Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: 9cNSMp4HtlwhzMH8YCaD3cpUPK66jsDaUpnyJmbA2D8=
Subject key identifier: 83:B2:3A:36:4B:02:FC:EB:A7:D1:44:51:C4:50:8B:BB:94:4E:A5:D8
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 01A13DB8A1A228CF781328B1A126276390E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 0B7D
Signing time: Thu 15 Oct 2026 04:01:12 +0000
Manifest this update: Thu 15 Oct 2026 04:01:12 +0000
Manifest next update: Fri 16 Oct 2026 04:01:12 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: vtafxOCDnWzzkeamAwCPIshONzaREebXWbgF91Td9t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:a1:a2:28:cf:78:13:28:b1:a1:26:27:63:90:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: Oct 15 04:01:12 2026 GMT
Not After : Oct 16 04:01:12 2026 GMT
Subject: CN=83b23a364b02fceba7d14451c4508bbb944ea5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:5c:7c:0d:12:8c:dc:62:79:4b:2c:3c:4f:
13:9d:67:01:5a:d5:57:ab:5b:2d:95:b9:31:8c:62:
35:a7:92:26:7c:35:03:df:cc:c7:37:73:a7:78:62:
c2:63:5a:23:19:09:bd:96:08:07:0c:1a:f4:53:a6:
32:27:f1:9b:f7:5e:10:82:ae:60:bb:01:0e:c7:4a:
be:17:07:13:3f:8f:2d:e9:9e:20:e7:12:77:57:39:
e6:07:d1:bc:4a:a2:aa:27:34:ad:aa:1e:b9:58:73:
9a:9b:67:5a:45:ab:05:a0:15:4a:96:6f:1f:82:b9:
e3:84:2d:f7:66:9c:78:1d:be:c1:a2:32:a3:71:f5:
9f:a1:04:e0:63:5a:21:58:55:34:fb:0e:7e:03:4e:
ab:bc:32:16:51:fd:57:8c:54:10:e8:32:33:02:49:
f7:8b:84:ab:df:fd:7e:20:e5:5b:d2:e8:61:a2:c0:
22:af:28:e5:88:13:51:d9:10:46:17:b2:8d:61:a1:
c2:f7:e9:63:75:88:d8:7b:ad:a2:a8:ac:27:ac:3b:
8d:eb:ce:4c:4c:00:4e:38:6a:fd:38:9d:dc:00:cd:
4a:71:7b:e1:1d:d1:a9:39:db:54:69:d7:a2:dd:3c:
b1:b2:00:6f:26:81:23:15:f6:a8:da:72:bb:7f:fb:
bb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B2:3A:36:4B:02:FC:EB:A7:D1:44:51:C4:50:8B:BB:94:4E:A5:D8
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:43:a8:31:78:d1:ed:d9:7e:64:53:b1:58:09:23:72:a0:06:
b4:9f:1d:3e:1c:d1:49:2e:aa:eb:19:09:0b:39:a0:9a:ab:5a:
00:af:83:42:55:8d:09:3b:b1:5d:b9:b4:c1:4f:c7:38:45:46:
10:a0:b6:46:52:54:57:96:23:16:8b:2f:9e:eb:ae:7d:b4:74:
fa:45:8b:8a:1f:66:ba:11:ae:6f:65:60:7f:c7:ea:27:1f:43:
0e:cf:45:49:b5:0c:41:cb:31:e9:28:9f:4a:81:f2:ab:9d:46:
d5:97:7a:9f:a7:4a:5d:eb:0f:a7:24:dc:13:14:3c:40:88:c4:
b5:bf:ae:77:df:5c:a0:0f:c0:48:7e:5f:cb:54:e9:0d:01:d9:
6f:53:2f:16:83:63:69:d8:ac:11:5c:b3:1a:90:be:5b:e5:66:
1e:54:80:f5:b0:a4:78:9d:9d:50:47:ef:d0:89:bb:8f:c6:52:
9c:3c:37:d9:79:9c:39:96:f2:72:ca:27:54:42:1d:ce:30:b5:
cf:91:8c:d9:75:0f:3b:6f:d6:b5:07:2f:30:34:13:51:83:fc:
b9:eb:54:a9:25:72:7b:b8:c8:7c:12:53:fb:83:13:00:26:44:
fb:85:ce:57:d3:57:be:b4:38:7d:85:45:24:75:ca:13:29:cb:
b1:c1:c5:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uKGiKM94EyixoSYnY5DgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDcxYzUzNWFhN2EwYWNlOTNmYWRhYmRiNjU4M2Y4ODRh
NmM2MjYwHhcNMjYxMDE1MDQwMTEyWhcNMjYxMDE2MDQwMTEyWjAzMTEwLwYDVQQD
Eyg4M2IyM2EzNjRiMDJmY2ViYTdkMTQ0NTFjNDUwOGJiYjk0NGVhNWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2lcfA0SjNxieUssPE8TnWcBWtVX
q1stlbkxjGI1p5ImfDUD38zHN3OneGLCY1ojGQm9lggHDBr0U6YyJ/Gb914Qgq5g
uwEOx0q+FwcTP48t6Z4g5xJ3VznmB9G8SqKqJzStqh65WHOam2daRasFoBVKlm8f
grnjhC33Zpx4Hb7BojKjcfWfoQTgY1ohWFU0+w5+A06rvDIWUf1XjFQQ6DIzAkn3
i4Sr3/1+IOVb0uhhosAiryjliBNR2RBGF7KNYaHC9+ljdYjYe62iqKwnrDuN685M
TABOOGr9OJ3cAM1KcXvhHdGpOdtUadei3TyxsgBvJoEjFfao2nK7f/u75wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOyOjZLAvzrp9FEUcRQi7uUTqXYMB8GA1UdIwQY
MBaAFOLXHFNap6Cs6T+tq9tlg/iEpsYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRjY1UxcW5vS3pwUDYycjIyV0QtSVNteGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yYzcwOGItYjZlMi00ZGVmLWEyZDkt
YjMxMDExMTM3YTU3LzEvNHRjY1UxcW5vS3pwUDYycjIyV0QtSVNteGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yYzcwOGItYjZlMi00ZGVmLWEyZDktYjMxMDExMTM3YTU3
LzEvNHRjY1UxcW5vS3pwUDYycjIyV0QtSVNteGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUOoMXjR
7dl+ZFOxWAkjcqAGtJ8dPhzRSS6q6xkJCzmgmqtaAK+DQlWNCTuxXbm0wU/HOEVG
EKC2RlJUV5YjFosvnuuufbR0+kWLih9muhGub2Vgf8fqJx9DDs9FSbUMQcsx6Sif
SoHyq51G1Zd6n6dKXesPpyTcExQ8QIjEtb+ud99coA/ASH5fy1TpDQHZb1MvFoNj
adisEVyzGpC+W+VmHlSA9bCkeJ2dUEfv0Im7j8ZSnDw32XmcOZbycsonVEIdzjC1
z5GM2XUPO2/WtQcvMDQTUYP8uetUqSVye7jIfBJT+4MTACZE+4XOV9NXvrQ4fYVF
JHXKEynLscHFRg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:07 2026 by rpki-client