Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
File: 4DcKtxTbCPR405PRKCdIkbeTKVI.mft (raw, json)
Hash identifier: Fik278kM1BPgHX4K/q9ClLSWvUNY/TzbUTd0Klb2l24=
Subject key identifier: 60:9A:E6:79:43:7F:BB:9E:40:47:96:90:06:12:50:77:90:22:C9:5E
Authority key identifier: E0:37:0A:B7:14:DB:08:F4:78:D3:93:D1:28:27:48:91:B7:93:29:52
Certificate issuer: /CN=e0370ab714db08f478d393d128274891b7932952
Certificate serial: 01A040852080BBF57450A663CF1C6AD5EAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
Manifest number: 01E3
Signing time: Thu 27 Aug 2026 00:01:01 +0000
Manifest this update: Thu 27 Aug 2026 00:01:01 +0000
Manifest next update: Fri 28 Aug 2026 00:01:01 +0000
Files and hashes: 1: 4DcKtxTbCPR405PRKCdIkbeTKVI.crl (hash: cxNfB0oBJ4wv9N8JPoqABlrBT8by4C34yYdnIyPHWbs=)
2: PF6_QJj8YRzBUWzRDIQ4t1IPmnA.roa (hash: h6piPoUmp38AjHoQiX6p9iBQOr+oUtxb1p4/tf2CUQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:85:20:80:bb:f5:74:50:a6:63:cf:1c:6a:d5:ea:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0370ab714db08f478d393d128274891b7932952
Validity
Not Before: Aug 27 00:01:01 2026 GMT
Not After : Aug 28 00:01:01 2026 GMT
Subject: CN=609ae679437fbb9e40479690061250779022c95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:18:eb:f3:0c:dd:fc:10:9e:74:51:ee:1e:
3f:10:7a:c4:23:f7:78:1b:90:af:db:c7:fa:81:76:
de:d7:ec:c7:46:0c:84:52:a9:e6:b3:ec:59:ad:c6:
f0:11:ef:b5:5c:cb:b6:8a:9a:cf:4c:97:4a:a2:ce:
2a:0a:84:34:d0:1b:d3:16:f3:a9:a6:86:2b:db:73:
a4:4d:3e:0a:5e:f6:31:b1:0e:13:d8:2f:3c:fe:4a:
a5:ac:0b:49:b6:bf:32:b2:f9:3d:c0:79:9d:73:5d:
02:61:76:de:5a:79:1e:0d:72:5b:8f:54:24:31:44:
4f:75:3e:8c:af:b7:56:7e:aa:56:3d:ba:79:3f:aa:
1b:48:56:eb:88:45:d9:61:92:a5:d7:e3:c0:fd:32:
2b:ad:43:ca:ca:af:d7:cd:9a:35:cf:da:bf:53:99:
d3:61:dc:d2:d7:fc:ec:80:2f:18:56:21:b0:25:6b:
30:97:d4:5f:a8:21:c6:c5:40:f5:b9:d4:66:f4:71:
e4:a1:14:d2:5c:58:e1:5b:fc:2b:79:dd:83:18:02:
4b:9d:c0:c2:3a:72:bb:b2:50:5f:1e:bd:08:79:80:
11:b5:86:73:0d:f2:13:4c:7d:b4:1c:fc:93:5d:5a:
15:62:61:f2:92:30:a7:a6:e1:6b:e4:db:9f:de:dd:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:E6:79:43:7F:BB:9E:40:47:96:90:06:12:50:77:90:22:C9:5E
X509v3 Authority Key Identifier:
keyid:E0:37:0A:B7:14:DB:08:F4:78:D3:93:D1:28:27:48:91:B7:93:29:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DcKtxTbCPR405PRKCdIkbeTKVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/441e9e-5efb-43f8-991a-ed6885ca5679/1/4DcKtxTbCPR405PRKCdIkbeTKVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:d6:86:04:15:58:24:d4:aa:3b:1c:45:29:38:26:9a:32:
