Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.mft
File: 4cJXoFTbh6kn9Zim-QddPYuwfqE.mft (raw, json)
Hash identifier: wYOBW4tR6tLKyXp9wuB32B43kN0I3cl+cJZL8NuwsWg=
Subject key identifier: 9D:B0:42:50:07:1A:5B:51:C8:7C:6B:B2:BC:31:F2:80:13:19:C9:89
Authority key identifier: E1:C2:57:A0:54:DB:87:A9:27:F5:98:A6:F9:07:5D:3D:8B:B0:7E:A1
Certificate issuer: /CN=e1c257a054db87a927f598a6f9075d3d8bb07ea1
Certificate serial: 01A0404E4C6F59CDF586D9335CBBA4857E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cJXoFTbh6kn9Zim-QddPYuwfqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:07 +0000
Manifest this update: Wed 26 Aug 2026 23:01:07 +0000
Manifest next update: Thu 27 Aug 2026 23:01:07 +0000
Files and hashes: 1: 4cJXoFTbh6kn9Zim-QddPYuwfqE.crl (hash: pm/y0dXgnQp9KEfhZl2rDcfvhS/kK2UWX0tfeHYzV9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cJXoFTbh6kn9Zim-QddPYuwfqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:4c:6f:59:cd:f5:86:d9:33:5c:bb:a4:85:7e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c257a054db87a927f598a6f9075d3d8bb07ea1
Validity
Not Before: Aug 26 23:01:07 2026 GMT
Not After : Aug 27 23:01:07 2026 GMT
Subject: CN=9db04250071a5b51c87c6bb2bc31f2801319c989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:08:18:f1:a2:19:51:3b:c8:02:6f:d0:63:27:
ed:2e:24:e8:59:58:4b:a1:a6:0b:03:3a:51:23:49:
c5:dc:30:12:4b:49:b6:1a:74:d8:0c:e3:7a:c7:da:
a2:27:db:78:a7:1f:c9:52:81:10:f6:ec:dd:fc:0a:
31:b4:ca:d1:37:3b:b8:a6:2a:94:06:f8:5f:0f:51:
de:9c:c5:b0:7c:02:95:53:ed:f5:51:ec:01:99:67:
a9:59:9e:46:e6:0d:3f:91:73:05:62:17:5d:99:82:
4d:c2:4a:84:7f:04:05:60:a8:c7:0c:2e:d6:85:8f:
5c:04:ec:18:b9:c8:10:c9:ae:66:7b:c3:c9:d7:93:
62:68:3c:11:31:11:aa:b3:ec:a3:86:22:06:bf:00:
33:96:4f:4a:a9:0a:cf:df:6a:a5:52:f7:ca:3d:43:
44:fc:0e:a7:80:b9:3f:13:ff:fa:c7:b3:bc:82:4a:
3c:65:32:32:c9:52:0b:95:07:20:2a:8b:a5:b5:ef:
f4:9b:59:99:9c:26:1d:c5:3b:c3:7d:1f:c3:1b:6d:
db:b0:35:59:78:75:82:c1:f6:35:df:b0:ba:2f:91:
cb:94:e5:d8:98:d8:61:77:f8:f2:24:5a:45:b5:45:
76:36:d4:0b:a8:29:3d:c5:cd:29:be:76:b6:92:44:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:42:50:07:1A:5B:51:C8:7C:6B:B2:BC:31:F2:80:13:19:C9:89
X509v3 Authority Key Identifier:
keyid:E1:C2:57:A0:54:DB:87:A9:27:F5:98:A6:F9:07:5D:3D:8B:B0:7E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cJXoFTbh6kn9Zim-QddPYuwfqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2c6c2b-54d6-431d-9c06-dde36574b178/1/4cJXoFTbh6kn9Zim-QddPYuwfqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3f:ec:f6:7b:53:59:ad:7c:f1:70:ee:95:8c:f1:04:ef:23:
