Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: OnTa8jTAzeY5kHmjV+HReus9Zy+1GpLpLcyrimjvSW4=
Subject key identifier: AC:74:58:C4:7A:74:C2:6D:90:72:62:1B:EC:F3:11:7E:CD:03:D3:7B
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 01A0B61BB002B20D1C43AF1B456FC63D5E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: 0236
Signing time: Fri 18 Sep 2026 20:01:02 +0000
Manifest this update: Fri 18 Sep 2026 20:01:02 +0000
Manifest next update: Sat 19 Sep 2026 20:01:02 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: s4nDY8j+NVKiKWWmVE9tdQ+NgUPykQaKkCltTQMSsRg=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:1b:b0:02:b2:0d:1c:43:af:1b:45:6f:c6:3d:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Sep 18 20:01:02 2026 GMT
Not After : Sep 19 20:01:02 2026 GMT
Subject: CN=ac7458c47a74c26d9072621becf3117ecd03d37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:96:5d:5f:05:86:82:7e:19:09:ff:74:8a:
62:1a:95:8c:c8:7a:33:af:4e:b9:09:9c:1e:db:56:
4a:0f:cb:71:46:67:96:3c:14:f3:4f:b0:69:8e:f7:
03:50:af:37:0e:40:f3:ec:09:30:f7:32:88:e5:96:
0a:46:1f:9a:90:90:ac:d6:a9:3d:0c:65:ae:2f:fc:
c9:4a:aa:25:0f:3d:27:a9:99:9a:74:23:da:8b:74:
50:f4:95:13:ba:3a:45:05:75:a7:9a:0e:51:75:64:
12:d0:fb:99:9e:78:03:81:33:c7:3c:a3:1c:56:98:
25:4c:90:7e:52:98:e0:b7:ae:fe:dd:cf:b4:0e:de:
73:a8:cd:57:14:fa:2c:9a:e9:9a:87:34:7b:33:30:
8a:97:bc:7e:27:4d:7c:f2:78:f9:51:25:09:73:d4:
0c:07:6b:11:d2:95:f1:b4:d6:97:ca:a2:ee:47:56:
bb:03:e3:d7:67:f8:e8:9f:53:2a:a4:48:24:95:c9:
df:78:9d:f4:5a:a1:eb:4e:8f:75:24:3b:11:56:76:
aa:bd:20:0a:93:ec:c2:74:b0:d3:3a:c8:61:36:eb:
c2:91:30:5e:a5:fa:9b:5d:5f:a4:a6:7d:e9:f8:c1:
88:50:ee:77:a4:1b:ba:52:80:97:ab:4a:9c:4e:8f:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:58:C4:7A:74:C2:6D:90:72:62:1B:EC:F3:11:7E:CD:03:D3:7B
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6f:bf:ff:7f:a1:6c:cb:cc:f0:b8:61:7e:23:cd:2f:0f:7f:
ec:3b:21:7f:48:f3:04:7f:7c:f0:cb:8a:48:00:97:a5:1c:03:
86:af:c1:91:cc:12:1c:97:f5:a8:fa:52:38:cf:3b:7a:f9:64:
9d:26:8f:92:af:be:52:51:ca:18:46:55:c1:02:0b:52:be:74:
7e:21:34:81:da:f5:c5:82:36:53:d9:3c:0d:2a:1b:96:f8:1f:
c1:54:c3:c3:ac:22:08:e8:0c:f0:63:9e:41:ed:1f:f9:19:b4:
bf:89:49:d1:89:12:05:57:8e:4d:c8:2c:32:9a:b9:75:9d:6c:
86:5f:13:57:af:3d:99:f4:4c:b9:0e:bb:2f:e4:a1:b7:6d:b9:
cb:bb:b9:51:73:14:01:f8:8d:e6:63:21:3f:40:ab:ac:60:56:
c3:a2:cf:44:0f:7c:fb:5a:ad:e6:9a:c5:0c:db:9d:2b:ee:3e:
1b:56:7b:2b:8b:b9:e8:80:43:d4:9f:0f:f6:6e:a8:8c:66:8c:
31:9b:33:ca:f5:52:4d:81:71:ed:8a:3c:e4:52:e1:8b:98:11:
34:9a:fd:fd:f2:a8:13:64:f8:2f:d4:dd:67:96:10:79:bf:36:
ee:5d:01:90:a4:9d:ff:ee:a4:ba:b1:fb:2c:19:d6:19:f6:91:
26:8c:64:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC2G7ACsg0cQ68bRW/GPV5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNjhiZDBkMjVlNTVhYzFhNDJhODRjMmEzYjljODkwODM2
MWQ2ZTEwHhcNMjYwOTE4MjAwMTAyWhcNMjYwOTE5MjAwMTAyWjAzMTEwLwYDVQQD
EyhhYzc0NThjNDdhNzRjMjZkOTA3MjYyMWJlY2YzMTE3ZWNkMDNkMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16qWXV8FhoJ+GQn/dIpiGpWMyHoz
r065CZwe21ZKD8txRmeWPBTzT7BpjvcDUK83DkDz7Akw9zKI5ZYKRh+akJCs1qk9
DGWuL/zJSqolDz0nqZmadCPai3RQ9JUTujpFBXWnmg5RdWQS0PuZnngDgTPHPKMc
VpglTJB+Upjgt67+3c+0Dt5zqM1XFPosmumahzR7MzCKl7x+J0188nj5USUJc9QM
B2sR0pXxtNaXyqLuR1a7A+PXZ/jon1MqpEgklcnfeJ30WqHrTo91JDsRVnaqvSAK
k+zCdLDTOshhNuvCkTBepfqbXV+kpn3p+MGIUO53pBu6UoCXq0qcTo8B4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKx0WMR6dMJtkHJiG+zzEX7NA9N7MB8GA1UdIwQY
MBaAFOJovQ0l5VrBpCqEwqO5yJCDYdbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kMmI4NmItMWFiOC00NTc0LWJlOGIt
OGMzMjJlNzQzN2U0LzEvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kMmI4NmItMWFiOC00NTc0LWJlOGItOGMzMjJlNzQzN2U0
LzEvNG1pOURTWGxXc0drS29UQ283bklrSU5oMXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfW+//3+h
bMvM8LhhfiPNLw9/7Dshf0jzBH988MuKSACXpRwDhq/BkcwSHJf1qPpSOM87evlk
nSaPkq++UlHKGEZVwQILUr50fiE0gdr1xYI2U9k8DSoblvgfwVTDw6wiCOgM8GOe
Qe0f+Rm0v4lJ0YkSBVeOTcgsMpq5dZ1shl8TV689mfRMuQ67L+Sht225y7u5UXMU
AfiN5mMhP0CrrGBWw6LPRA98+1qt5prFDNudK+4+G1Z7K4u56IBD1J8P9m6ojGaM
MZszyvVSTYFx7Yo85FLhi5gRNJr9/fKoE2T4L9TdZ5YQeb827l0BkKSd/+6kurH7
LBnWGfaRJoxkyg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 03:41:26 2026 by rpki-client