a7:f4:b7:c7:be:99:43:8f:a1:a4:78:7b:50:15:a0:da:90:e4:
52:8e:0b:59:03:18:65:48:2a:a9:2c:46:45:6d:4c:82:cb:19:
ae:12:4d:42:91:f6:e5:96:d5:5b:15:62:3b:20:13:57:8f:5c:
68:92:14:9a:c3:e9:9c:16:51:ed:23:e6:63:55:22:5a:76:a9:
c0:e2:30:16:51:db:1e:a3:59:43:6e:db:86:02:b9:2e:2d:76:
92:ac:d9:49:06:52:cb:bd:d8:38:1e:e2:89:72:cf:2e:50:4e:
52:3a:c8:5a:a1:b9:e2:ed:b0:85:9a:2b:3e:41:9a:6c:53:a0:
dd:34:9f:2d:09:44:96:6d:5b:51:3a:c2:89:16:91:60:b1:f2:
e0:bd:21:2a:82:b6:48:5c:03:b5:ca:61:b0:f2:3b:7e:6d:3f:
35:de:c1:f1:fe:4f:e8:be:87:0c:24:2d:4b:29:c5:57:96:f7:
7f:78:91:99:6d:49:61:fa:7d:8e:cc:ed:51:8e:6f:c3:c3:60:
d4:5d:41:a1:74:fe:39:c2:6d:3d:c1:bb:7c:09:8c:5e:ad:8b:
6c:3d:6b:fd:0c:b3:db:21:c8:aa:cd:1f:77:32:65:b7:12:89:
3a:41:45:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAhSCAu/V0UKZjzxxq1er6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMzcwYWI3MTRkYjA4ZjQ3OGQzOTNkMTI4Mjc0ODkxYjc5
MzI5NTIwHhcNMjYwODI3MDAwMTAxWhcNMjYwODI4MDAwMTAxWjAzMTEwLwYDVQQD
Eyg2MDlhZTY3OTQzN2ZiYjllNDA0Nzk2OTAwNjEyNTA3NzkwMjJjOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz34Y6/MM3fwQnnRR7h4/EHrEI/d4
G5Cv28f6gXbe1+zHRgyEUqnms+xZrcbwEe+1XMu2iprPTJdKos4qCoQ00BvTFvOp
poYr23OkTT4KXvYxsQ4T2C88/kqlrAtJtr8ysvk9wHmdc10CYXbeWnkeDXJbj1Qk
MURPdT6Mr7dWfqpWPbp5P6obSFbriEXZYZKl1+PA/TIrrUPKyq/XzZo1z9q/U5nT
YdzS1/zsgC8YViGwJWswl9RfqCHGxUD1udRm9HHkoRTSXFjhW/wred2DGAJLncDC
OnK7slBfHr0IeYARtYZzDfITTH20HPyTXVoVYmHykjCnpuFr5Nuf3t2PNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCa5nlDf7ueQEeWkAYSUHeQIsleMB8GA1UdIwQY
MBaAFOA3CrcU2wj0eNOT0SgnSJG3kylSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNERjS3R4VGJDUFI0MDVQUktDZElrYmVUS1ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80NDFlOWUtNWVmYi00M2Y4LTk5MWEt
ZWQ2ODg1Y2E1Njc5LzEvNERjS3R4VGJDUFI0MDVQUktDZElrYmVUS1ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi80NDFlOWUtNWVmYi00M2Y4LTk5MWEtZWQ2ODg1Y2E1Njc5
LzEvNERjS3R4VGJDUFI0MDVQUktDZElrYmVUS1ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCnWhgQV
WCTUqjscRSk4Jpoyp/S3x76ZQ4+hpHh7UBWg2pDkUo4LWQMYZUgqqSxGRW1MgssZ
rhJNQpH25ZbVWxViOyATV49caJIUmsPpnBZR7SPmY1UiWnapwOIwFlHbHqNZQ27b
hgK5Li12kqzZSQZSy73YOB7iiXLPLlBOUjrIWqG54u2whZorPkGabFOg3TSfLQlE
lm1bUTrCiRaRYLHy4L0hKoK2SFwDtcphsPI7fm0/Nd7B8f5P6L6HDCQtSynFV5b3
f3iRmW1JYfp9jsztUY5vw8Ng1F1BoXT+OcJtPcG7fAmMXq2LbD1r/Qyz2yHIqs0f
dzJltxKJOkFFcQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:33 2026 by rpki-client