3b:af:f8:09:bb:61:d6:7a:bc:da:ef:86:17:6c:0f:8a:6b:6c:
64:16:1e:62:26:fb:35:be:7c:75:21:e7:70:23:ee:b6:41:49:
4b:76:36:78:dc:d5:7c:56:37:26:e5:a4:32:a8:71:ec:e3:f3:
fb:24:31:75:66:1f:b6:95:9e:88:2d:bb:a0:af:68:c4:2b:f5:
88:c9:df:66:89:f4:41:55:4f:bb:3e:c8:a1:b5:92:e6:ed:b7:
07:60:19:08:88:35:a2:a4:ef:61:8e:32:8e:be:6a:61:b8:e2:
b1:98:c8:82:e7:1b:d3:e8:92:6e:60:90:13:7c:23:2a:ff:52:
e7:41:80:85:8e:96:06:bb:22:85:45:7c:89:18:a1:7b:a9:2b:
81:22:25:1d:4d:e2:8d:64:cd:22:7f:08:0b:5f:b8:fb:a2:de:
1e:20:47:aa:ee:25:90:ae:fd:1b:6f:1d:96:75:b0:bb:02:6c:
83:f8:17:98:a1:5a:10:8b:4a:c5:f1:71:4c:7b:76:5f:af:96:
53:4e:fb:d3:ca:f9:de:88:07:6b:29:04:55:f9:4e:33:66:09:
6c:99:d6:f5:0c:8e:0c:31:79:a0:b0:ad:a6:ef:62:d3:b3:b2:
df:06:3f:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATkxvWc31htkzXLukhX5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYzI1N2EwNTRkYjg3YTkyN2Y1OThhNmY5MDc1ZDNkOGJi
MDdlYTEwHhcNMjYwODI2MjMwMTA3WhcNMjYwODI3MjMwMTA3WjAzMTEwLwYDVQQD
Eyg5ZGIwNDI1MDA3MWE1YjUxYzg3YzZiYjJiYzMxZjI4MDEzMTljOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwgY8aIZUTvIAm/QYyftLiToWVhL
oaYLAzpRI0nF3DASS0m2GnTYDON6x9qiJ9t4px/JUoEQ9uzd/AoxtMrRNzu4piqU
BvhfD1HenMWwfAKVU+31UewBmWepWZ5G5g0/kXMFYhddmYJNwkqEfwQFYKjHDC7W
hY9cBOwYucgQya5me8PJ15NiaDwRMRGqs+yjhiIGvwAzlk9KqQrP32qlUvfKPUNE
/A6ngLk/E//6x7O8gko8ZTIyyVILlQcgKoulte/0m1mZnCYdxTvDfR/DG23bsDVZ
eHWCwfY137C6L5HLlOXYmNhhd/jyJFpFtUV2NtQLqCk9xc0pvna2kkRyLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2wQlAHGltRyHxrsrwx8oATGcmJMB8GA1UdIwQY
MBaAFOHCV6BU24epJ/WYpvkHXT2LsH6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGNKWG9GVGJoNmtuOVppbS1RZGRQWXV3ZnFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yYzZjMmItNTRkNi00MzFkLTljMDYt
ZGRlMzY1NzRiMTc4LzEvNGNKWG9GVGJoNmtuOVppbS1RZGRQWXV3ZnFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yYzZjMmItNTRkNi00MzFkLTljMDYtZGRlMzY1NzRiMTc4
LzEvNGNKWG9GVGJoNmtuOVppbS1RZGRQWXV3ZnFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmj/s9ntT
Wa188XDulYzxBO8jO6/4Cbth1nq82u+GF2wPimtsZBYeYib7Nb58dSHncCPutkFJ
S3Y2eNzVfFY3JuWkMqhx7OPz+yQxdWYftpWeiC27oK9oxCv1iMnfZon0QVVPuz7I
obWS5u23B2AZCIg1oqTvYY4yjr5qYbjisZjIgucb0+iSbmCQE3wjKv9S50GAhY6W
BrsihUV8iRihe6krgSIlHU3ijWTNIn8IC1+4+6LeHiBHqu4lkK79G28dlnWwuwJs
g/gXmKFaEItKxfFxTHt2X6+WU07708r53ogHaykEVflOM2YJbJnW9QyODDF5oLCt
pu9i07Oy3wY/XA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:46 2026 by rpki-client