Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
File: 4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft (raw, json)
Hash identifier: ZXId5PS589FremVJuI+eVdAHO69EGSG/YxUgYt5SZbo=
Subject key identifier: BA:47:C2:58:B4:BC:B4:1B:FD:61:CF:54:F0:E7:C6:22:B3:97:21:D6
Authority key identifier: E0:3F:66:DD:7D:12:07:44:90:73:E2:1E:1A:36:48:28:A1:49:6B:94
Certificate issuer: /CN=e03f66dd7d1207449073e21e1a364828a1496b94
Certificate serial: 01A03F3B52959C393A8F7ADAC3193854E1AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:00:47 +0000
Manifest this update: Wed 26 Aug 2026 18:00:47 +0000
Manifest next update: Thu 27 Aug 2026 18:00:47 +0000
Files and hashes: 1: 4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl (hash: /73cn9/l7oCDsWL+pgH7Pb2CnGtmAvutUZg6Fc5fl4A=)
2: kYP-N6kinjxADOPUDAI1mMqCiMo.roa (hash: /T46dbhLvgDMiZ//AOgwguIuo5EQnnNikqQT0mHcCKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:52:95:9c:39:3a:8f:7a:da:c3:19:38:54:e1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f66dd7d1207449073e21e1a364828a1496b94
Validity
Not Before: Aug 26 18:00:47 2026 GMT
Not After : Aug 27 18:00:47 2026 GMT
Subject: CN=ba47c258b4bcb41bfd61cf54f0e7c622b39721d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:ad:da:69:94:46:aa:9b:b9:0e:0f:1a:ab:
dd:a8:f6:47:d0:5c:8f:fd:31:09:7a:ae:9c:7d:e3:
6a:27:74:94:e0:99:45:fa:bf:aa:5e:87:22:e5:9c:
58:ea:21:78:c1:e2:f2:c0:1b:e6:e8:b9:c6:4d:01:
77:a5:a0:c7:b1:78:35:5f:c9:32:10:6d:40:88:a5:
43:a3:37:cb:f0:88:20:60:a6:da:36:48:20:13:b3:
f6:96:19:14:a2:35:00:18:c7:db:ed:af:07:df:fe:
2e:15:3d:ba:c0:a5:43:a2:1d:81:b1:c2:98:93:1c:
c6:60:07:b9:61:45:30:40:36:08:c5:ba:78:5d:c5:
64:5c:0a:f5:70:d9:78:eb:e5:b0:b2:19:07:d0:00:
ac:59:0b:35:26:cc:aa:c7:d1:98:a4:53:b6:02:c6:
be:3c:4a:31:10:85:e8:af:42:07:d0:8d:68:1e:a0:
25:11:1f:f9:7e:03:5a:a2:17:70:7d:52:8c:13:15:
c5:90:b5:d3:4d:1c:69:76:a6:34:f1:cf:e1:96:96:
8f:d9:72:88:98:d5:5e:86:d1:ac:40:69:fb:d9:96:
13:86:31:7e:9d:a3:8e:c5:6f:e8:dc:ba:5b:14:8d:
84:28:50:1d:df:46:c3:03:40:4e:e0:18:2d:21:c8:
8a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:47:C2:58:B4:BC:B4:1B:FD:61:CF:54:F0:E7:C6:22:B3:97:21:D6
X509v3 Authority Key Identifier:
keyid:E0:3F:66:DD:7D:12:07:44:90:73:E2:1E:1A:36:48:28:A1:49:6B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/4D9m3X0SB0SQc-IeGjZIKKFJa5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:48:e1:29:86:47:bb:77:d8:9b:03:5a:7b:98:9e:03:fe:26:
c0:60:e4:54:aa:a4:1f:de:16:0d:43:d4:04:87:c3:c2:8b:dc:
f9:b4:4f:8e:d6:b8:87:cb:38:7b:77:f2:d9:00:e6:bd:ad:e1:
1a:e2:63:4a:ed:cc:ec:83:58:c9:b8:4d:62:d1:76:1f:c9:95:
87:72:18:55:d7:78:c9:33:33:16:91:3c:0b:bb:cb:ed:17:4a:
a4:d0:13:d6:26:2e:39:5a:6f:af:1d:78:59:e5:cb:6e:37:f6:
35:7b:ae:31:72:34:cd:bf:33:18:58:91:86:29:a3:20:d9:1a:
e8:63:17:56:3c:20:5e:9e:8a:4e:e8:7f:3e:77:d2:9c:ed:e8:
0f:39:6c:c8:62:a5:6a:8e:9e:ef:87:84:4e:2d:63:40:df:d3:
ba:fb:ba:50:dc:a9:e8:6a:32:9e:41:6f:68:66:df:40:2e:9b:
61:06:a4:12:aa:81:f9:0c:f9:ab:2c:37:1a:4c:df:a0:2a:bd:
9f:90:4b:b0:d4:e2:ab:00:34:8c:56:69:fc:34:07:42:e0:ae:
f1:24:f7:cd:1e:35:38:67:db:a5:c3:73:58:94:54:df:58:34:
be:bc:12:df:1f:1c:d7:c3:c2:de:ed:25:96:0b:dd:f0:5b:9b:
ca:08:83:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/O1KVnDk6j3rawxk4VOGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwM2Y2NmRkN2QxMjA3NDQ5MDczZTIxZTFhMzY0ODI4YTE0
OTZiOTQwHhcNMjYwODI2MTgwMDQ3WhcNMjYwODI3MTgwMDQ3WjAzMTEwLwYDVQQD
EyhiYTQ3YzI1OGI0YmNiNDFiZmQ2MWNmNTRmMGU3YzYyMmIzOTcyMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9mt2mmURqqbuQ4PGqvdqPZH0FyP
/TEJeq6cfeNqJ3SU4JlF+r+qXoci5ZxY6iF4weLywBvm6LnGTQF3paDHsXg1X8ky
EG1AiKVDozfL8IggYKbaNkggE7P2lhkUojUAGMfb7a8H3/4uFT26wKVDoh2BscKY
kxzGYAe5YUUwQDYIxbp4XcVkXAr1cNl46+WwshkH0ACsWQs1Jsyqx9GYpFO2Asa+
PEoxEIXor0IH0I1oHqAlER/5fgNaohdwfVKMExXFkLXTTRxpdqY08c/hlpaP2XKI
mNVehtGsQGn72ZYThjF+naOOxW/o3LpbFI2EKFAd30bDA0BO4BgtIciKPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpHwli0vLQb/WHPVPDnxiKzlyHWMB8GA1UdIwQY
MBaAFOA/Zt19EgdEkHPiHho2SCihSWuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEQ5bTNYMFNCMFNRYy1JZUdqWklLS0ZKYTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2Et
OWVjMmEyYTA5NGQ3LzEvNEQ5bTNYMFNCMFNRYy1JZUdqWklLS0ZKYTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xYWRmNDYtZjQ5OC00NzQ4LWE0N2EtOWVjMmEyYTA5NGQ3
LzEvNEQ5bTNYMFNCMFNRYy1JZUdqWklLS0ZKYTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkjhKYZH
u3fYmwNae5ieA/4mwGDkVKqkH94WDUPUBIfDwovc+bRPjta4h8s4e3fy2QDmva3h
GuJjSu3M7INYybhNYtF2H8mVh3IYVdd4yTMzFpE8C7vL7RdKpNAT1iYuOVpvrx14
WeXLbjf2NXuuMXI0zb8zGFiRhimjINka6GMXVjwgXp6KTuh/PnfSnO3oDzlsyGKl
ao6e74eETi1jQN/Tuvu6UNyp6GoynkFvaGbfQC6bYQakEqqB+Qz5qyw3GkzfoCq9
n5BLsNTiqwA0jFZp/DQHQuCu8ST3zR41OGfbpcNzWJRU31g0vrwS3x8c18PC3u0l
lgvd8FubygiDmw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:24 2026 by rpki-client