Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
File: 4Yup6gmzdhhN50OUcr0G2LHRfQs.mft (raw, json)
Hash identifier: UoBsxoF16rGbk1fIT4wnooOkyT48t+dysy52Nh21Bw4=
Subject key identifier: 6B:25:3D:01:09:66:B6:14:1F:ED:F4:49:8E:90:D4:FF:2F:17:0B:77
Authority key identifier: E1:8B:A9:EA:09:B3:76:18:4D:E7:43:94:72:BD:06:D8:B1:D1:7D:0B
Certificate issuer: /CN=e18ba9ea09b376184de7439472bd06d8b1d17d0b
Certificate serial: 01A040179F0757C525F79C2A540389FCA9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
Manifest number: 01AE
Signing time: Wed 26 Aug 2026 22:01:24 +0000
Manifest this update: Wed 26 Aug 2026 22:01:24 +0000
Manifest next update: Thu 27 Aug 2026 22:01:24 +0000
Files and hashes: 1: 4Yup6gmzdhhN50OUcr0G2LHRfQs.crl (hash: rG8EGm9K8ysWiHdp//HxpLY7ExICj3eCFjzga4YFWVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:9f:07:57:c5:25:f7:9c:2a:54:03:89:fc:a9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18ba9ea09b376184de7439472bd06d8b1d17d0b
Validity
Not Before: Aug 26 22:01:24 2026 GMT
Not After : Aug 27 22:01:24 2026 GMT
Subject: CN=6b253d010966b6141fedf4498e90d4ff2f170b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:c1:fe:9f:b3:ef:3a:ac:30:49:6e:8d:24:
2c:64:f1:c3:29:30:ee:b9:9b:09:5e:0b:e0:97:1c:
43:88:6e:51:dd:79:42:f4:13:9e:96:3d:d4:26:49:
60:6f:88:25:72:ba:af:28:fc:78:ae:53:b6:b5:8f:
6f:6e:50:0d:7f:b6:53:c9:5f:0d:65:b7:83:b9:e2:
88:ed:83:d0:e7:73:08:be:12:5d:7e:6f:9f:20:61:
1c:c8:88:d8:b8:9f:04:c9:3c:a4:01:02:65:a7:a7:
0e:c9:a6:1e:fa:01:c3:3b:ca:9d:15:a8:9e:b0:08:
1c:7f:82:bd:42:37:ed:32:2b:f6:88:2d:68:89:de:
83:86:aa:6b:67:aa:2c:be:0c:b0:21:42:e3:fa:59:
8c:ff:33:eb:61:f8:2f:76:05:29:09:81:8c:38:a8:
cd:0b:92:36:b1:ec:4c:4c:e1:c1:f0:29:60:2d:eb:
d9:c3:80:53:ac:b4:f1:11:66:22:aa:e9:be:c5:58:
24:41:7f:55:ae:98:95:7c:a3:15:ac:e8:69:11:5b:
7e:46:6d:dd:67:41:e5:c7:f7:3b:9f:68:f7:f0:00:
1e:9e:94:aa:de:08:6c:8a:3e:c1:56:6d:24:ba:3d:
c9:bd:1b:95:a2:38:fe:e1:f4:35:1e:ad:52:9b:ac:
89:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:25:3D:01:09:66:B6:14:1F:ED:F4:49:8E:90:D4:FF:2F:17:0B:77
X509v3 Authority Key Identifier:
keyid:E1:8B:A9:EA:09:B3:76:18:4D:E7:43:94:72:BD:06:D8:B1:D1:7D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d4:77:b7:26:27:5e:81:0f:14:b8:f2:3e:00:60:9c:6f:10:
36:c9:d2:5d:de:94:c8:9f:39:ed:5e:0b:7d:5f:54:27:42:64:
