Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: +n1cRvREW5VzAIdTsd4oLeAt15NDIp5DIPcb934DDuU=
Subject key identifier: 58:55:B3:C3:E1:5A:86:2C:F9:C6:D5:20:0D:BE:1F:C7:B2:A3:8F:E3
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 01A12BB29D055CB94ECB09B11431D3A64760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0DD3
Signing time: Sun 11 Oct 2026 16:01:28 +0000
Manifest this update: Sun 11 Oct 2026 16:01:28 +0000
Manifest next update: Mon 12 Oct 2026 16:01:28 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: kEITx3nWDiFukmKcIT4P7IvvsRaM+4K59fq+NrMtHWA=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:9d:05:5c:b9:4e:cb:09:b1:14:31:d3:a6:47:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Oct 11 16:01:28 2026 GMT
Not After : Oct 12 16:01:28 2026 GMT
Subject: CN=5855b3c3e15a862cf9c6d5200dbe1fc7b2a38fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:80:72:fc:09:e3:4b:69:9a:33:f1:bd:a1:
1d:49:e8:4d:ae:58:14:eb:a4:38:40:f7:ca:19:59:
ab:ff:ac:3c:82:75:c6:ad:4d:c8:19:7f:4f:78:4a:
45:a1:49:91:ec:6c:22:2a:b1:c4:04:d7:6b:82:d0:
31:0e:6d:de:29:8d:17:66:51:29:f6:84:ba:fe:68:
22:1b:e8:cb:1d:ad:f8:bf:57:c5:00:25:ce:12:7c:
68:37:46:59:4f:02:84:3c:31:51:1a:2e:7b:44:c9:
48:10:fe:9e:fe:91:84:a7:e7:13:91:0a:8d:de:11:
9d:78:6b:00:9f:e8:31:e9:5e:69:5a:56:a2:2e:f6:
00:b2:0d:59:6d:88:cc:6f:be:0a:1c:f6:76:17:b6:
a6:f2:7b:93:f9:57:ca:67:48:55:52:a6:96:32:f7:
ca:bb:05:75:bf:88:19:34:1a:c0:70:b8:bf:bd:5b:
a8:02:d5:63:8b:86:38:09:76:f7:51:a0:23:03:e9:
b5:01:88:ca:22:86:4a:60:59:01:ff:85:15:12:ca:
f0:0e:89:52:14:d5:27:fc:38:bc:0f:6c:2b:10:07:
29:db:05:9d:5a:d9:a0:c4:07:26:6f:85:3a:e7:44:
b4:1e:0b:c8:9d:78:e1:88:06:43:d2:81:57:c7:cf:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:B3:C3:E1:5A:86:2C:F9:C6:D5:20:0D:BE:1F:C7:B2:A3:8F:E3
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8a:3e:5d:fd:3d:39:4b:9f:bc:91:7a:7a:13:7b:bb:d1:8d:
11:53:0d:fa:21:64:f2:5b:5f:13:83:29:1c:51:32:d3:1f:8b:
82:41:d1:f3:e5:b3:77:b5:a8:92:4c:40:4f:41:6f:6f:5e:1e:
47:dd:bd:5d:c2:c3:32:4f:bb:a8:c0:4b:e8:c2:4e:56:98:76:
f0:f8:14:91:c2:cc:44:82:d0:4c:3d:23:d1:96:69:67:3e:76:
0b:ce:3b:8d:ec:61:22:d4:2a:bd:83:c6:f3:13:ac:a3:aa:b8:
31:18:59:0e:0c:a2:25:df:05:49:f8:d0:dd:46:bb:cb:82:6a:
49:0c:12:3f:aa:4d:60:fc:f9:e1:d7:b9:4a:4f:70:d1:5f:e0:
fb:ec:ca:96:66:83:e5:93:10:b4:41:03:ec:05:a8:19:64:12:
4f:2a:b2:23:27:b4:a8:a0:af:27:92:76:3b:10:d5:42:c1:dc:
78:e7:7f:9c:db:d0:30:0a:58:fe:ad:8e:c9:17:6f:de:91:f5:
7d:f1:5e:d9:95:9d:8d:4f:23:22:f9:5a:ff:4c:17:c2:69:2f:
b8:27:de:68:eb:3f:ec:a6:fb:10:06:1b:c4:cf:b0:35:7a:7a:
93:50:a3:13:f7:e3:8e:3b:6c:b8:8a:9b:47:a3:ae:8c:19:45:
1d:94:54:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErsp0FXLlOywmxFDHTpkdgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyM2NiN2Q5ZTUyMWU2NDY5ZmQ3ZTJhZDEzNjAzZmI3ZWVi
ZmUwZTAwHhcNMjYxMDExMTYwMTI4WhcNMjYxMDEyMTYwMTI4WjAzMTEwLwYDVQQD
Eyg1ODU1YjNjM2UxNWE4NjJjZjljNmQ1MjAwZGJlMWZjN2IyYTM4ZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OKAcvwJ40tpmjPxvaEdSehNrlgU
66Q4QPfKGVmr/6w8gnXGrU3IGX9PeEpFoUmR7GwiKrHEBNdrgtAxDm3eKY0XZlEp
9oS6/mgiG+jLHa34v1fFACXOEnxoN0ZZTwKEPDFRGi57RMlIEP6e/pGEp+cTkQqN
3hGdeGsAn+gx6V5pWlaiLvYAsg1ZbYjMb74KHPZ2F7am8nuT+VfKZ0hVUqaWMvfK
uwV1v4gZNBrAcLi/vVuoAtVji4Y4CXb3UaAjA+m1AYjKIoZKYFkB/4UVEsrwDolS
FNUn/Di8D2wrEAcp2wWdWtmgxAcmb4U650S0HgvInXjhiAZD0oFXx8/WUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhVs8PhWoYs+cbVIA2+H8eyo4/jMB8GA1UdIwQY
MBaAFOI8t9nlIeZGn9firRNgP7fuv+DgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYt
ZWE2ZjcwNWQyYzBkLzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iMjY5OGMtNjQwOS00NTljLWIwNDYtZWE2ZjcwNWQyYzBk
LzEvNGp5MzJlVWg1a2FmMS1LdEUyQV90LTZfNE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4o+Xf09
OUufvJF6ehN7u9GNEVMN+iFk8ltfE4MpHFEy0x+LgkHR8+Wzd7WokkxAT0Fvb14e
R929XcLDMk+7qMBL6MJOVph28PgUkcLMRILQTD0j0ZZpZz52C847jexhItQqvYPG
8xOso6q4MRhZDgyiJd8FSfjQ3Ua7y4JqSQwSP6pNYPz54de5Sk9w0V/g++zKlmaD
5ZMQtEED7AWoGWQSTyqyIye0qKCvJ5J2OxDVQsHceOd/nNvQMApY/q2OyRdv3pH1
ffFe2ZWdjU8jIvla/0wXwmkvuCfeaOs/7Kb7EAYbxM+wNXp6k1CjE/fjjjtsuIqb
R6OujBlFHZRUZA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:19:32 2026 by rpki-client