Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: qlmY8x94NmJ1IVlYYoEA12ho1r8f1MyjcUipysBPatY=
Subject key identifier: 1F:67:FB:9B:86:27:30:4D:89:99:53:F1:37:0F:AC:02:F5:39:8E:FB
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 01A145A90B4652B89E9B508BC390F39BD11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0C2D
Signing time: Fri 16 Oct 2026 17:01:08 +0000
Manifest this update: Fri 16 Oct 2026 17:01:08 +0000
Manifest next update: Sat 17 Oct 2026 17:01:08 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: 7+VyRGZEqb0nXiJWYUB8Fyh1cxpc5A41DrIT6Hhm7TE=)
2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:a9:0b:46:52:b8:9e:9b:50:8b:c3:90:f3:9b:d1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Oct 16 17:01:08 2026 GMT
Not After : Oct 17 17:01:08 2026 GMT
Subject: CN=1f67fb9b8627304d899953f1370fac02f5398efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:ce:3a:7b:c7:64:62:82:19:40:5e:1e:ae:
38:c3:54:87:18:c3:f8:01:94:b7:6d:12:08:7d:9c:
eb:f0:ce:c4:e2:63:30:1e:d2:b1:c1:9f:a6:33:11:
24:56:40:d8:ee:61:ba:20:bd:83:3f:41:de:4a:2d:
58:ca:da:ee:df:b8:fd:43:db:50:51:f2:45:e7:c5:
30:45:bf:a3:f3:30:3e:2e:ff:08:61:15:2b:31:fe:
98:7e:9d:67:67:bf:83:70:1a:bd:e1:b6:87:7a:70:
f0:9c:7c:9a:8f:c7:6c:12:25:9a:39:1f:44:86:61:
22:73:f7:1b:d6:b7:8d:d1:ff:6e:08:a6:a0:34:1a:
08:40:ba:a9:eb:eb:39:f0:7a:fb:84:f2:9a:72:95:
02:85:19:64:02:a9:ec:a1:ac:a2:e4:07:81:c1:b2:
e0:2c:f4:cb:7d:81:38:bb:50:5f:ff:c4:0c:07:12:
5d:73:d8:58:f3:57:b1:65:59:ec:89:72:91:9b:6b:
73:94:14:57:19:59:db:90:14:0a:30:86:ec:69:6e:
07:48:2d:2a:9f:ec:4a:80:68:00:8f:3f:5c:49:34:
8f:bf:70:de:19:8a:b9:8a:77:43:da:99:c1:1f:88:
50:1b:d5:6d:d3:18:7d:9c:0c:e6:e2:11:e4:9b:19:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:FB:9B:86:27:30:4D:89:99:53:F1:37:0F:AC:02:F5:39:8E:FB
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e0:9c:dc:c3:18:cc:3a:dc:76:6d:55:d3:9d:65:ad:2a:3c:
99:e2:6a:59:a8:3b:11:3f:df:ee:17:ae:c1:3e:6a:60:4e:40:
0a:6c:40:58:22:6c:05:61:23:fb:45:cd:a8:c5:cf:6c:06:56:
6f:db:12:e3:12:c3:eb:2e:53:d1:dc:3b:8d:3b:cc:47:e2:a0:
55:6c:53:32:fd:6e:22:b3:30:33:93:d6:b7:34:b8:50:9e:ae:
55:93:5a:68:53:17:20:ed:be:6a:eb:2d:0f:46:13:88:56:71:
43:92:eb:8a:80:45:d5:c8:c1:3e:61:39:c1:dc:46:f3:2b:e5:
3c:02:1d:4f:f7:f1:68:c9:49:20:f0:cf:09:d7:ec:1a:28:ec:
ee:34:07:90:21:ab:f1:d9:59:a5:e7:32:44:74:aa:9e:49:77:
f3:e3:da:7a:63:65:60:ea:92:d0:e0:e4:6c:d8:7d:68:ed:bc:
d1:5d:30:42:f0:62:f8:0b:58:bc:0a:ec:5b:b1:9f:3f:8e:98:
58:3b:bb:4e:76:e7:45:cb:8e:a9:05:56:c3:03:d2:1b:55:77:
bf:46:c3:40:ae:34:13:b1:51:5d:3b:62:07:21:e8:51:0a:67:
c3:53:a4:91:95:21:4d:e8:a5:0d:86:70:37:c9:75:b7:93:c1:
33:cc:d6:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFFqQtGUriem1CLw5Dzm9EeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3MTc3NjVlNGJjYzcxOTFiMjVkMWE0ZTY2ZDM4OGM5
YzUzZDkwHhcNMjYxMDE2MTcwMTA4WhcNMjYxMDE3MTcwMTA4WjAzMTEwLwYDVQQD
EygxZjY3ZmI5Yjg2MjczMDRkODk5OTUzZjEzNzBmYWMwMmY1Mzk4ZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypzOOnvHZGKCGUBeHq44w1SHGMP4
AZS3bRIIfZzr8M7E4mMwHtKxwZ+mMxEkVkDY7mG6IL2DP0HeSi1Yytru37j9Q9tQ
UfJF58UwRb+j8zA+Lv8IYRUrMf6Yfp1nZ7+DcBq94baHenDwnHyaj8dsEiWaOR9E
hmEic/cb1reN0f9uCKagNBoIQLqp6+s58Hr7hPKacpUChRlkAqnsoayi5AeBwbLg
LPTLfYE4u1Bf/8QMBxJdc9hY81exZVnsiXKRm2tzlBRXGVnbkBQKMIbsaW4HSC0q
n+xKgGgAjz9cSTSPv3DeGYq5indD2pnBH4hQG9Vt0xh9nAzm4hHkmxlTuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9n+5uGJzBNiZlT8TcPrAL1OY77MB8GA1UdIwQY
MBaAFOPncXdl5LzHGRsl0aTmbTiMnFPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQt
NTYzZDQ3YTdhYjYxLzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8zOTYwNGUtOTc0OC00YzdkLWFkNWQtNTYzZDQ3YTdhYjYx
LzEvNC1keGQyWGt2TWNaR3lYUnBPWnRPSXljVTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+Cc3MMY
zDrcdm1V051lrSo8meJqWag7ET/f7heuwT5qYE5ACmxAWCJsBWEj+0XNqMXPbAZW
b9sS4xLD6y5T0dw7jTvMR+KgVWxTMv1uIrMwM5PWtzS4UJ6uVZNaaFMXIO2+aust
D0YTiFZxQ5LrioBF1cjBPmE5wdxG8yvlPAIdT/fxaMlJIPDPCdfsGijs7jQHkCGr
8dlZpecyRHSqnkl38+PaemNlYOqS0ODkbNh9aO280V0wQvBi+AtYvArsW7GfP46Y
WDu7TnbnRcuOqQVWwwPSG1V3v0bDQK40E7FRXTtiByHoUQpnw1OkkZUhTeilDYZw
N8l1t5PBM8zWvQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 03:47:09 2026 by rpki-client