26:a1:23:dd:78:44:03:df:45:88:db:ba:43:00:82:7b:50:f7:
17:e6:09:40:a2:14:aa:e0:1f:50:bf:78:0d:9a:25:51:77:89:
08:24:6b:ab:55:ef:ad:aa:4c:35:b3:31:e3:13:dd:ca:56:a7:
86:e4:7b:1e:9e:19:9d:f7:d7:fc:96:8a:f0:2e:4d:a5:f9:25:
1e:9e:bd:d1:d2:c4:04:fd:72:ea:0c:48:c9:8a:d0:a0:bf:bd:
90:fe:57:0d:96:be:5f:ab:3c:47:41:c0:38:29:05:be:a7:08:
ba:32:9e:51:8b:8e:52:9f:0d:04:5b:d4:1f:a7:98:03:be:d9:
52:89:24:55:8e:9a:e2:4c:df:ac:f0:0f:09:f6:a9:fc:a5:f8:
36:66:c2:67:1f:b6:74:27:01:7a:06:54:cc:55:55:e4:a0:a4:
1f:93:63:4c:ef:b4:d2:78:4e:de:4e:84:7f:33:53:df:2b:8a:
74:71:05:b0:fa:ef:2c:c0:31:2f:54:00:1c:28:18:44:fd:60:
93:44:c6:cc:e9:30:9e:6f:6b:b8:69:78:d2:60:4a:9f:2d:78:
27:d1:25:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAF58HV8Ul95wqVAOJ/KngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOGJhOWVhMDliMzc2MTg0ZGU3NDM5NDcyYmQwNmQ4YjFk
MTdkMGIwHhcNMjYwODI2MjIwMTI0WhcNMjYwODI3MjIwMTI0WjAzMTEwLwYDVQQD
Eyg2YjI1M2QwMTA5NjZiNjE0MWZlZGY0NDk4ZTkwZDRmZjJmMTcwYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wvB/p+z7zqsMElujSQsZPHDKTDu
uZsJXgvglxxDiG5R3XlC9BOelj3UJklgb4glcrqvKPx4rlO2tY9vblANf7ZTyV8N
ZbeDueKI7YPQ53MIvhJdfm+fIGEcyIjYuJ8EyTykAQJlp6cOyaYe+gHDO8qdFaie
sAgcf4K9QjftMiv2iC1oid6DhqprZ6osvgywIULj+lmM/zPrYfgvdgUpCYGMOKjN
C5I2sexMTOHB8ClgLevZw4BTrLTxEWYiqum+xVgkQX9VrpiVfKMVrOhpEVt+Rm3d
Z0Hlx/c7n2j38AAenpSq3ghsij7BVm0kuj3JvRuVojj+4fQ1Hq1Sm6yJqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGslPQEJZrYUH+30SY6Q1P8vFwt3MB8GA1UdIwQY
MBaAFOGLqeoJs3YYTedDlHK9Btix0X0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFl1cDZnbXpkaGhONTBPVWNyMEcyTEhSZlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85YWU1NGUtMTU1OS00NGM0LWE4ZjYt
YTYwN2U3MjJkNDkwLzEvNFl1cDZnbXpkaGhONTBPVWNyMEcyTEhSZlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85YWU1NGUtMTU1OS00NGM0LWE4ZjYtYTYwN2U3MjJkNDkw
LzEvNFl1cDZnbXpkaGhONTBPVWNyMEcyTEhSZlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9R3tyYn
XoEPFLjyPgBgnG8QNsnSXd6UyJ857V4LfV9UJ0JkJqEj3XhEA99FiNu6QwCCe1D3
F+YJQKIUquAfUL94DZolUXeJCCRrq1XvrapMNbMx4xPdylanhuR7Hp4ZnffX/JaK
8C5NpfklHp690dLEBP1y6gxIyYrQoL+9kP5XDZa+X6s8R0HAOCkFvqcIujKeUYuO
Up8NBFvUH6eYA77ZUokkVY6a4kzfrPAPCfap/KX4NmbCZx+2dCcBegZUzFVV5KCk
H5NjTO+00nhO3k6EfzNT3yuKdHEFsPrvLMAxL1QAHCgYRP1gk0TGzOkwnm9ruGl4
0mBKny14J9ElQw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:30 2026 by rpki-client