Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: GwcGro18ARhyRLJB7/vfGKHrTX97Lzs39gkmPQboF0c=
Subject key identifier: 88:A3:C4:B4:06:2F:4D:74:2B:78:7C:81:85:6A:2A:53:BB:90:40:B2
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 01A0010175021585159CDAE5E31E03FBF0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 16:01:07 +0000
Manifest this update: Fri 14 Aug 2026 16:01:07 +0000
Manifest next update: Sat 15 Aug 2026 16:01:07 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: pPrkRcmwhA4YttvYHxN7zc0nnsxVhKdC97E1A9Brcf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:75:02:15:85:15:9c:da:e5:e3:1e:03:fb:f0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Aug 14 16:01:07 2026 GMT
Not After : Aug 15 16:01:07 2026 GMT
Subject: CN=88a3c4b4062f4d742b787c81856a2a53bb9040b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:89:ef:33:d4:8b:7f:3a:1e:41:e3:e9:07:7a:
7b:59:96:c7:c0:45:d0:42:e1:e0:bb:ef:20:f1:88:
aa:1e:2b:12:1e:d9:ad:6a:69:f5:05:26:37:e3:9a:
81:38:f8:7f:cb:ff:fb:61:81:3d:0d:68:70:30:1a:
ca:bd:89:10:4d:d7:c4:5e:c8:92:b0:57:81:49:4c:
4d:68:84:7e:10:02:9e:a1:28:f9:8f:bc:59:a5:43:
38:01:bf:19:9d:a3:64:8c:9e:b3:52:e5:18:e5:e9:
7f:ff:57:33:d8:b3:09:b1:00:d3:34:9b:f2:ce:c3:
2f:8a:db:63:f1:50:cb:62:19:31:74:62:07:d1:26:
8c:94:c9:d9:db:a3:07:fb:10:41:3b:de:3c:8a:ab:
a9:af:08:4c:78:91:ad:78:d8:04:0f:7c:70:42:37:
6f:8f:dd:ac:b2:08:73:e1:fd:51:36:ba:12:fa:3d:
8f:74:db:9c:e0:35:35:b8:02:82:8d:dc:02:04:43:
69:aa:79:5a:18:50:46:c9:6f:10:d8:b8:ac:da:68:
c8:04:6d:c1:aa:0c:e6:0f:d7:18:8c:3f:78:ed:af:
4b:68:d4:cb:e7:53:43:37:19:5c:e0:44:47:97:ef:
7b:24:e5:e4:c3:2c:fa:46:0b:30:c1:3c:8a:f0:b1:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A3:C4:B4:06:2F:4D:74:2B:78:7C:81:85:6A:2A:53:BB:90:40:B2
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c7:bc:5f:6e:23:96:fd:ab:71:40:90:99:4b:e8:be:ca:6d:
bd:d9:0d:46:db:ad:1b:ab:55:e0:71:e8:e0:97:8a:3e:66:6a:
a0:b8:46:2e:32:76:72:d1:e3:a0:2a:2c:55:20:d4:c5:1c:d2:
2f:f2:e9:49:27:7d:ae:20:8d:c4:31:93:dd:c2:18:53:44:94:
7b:12:65:ae:b1:cc:80:1c:91:52:28:6f:72:04:83:c7:8d:a9:
6d:87:4b:27:ea:52:77:08:c5:49:5c:27:f2:33:1e:9f:5b:b9:
0a:7c:e0:9f:bb:fd:4c:77:09:21:51:bb:ef:cc:31:07:a9:86:
16:29:2c:fa:30:52:7d:24:4b:0d:24:e5:4d:10:0a:ae:76:30:
15:e1:d4:df:64:a4:eb:e4:60:dd:6c:af:c3:8a:a5:c0:79:58:
87:32:0c:b4:33:de:52:73:26:22:c9:9f:ea:a8:1e:9d:9d:25:
e4:33:66:b1:4b:7d:58:9a:b9:6f:7a:f7:d5:0a:d4:58:e2:1f:
f5:37:bc:24:80:15:c7:80:59:d2:ad:30:86:80:72:0b:fd:53:
f9:f4:05:aa:38:d2:3b:06:58:a0:86:e5:8a:53:9f:62:b9:82:
15:1a:b3:ac:10:67:25:1d:13:10:10:5f:64:6c:67:d2:98:02:
b1:a3:95:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAXUCFYUVnNrl4x4D+/DRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYjE1YmM1YjkwMjE5OWViODZkNjA3OGM0ODJlZGVkZDNk
ZGRlYjQwHhcNMjYwODE0MTYwMTA3WhcNMjYwODE1MTYwMTA3WjAzMTEwLwYDVQQD
Eyg4OGEzYzRiNDA2MmY0ZDc0MmI3ODdjODE4NTZhMmE1M2JiOTA0MGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44nvM9SLfzoeQePpB3p7WZbHwEXQ
QuHgu+8g8YiqHisSHtmtamn1BSY345qBOPh/y//7YYE9DWhwMBrKvYkQTdfEXsiS
sFeBSUxNaIR+EAKeoSj5j7xZpUM4Ab8ZnaNkjJ6zUuUY5el//1cz2LMJsQDTNJvy
zsMvittj8VDLYhkxdGIH0SaMlMnZ26MH+xBBO948iquprwhMeJGteNgED3xwQjdv
j92ssghz4f1RNroS+j2PdNuc4DU1uAKCjdwCBENpqnlaGFBGyW8Q2Lis2mjIBG3B
qgzmD9cYjD947a9LaNTL51NDNxlc4ERHl+97JOXkwyz6RgswwTyK8LGmLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIijxLQGL010K3h8gYVqKlO7kECyMB8GA1UdIwQY
MBaAFOGxW8W5AhmeuG1geMSC7e3T3d60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMt
NDFhOTgwMDFjZjJiLzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mNmQ2NTUtNzNlYS00MjJhLWE5NjMtNDFhOTgwMDFjZjJi
LzEvNGJGYnhia0NHWjY0YldCNHhJTHQ3ZFBkM3JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8e8X24j
lv2rcUCQmUvovsptvdkNRtutG6tV4HHo4JeKPmZqoLhGLjJ2ctHjoCosVSDUxRzS
L/LpSSd9riCNxDGT3cIYU0SUexJlrrHMgByRUihvcgSDx42pbYdLJ+pSdwjFSVwn
8jMen1u5Cnzgn7v9THcJIVG778wxB6mGFiks+jBSfSRLDSTlTRAKrnYwFeHU32Sk
6+Rg3Wyvw4qlwHlYhzIMtDPeUnMmIsmf6qgenZ0l5DNmsUt9WJq5b3r31QrUWOIf
9Te8JIAVx4BZ0q0whoByC/1T+fQFqjjSOwZYoIblilOfYrmCFRqzrBBnJR0TEBBf
ZGxn0pgCsaOVxQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:31:47 2026 by rpki-client