Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: N3FbOCNO+WKXxnWrvYcjEZCBDqOhr1O0/660HWv5LAs=
Subject key identifier: 53:DA:6A:52:D7:E9:32:7F:C1:99:CA:21:53:77:60:5C:47:62:D6:5B
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 01A14015EB6E13C0AC4EDC434892FED4576A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 1464
Signing time: Thu 15 Oct 2026 15:02:20 +0000
Manifest this update: Thu 15 Oct 2026 15:02:20 +0000
Manifest next update: Fri 16 Oct 2026 15:02:20 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: J8vjQSUgbwxhxD50VmSreaHB8kRLmlr5OYHZqfcC69g=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:eb:6e:13:c0:ac:4e:dc:43:48:92:fe:d4:57:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Oct 15 15:02:20 2026 GMT
Not After : Oct 16 15:02:20 2026 GMT
Subject: CN=53da6a52d7e9327fc199ca215377605c4762d65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:67:d0:cf:b0:5c:55:bc:0f:51:e8:e5:fa:34:
12:9a:78:e7:13:84:56:60:f2:f6:6d:a2:f1:52:36:
32:b5:20:a7:78:31:b8:08:39:26:f4:0d:3c:b6:c7:
cb:48:22:2f:6d:2a:ff:7f:8f:35:e6:59:25:23:6b:
85:6d:73:3d:85:14:bf:ff:d7:c4:b4:77:8b:a6:41:
eb:c5:80:18:20:09:1d:c3:85:56:32:57:c3:47:78:
4a:44:dd:1e:39:eb:31:4d:d8:cb:e1:f6:22:52:ae:
42:15:ab:8e:90:d0:5b:43:36:0b:ab:c5:f5:7d:49:
6a:db:f3:ce:23:30:d9:f5:6d:c6:36:52:f6:6c:2d:
95:fc:8f:9a:b7:b0:ee:27:b3:3e:1d:ff:b3:87:c1:
7f:52:9e:b4:85:7b:f0:54:83:07:de:9e:7e:0d:c5:
91:75:16:6a:e8:32:c9:02:eb:6f:65:e7:02:f5:61:
11:2a:12:27:bd:36:25:88:48:e9:0d:44:f4:a4:76:
4f:f7:17:73:86:a3:2d:67:a4:c3:6b:e0:db:06:cd:
15:ee:bd:c2:d4:5e:c0:7f:9a:7b:e1:c7:9a:aa:75:
f1:09:76:d5:2f:49:c6:dd:a0:db:d3:8e:44:a3:f2:
67:f8:f9:a0:60:b3:7a:cc:ef:57:fc:72:6c:f9:5d:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DA:6A:52:D7:E9:32:7F:C1:99:CA:21:53:77:60:5C:47:62:D6:5B
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:45:92:c8:51:30:1d:b6:b2:62:1c:f0:de:51:e9:0e:d6:93:
ef:bd:2d:27:ff:22:21:e1:0d:d4:33:92:fc:e6:8d:06:4a:ac:
94:f4:5d:89:2e:b9:1e:d7:72:9c:72:1b:c6:f0:11:cb:de:4c:
ae:95:98:37:98:3e:e3:42:f2:e8:3f:e1:86:1c:2e:05:c8:d1:
c5:ab:51:6b:95:b6:72:aa:0e:60:56:af:8d:19:c9:6f:a9:51:
91:01:9c:1d:80:2f:6b:c0:3f:19:ac:c8:76:73:51:16:0d:60:
ae:9b:bf:fb:c1:eb:73:2c:16:68:23:4c:50:86:74:27:6b:3c:
16:3d:94:96:4e:14:25:d2:b6:57:97:16:9d:99:95:5a:87:5d:
7c:66:94:47:2a:78:ec:eb:c0:fe:66:f6:fe:03:7e:40:ed:ea:
2c:97:85:64:6e:df:4b:3c:5d:c2:78:d3:b4:fb:c7:7c:85:c7:
d8:c4:2e:8a:df:d1:d0:dd:fd:e3:8b:49:a3:2b:ba:3c:6e:a9:
e8:3a:a7:c8:e7:c4:8c:c4:15:e1:64:d0:a2:9a:1a:a7:f6:62:
5f:d3:42:f2:53:16:24:83:9a:e5:ea:0c:67:c5:ff:49:11:1e:
3b:9c:35:e1:a9:cc:bd:4e:1c:0b:91:88:13:54:57:c2:ba:84:
80:cc:f3:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFetuE8CsTtxDSJL+1FdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZmY2MjVmNGExOGQwNGQ1OTBhNWI5ZDczYjI1NTFhNDM1
YjcxNzIwHhcNMjYxMDE1MTUwMjIwWhcNMjYxMDE2MTUwMjIwWjAzMTEwLwYDVQQD
Eyg1M2RhNmE1MmQ3ZTkzMjdmYzE5OWNhMjE1Mzc3NjA1YzQ3NjJkNjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92fQz7BcVbwPUejl+jQSmnjnE4RW
YPL2baLxUjYytSCneDG4CDkm9A08tsfLSCIvbSr/f4815lklI2uFbXM9hRS//9fE
tHeLpkHrxYAYIAkdw4VWMlfDR3hKRN0eOesxTdjL4fYiUq5CFauOkNBbQzYLq8X1
fUlq2/POIzDZ9W3GNlL2bC2V/I+at7DuJ7M+Hf+zh8F/Up60hXvwVIMH3p5+DcWR
dRZq6DLJAutvZecC9WERKhInvTYliEjpDUT0pHZP9xdzhqMtZ6TDa+DbBs0V7r3C
1F7Af5p74ceaqnXxCXbVL0nG3aDb045Eo/Jn+PmgYLN6zO9X/HJs+V3wmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPaalLX6TJ/wZnKIVN3YFxHYtZbMB8GA1UdIwQY
MBaAFOH/Yl9KGNBNWQpbnXOyVRpDW3FyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGIt
NGU1ODYxMTg3YzRmLzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZjkwYTUtYzg3OC00ZGQ0LWIyZGItNGU1ODYxMTg3YzRm
LzEvNGY5aVgwb1kwRTFaQ2x1ZGM3SlZHa05iY1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkWSyFEw
HbayYhzw3lHpDtaT770tJ/8iIeEN1DOS/OaNBkqslPRdiS65HtdynHIbxvARy95M
rpWYN5g+40Ly6D/hhhwuBcjRxatRa5W2cqoOYFavjRnJb6lRkQGcHYAva8A/GazI
dnNRFg1grpu/+8HrcywWaCNMUIZ0J2s8Fj2Ulk4UJdK2V5cWnZmVWoddfGaURyp4
7OvA/mb2/gN+QO3qLJeFZG7fSzxdwnjTtPvHfIXH2MQuit/R0N3944tJoyu6PG6p
6DqnyOfEjMQV4WTQopoap/ZiX9NC8lMWJIOa5eoMZ8X/SREeO5w14anMvU4cC5GI
E1RXwrqEgMzz+Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:38 2026 by rpki-client