Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
File: RDO2ork3CiSzs5vwMBiRnDY1lYw.mft (raw, json)
Hash identifier: TL6l6nmqcSEQlAwJ7BDUt/C124hioCnXS7DgUa29/8w=
Subject key identifier: E9:4B:2D:E2:51:B6:EA:60:41:35:89:6C:E0:B8:41:CD:C0:32:97:73
Authority key identifier: 44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
Certificate issuer: /CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Certificate serial: 01A08A8CA333D03C95319D3AF6C098046B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:07 +0000
Manifest this update: Thu 10 Sep 2026 09:01:07 +0000
Manifest next update: Fri 11 Sep 2026 09:01:07 +0000
Files and hashes: 1: RDO2ork3CiSzs5vwMBiRnDY1lYw.crl (hash: TBMLCNW0fWTLP/D9NS05ytbXgUsd3SNxnFCcktuCWjo=)
2: gG-xH4Wm1_ftJKGC0tQXiROr0_Y.roa (hash: oFf67BglbiSgcsuuPtbPySF0HlPBZgLM4o8ZIMj+qf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:a3:33:d0:3c:95:31:9d:3a:f6:c0:98:04:6b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433b6a2b9370a24b3b39bf03018919c3635958c
Validity
Not Before: Sep 10 09:01:07 2026 GMT
Not After : Sep 11 09:01:07 2026 GMT
Subject: CN=e94b2de251b6ea604135896ce0b841cdc0329773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:58:32:0b:ad:b7:e4:80:b6:d6:0a:75:bb:
a6:60:01:c1:3b:a9:8d:51:17:89:a9:79:a9:81:ea:
d2:a0:e0:05:66:e9:4e:d7:0c:cb:3c:ff:93:57:4f:
56:28:ee:a0:24:4b:d8:a6:db:c3:52:d3:a0:40:42:
c8:6e:cb:cd:9d:f0:f9:08:c3:07:39:85:e6:76:1a:
6e:52:05:3c:87:e5:86:43:2a:04:05:aa:d8:b2:35:
13:c1:cd:ad:68:fe:4f:ba:3b:96:71:20:6b:4d:30:
fa:f3:d9:fa:3c:89:f8:2a:ba:fe:ef:0f:7c:90:1f:
92:0b:14:5e:f9:2e:7e:98:58:bb:b1:92:66:cd:11:
e0:c1:aa:8e:c1:0f:83:e6:5b:4c:71:63:ca:15:ea:
9b:b1:b4:1b:fd:af:78:22:18:61:4a:b7:b8:d2:16:
3b:6b:08:70:a2:50:b1:b3:c0:4c:b5:55:3d:c1:97:
ea:65:b7:33:c6:a4:3d:af:1d:fe:4a:04:25:33:f5:
c9:0e:5e:af:ca:4d:ac:10:bf:45:e1:95:de:51:dc:
d6:b2:42:41:cb:45:7b:cd:be:29:74:89:27:13:33:
fe:9f:e9:fc:bb:33:b5:bd:23:68:c9:56:1e:a8:d9:
7f:f8:2d:bf:f3:12:34:09:f3:61:a8:c4:86:4d:a7:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4B:2D:E2:51:B6:EA:60:41:35:89:6C:E0:B8:41:CD:C0:32:97:73
X509v3 Authority Key Identifier:
keyid:44:33:B6:A2:B9:37:0A:24:B3:B3:9B:F0:30:18:91:9C:36:35:95:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDO2ork3CiSzs5vwMBiRnDY1lYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/RDO2ork3CiSzs5vwMBiRnDY1lYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:04:65:26:80:1e:2f:71:81:81:a0:e9:49:9c:2b:c9:30:b1:
