00:e4:4c:c8:a9:68:a7:77:2a:25:01:3d:59:5a:
85:64:e5:de:7c:32:81:9a:99:da:e9:cb:7d:60:ed:
ed:12:7d:24:48:f2:75:6f:a9:0b:32:33:ce:d4:6c:
77:31:ae:52:48:0a:64:53:f8:64:31:83:69:3f:d0:
54:8e:c7:6f:79:fa:92:be:5a:5e:48:9e:a0:b8:cc:
bf:ff:ef:fd:6e:c3:67:6c:b0:fc:30:51:91:8f:db:
95:c0:5f:34:59:36:9e:ff:45:1f:19:6d:05:4c:d0:
32:79:bb:24:ed:cc:d2:a0:60:de:e5:fd:ca:17:72:
25:62:e6:a7:9e:fa:ea:3f:2c:ce:66:34:9b:a3:65:
7e:bb:1d:b1:76:fc:2f:9e:f7:66:88:a9:f7:33:6d:
d1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2C:5A:FA:33:3D:77:BA:03:82:8D:42:F8:62:36:7A:76:E0:26:29
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cc:d6:98:b0:9f:84:5c:62:7a:38:d7:41:90:cf:46:90:d7:
75:c8:6c:ac:17:66:e1:d8:a3:68:82:a1:1d:6c:3c:ce:73:e8:
a2:71:de:77:fe:e2:3b:97:a5:6d:93:26:a0:03:9d:03:89:b3:
fb:f5:8d:12:81:90:55:a6:68:11:87:0c:21:5c:56:1d:00:53:
96:d6:b5:89:70:32:60:ad:74:50:e6:99:63:e6:15:1a:91:24:
ac:05:b3:28:a4:33:b6:55:61:a0:12:df:5d:c0:c6:48:db:e1:
3e:41:c0:d0:cf:80:bd:69:55:f8:d3:d4:c5:95:08:37:1c:70:
01:c6:52:8d:57:01:8a:9b:85:f5:5e:c2:67:ed:ef:d1:b7:98:
f4:9b:b4:4f:4d:9b:e3:04:95:61:0b:80:8c:70:6a:22:76:3b:
1c:13:71:b2:6a:30:ff:eb:89:48:70:cb:ee:40:1e:01:48:34:
52:34:50:7a:ca:f3:ac:98:b4:95:94:a6:f3:96:3c:f5:e1:b5:
bf:7c:c8:cf:2e:ab:c7:97:f3:e3:5b:91:53:47:4b:1f:8b:23:
f4:7e:a5:31:d4:b6:5d:73:5a:5d:b8:92:5f:48:49:3f:b9:d6:
cb:ee:b5:d2:59:84:a6:0e:36:c3:e0:7b:51:d3:f7:a2:74:f4:
06:24:5d:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEa9XkaBo+rcTBE78Gngd0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1
NjVlOWQwHhcNMjYxMDA4MTAwMDU3WhcNMjYxMDA5MTAwMDU3WjAzMTEwLwYDVQQD
Eyg1MTJjNWFmYTMzM2Q3N2JhMDM4MjhkNDJmODYyMzY3YTc2ZTAyNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kKOrf+p6MbvimlczO/t/x9BqM7p
f+NbtjpRsre2QkEK30svN5FUwhaZpHgsJrRnhLZw1nRD0IsnL25QhGs2Q/cgEJ/9
zUJ42dl2PW6xGIp5RGyQHbcTcH21tjU7KUaDc4xv9ak1tatZAORMyKlop3cqJQE9
WVqFZOXefDKBmpna6ct9YO3tEn0kSPJ1b6kLMjPO1Gx3Ma5SSApkU/hkMYNpP9BU
jsdvefqSvlpeSJ6guMy//+/9bsNnbLD8MFGRj9uVwF80WTae/0UfGW0FTNAyebsk
7czSoGDe5f3KF3IlYuannvrqPyzOZjSbo2V+ux2xdvwvnvdmiKn3M23RRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEsWvozPXe6A4KNQvhiNnp24CYpMB8GA1UdIwQY
MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt
MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl
LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcczWmLCf
hFxiejjXQZDPRpDXdchsrBdm4dijaIKhHWw8znPoonHed/7iO5elbZMmoAOdA4mz
+/WNEoGQVaZoEYcMIVxWHQBTlta1iXAyYK10UOaZY+YVGpEkrAWzKKQztlVhoBLf
XcDGSNvhPkHA0M+AvWlV+NPUxZUINxxwAcZSjVcBipuF9V7CZ+3v0beY9Ju0T02b
4wSVYQuAjHBqInY7HBNxsmow/+uJSHDL7kAeAUg0UjRQesrzrJi0lZSm85Y89eG1
v3zIzy6rx5fz41uRU0dLH4sj9H6lMdS2XXNaXbiSX0hJP7nWy+610lmEpg42w+B7
UdP3onT0BiRdew==
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:03:12 2026 by rpki-client