Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: QvRP+1CKXxUizlZvfbjyOsXd15w5JH9I77DnJMI3uo0=
Subject key identifier: 99:71:EA:09:9F:7B:C0:5B:DA:7B:E9:E8:E4:72:C0:09:E1:87:56:D9
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 01A11B9A3DCFAEB62A81700B31E87BF1E163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1A8F
Signing time: Thu 08 Oct 2026 13:00:55 +0000
Manifest this update: Thu 08 Oct 2026 13:00:55 +0000
Manifest next update: Fri 09 Oct 2026 13:00:55 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: zAGUEtoBFAiKIg3is7+/j2Ow3twhz7oOULkQDJPz1lU=)
2: sz56j9LVi6BvJ23bxmQK9h0mrwg.asa (hash: L3jU/73+xzk1SL2NMp3V4ynSAIXNNRQbicPSs6+Khfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:9a:3d:cf:ae:b6:2a:81:70:0b:31:e8:7b:f1:e1:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Oct 8 13:00:55 2026 GMT
Not After : Oct 9 13:00:55 2026 GMT
Subject: CN=9971ea099f7bc05bda7be9e8e472c009e18756d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:7f:4e:a5:85:25:27:c0:22:7c:48:cf:84:
6a:4a:e5:42:2c:64:58:b9:f4:16:94:17:bb:2a:d0:
0d:6c:2d:0d:cb:a7:d9:fa:31:7c:9b:d7:0f:43:78:
22:92:c5:ab:28:97:9b:be:29:65:15:a1:07:31:6d:
ed:0b:f0:6e:2c:49:a2:f4:63:6a:03:30:68:60:4e:
0e:91:cd:4e:80:e9:1a:c1:80:f2:57:68:12:9a:43:
bc:14:e3:30:fa:fc:3b:80:57:df:a7:22:b1:3c:19:
e4:1b:33:8d:48:b2:74:dd:3a:ee:05:7f:a2:d6:76:
2a:be:63:c2:f3:21:dd:e6:8e:d8:06:37:92:37:bd:
44:74:8c:8e:e8:81:2a:ac:71:b3:f9:52:ec:a9:37:
7f:8d:d7:05:b3:c6:76:f1:4e:ad:ea:8e:b2:56:c7:
72:37:f4:54:a2:3b:4f:b9:0f:37:bf:ca:22:3c:16:
73:a2:a3:25:b9:e5:60:e8:ed:ea:2f:50:19:29:73:
83:70:d9:c7:83:c3:47:6d:9a:5f:7a:02:f9:33:b6:
44:c4:fb:f4:1f:b3:b3:c7:ac:79:57:1d:19:38:2a:
56:41:e7:ab:80:94:66:36:e6:ab:90:7f:46:4a:e5:
2a:39:39:e9:a5:b8:d8:3f:5b:75:2e:d9:d9:0c:87:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:EA:09:9F:7B:C0:5B:DA:7B:E9:E8:E4:72:C0:09:E1:87:56:D9
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:63:2b:c5:bf:7e:dc:26:65:df:38:fc:44:1b:09:d9:e4:2c:
2c:b9:14:78:a1:dd:a8:80:76:ce:f2:07:4b:92:ce:65:f2:13:
37:eb:cc:79:6b:1e:2b:09:8c:d2:7c:69:79:6d:31:9b:ea:ad:
a0:8f:19:21:73:dc:84:5d:dd:2e:2c:cd:95:3f:12:85:7a:bb:
3a:6f:b9:0b:a7:fe:b1:f6:1d:5a:a6:e0:24:9b:00:7a:bc:bd:
a3:31:48:e2:a1:a8:21:dc:68:b5:52:d7:59:54:17:da:75:ea:
6d:6d:b6:22:24:f7:dc:6c:e7:67:f8:83:58:65:41:aa:6f:7b:
cd:63:17:34:66:7f:6d:f0:29:63:5b:aa:94:33:12:df:de:aa:
78:71:6d:94:f6:ff:cc:14:40:4a:d4:f5:33:fc:22:59:12:38:
62:88:42:43:56:06:37:60:b7:0a:92:2a:c6:d7:a5:6f:5d:59:
5e:f8:0c:ea:6a:1b:a0:b7:2a:0e:03:a0:a6:2b:c2:6e:96:34:
1f:5b:1f:9a:eb:bd:39:80:4b:a4:24:d8:b5:c0:27:7d:e1:f0:
08:60:b9:07:03:46:cd:e4:61:a0:52:ba:03:cc:b0:43:fc:43:
5d:03:39:cb:3f:2a:8c:8a:11:cc:63:07:3a:e7:9a:cf:9c:05:
56:94:04:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbmj3PrrYqgXALMeh78eFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh
NTY3ZjYwHhcNMjYxMDA4MTMwMDU1WhcNMjYxMDA5MTMwMDU1WjAzMTEwLwYDVQQD
Eyg5OTcxZWEwOTlmN2JjMDViZGE3YmU5ZThlNDcyYzAwOWUxODc1NmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjx/TqWFJSfAInxIz4RqSuVCLGRY
ufQWlBe7KtANbC0Ny6fZ+jF8m9cPQ3giksWrKJebvillFaEHMW3tC/BuLEmi9GNq
AzBoYE4Okc1OgOkawYDyV2gSmkO8FOMw+vw7gFffpyKxPBnkGzONSLJ03TruBX+i
1nYqvmPC8yHd5o7YBjeSN71EdIyO6IEqrHGz+VLsqTd/jdcFs8Z28U6t6o6yVsdy
N/RUojtPuQ83v8oiPBZzoqMlueVg6O3qL1AZKXODcNnHg8NHbZpfegL5M7ZExPv0
H7Ozx6x5Vx0ZOCpWQeergJRmNuarkH9GSuUqOTnppbjYP1t1LtnZDIfvRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlx6gmfe8Bb2nvp6ORywAnhh1bZMB8GA1UdIwQY
MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt
ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3
LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2Mrxb9+
3CZl3zj8RBsJ2eQsLLkUeKHdqIB2zvIHS5LOZfITN+vMeWseKwmM0nxpeW0xm+qt
oI8ZIXPchF3dLizNlT8ShXq7Om+5C6f+sfYdWqbgJJsAery9ozFI4qGoIdxotVLX
WVQX2nXqbW22IiT33GznZ/iDWGVBqm97zWMXNGZ/bfApY1uqlDMS396qeHFtlPb/
zBRAStT1M/wiWRI4YohCQ1YGN2C3CpIqxtelb11ZXvgM6moboLcqDgOgpivCbpY0
H1sfmuu9OYBLpCTYtcAnfeHwCGC5BwNGzeRhoFK6A8ywQ/xDXQM5yz8qjIoRzGMH
Oueaz5wFVpQEdg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:43 2026 by rpki-client