c6:70:0d:90:64:8c:61:da:4e:96:91:c8:ab:1d:f2:78:31:95:
99:4e:d6:bd:43:26:50:d1:43:35:90:7d:a7:66:b9:d4:d8:09:
58:fe:b1:37:70:f6:72:6c:b9:c4:d1:e4:b2:16:aa:d9:1a:0e:
14:79:35:24:1b:2e:9f:db:70:b2:71:e0:b7:b5:01:20:83:c9:
be:02:44:e4:ad:47:4c:90:73:d0:e3:6a:6a:27:89:e3:95:12:
62:3c:fc:f4:9e:10:42:5a:f0:c2:95:ff:0f:30:84:09:97:38:
ff:52:a6:5e:94:a3:ea:25:ab:60:15:ac:37:34:48:8b:4e:31:
fe:25:4c:d1:fc:9e:41:08:8b:05:79:dc:ea:ea:1d:d8:18:2f:
7a:4a:37:d1:1e:4f:fa:f5:4d:77:fe:5b:57:d2:f0:d5:50:75:
13:12:9f:81:01:70:7d:f1:79:4d:92:42:76:35:b6:c3:55:3b:
7e:ea:78:36:a1:36:65:06:8c:c6:22:5e:d5:c6:5e:ef:b4:79:
bf:01:fd:aa:ee:5e:b4:bd:41:1b:48:4f:85:a0:36:68:18:57:
e6:bb:45:f6:6f:cc:30:0f:67:fd:63:c2:6c:d8:3f:33:73:4f:
f2:f7:03:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjKMz0DyVMZ069sCYBGs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzNiNmEyYjkzNzBhMjRiM2IzOWJmMDMwMTg5MTljMzYz
NTk1OGMwHhcNMjYwOTEwMDkwMTA3WhcNMjYwOTExMDkwMTA3WjAzMTEwLwYDVQQD
EyhlOTRiMmRlMjUxYjZlYTYwNDEzNTg5NmNlMGI4NDFjZGMwMzI5NzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiVYMgutt+SAttYKdbumYAHBO6mN
UReJqXmpgerSoOAFZulO1wzLPP+TV09WKO6gJEvYptvDUtOgQELIbsvNnfD5CMMH
OYXmdhpuUgU8h+WGQyoEBarYsjUTwc2taP5PujuWcSBrTTD689n6PIn4Krr+7w98
kB+SCxRe+S5+mFi7sZJmzRHgwaqOwQ+D5ltMcWPKFeqbsbQb/a94IhhhSre40hY7
awhwolCxs8BMtVU9wZfqZbczxqQ9rx3+SgQlM/XJDl6vyk2sEL9F4ZXeUdzWskJB
y0V7zb4pdIknEzP+n+n8uzO1vSNoyVYeqNl/+C2/8xI0CfNhqMSGTaf5AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlLLeJRtupgQTWJbOC4Qc3AMpdzMB8GA1UdIwQY
MBaAFEQztqK5Nwoks7Ob8DAYkZw2NZWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRPMm9yazNDaVN6czV2d01CaVJuRFkxbFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt
ZTYxNWY1NmY3OGIxLzEvUkRPMm9yazNDaVN6czV2d01CaVJuRFkxbFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx
LzEvUkRPMm9yazNDaVN6czV2d01CaVJuRFkxbFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgRlJoAe
L3GBgaDpSZwryTCxxnANkGSMYdpOlpHIqx3yeDGVmU7WvUMmUNFDNZB9p2a51NgJ
WP6xN3D2cmy5xNHkshaq2RoOFHk1JBsun9twsnHgt7UBIIPJvgJE5K1HTJBz0ONq
aieJ45USYjz89J4QQlrwwpX/DzCECZc4/1KmXpSj6iWrYBWsNzRIi04x/iVM0fye
QQiLBXnc6uod2Bgveko30R5P+vVNd/5bV9Lw1VB1ExKfgQFwffF5TZJCdjW2w1U7
fup4NqE2ZQaMxiJe1cZe77R5vwH9qu5etL1BG0hPhaA2aBhX5rtF9m/MMA9n/WPC
bNg/M3NP8vcDzQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:28:53 2026 by rpki-client