Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: LWda1UMsviODo0Nc7uB3j6Bk85lx0DzBPvXRMe6HfPE=
Subject key identifier: 53:51:44:D6:56:B1:37:66:8D:27:BD:48:55:F1:65:46:03:AE:A5:B4
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 01A0FC7D69748AB922A2A720FC70F737F3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1A8D
Signing time: Fri 02 Oct 2026 12:01:12 +0000
Manifest this update: Fri 02 Oct 2026 12:01:12 +0000
Manifest next update: Sat 03 Oct 2026 12:01:12 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: 6K8wvXF4vVooBQWhN0vL/m8yRH3ZYaQHicqQ8kmbHro=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7d:69:74:8a:b9:22:a2:a7:20:fc:70:f7:37:f3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Oct 2 12:01:12 2026 GMT
Not After : Oct 3 12:01:12 2026 GMT
Subject: CN=535144d656b137668d27bd4855f1654603aea5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:f1:cc:be:e8:c8:80:c1:1c:42:73:8a:dc:
26:52:99:3c:cb:e0:a1:3a:56:28:cd:38:10:4f:04:
36:a4:09:2a:b2:53:eb:12:ce:c8:24:ee:ee:aa:74:
81:3f:2a:8b:1a:36:ca:b1:a0:7a:30:36:8d:f2:4b:
bd:d0:2d:3b:fa:2c:8f:d4:21:29:b0:21:88:fc:cb:
bf:1f:3b:4a:c5:68:73:f5:64:57:d2:7f:cd:f8:54:
d1:46:25:ed:bc:7e:05:84:33:66:4c:92:37:78:fa:
03:e5:74:ab:80:c8:4f:01:c1:26:cf:33:9f:0c:ba:
a1:3d:0d:7f:39:d6:5e:66:bf:54:70:52:fd:e8:41:
ab:6c:e5:be:3c:a3:f5:19:6d:1e:8c:4b:73:79:a8:
42:89:ac:24:e5:75:15:f7:69:a8:fc:e1:9f:81:2b:
72:c0:1e:e8:73:b0:88:82:5f:41:56:b6:0a:94:72:
a4:4c:39:39:39:ba:06:02:3b:be:3c:11:5d:d0:c5:
82:36:2b:48:57:bb:2b:4b:17:b6:cf:06:28:52:00:
cf:bc:6f:4b:f9:53:ab:fd:a4:bf:b3:aa:07:0e:f7:
ab:08:d0:6d:0f:29:c9:c2:fd:59:3d:dc:c2:6f:c5:
1c:66:05:98:79:ab:01:af:bf:c2:14:65:42:00:e2:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:51:44:D6:56:B1:37:66:8D:27:BD:48:55:F1:65:46:03:AE:A5:B4
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d1:b7:b8:26:f6:22:69:a3:d0:79:e4:11:08:14:c8:57:55:
f3:6f:64:71:c5:ac:0a:e8:66:b1:7a:30:93:9e:bd:8e:7b:c7:
68:09:26:f7:c5:10:ee:95:5c:0f:61:62:97:59:03:cb:cb:87:
fe:ef:99:05:97:42:3c:4d:8b:fc:65:79:d9:17:87:7a:2e:00:
56:76:91:4b:5a:44:68:8a:2e:cf:7f:3e:0c:bf:3c:31:05:4e:
95:42:e7:56:4c:32:bb:2d:f3:06:a2:b8:14:25:8d:ef:52:f6:
80:a1:0d:94:d5:40:47:2c:32:d8:cb:f9:22:b3:6a:a1:8f:ac:
06:1b:12:36:0a:c5:97:b8:db:7a:3f:3b:66:ed:8f:f4:e0:7c:
1f:fb:7f:be:f4:d8:d0:f3:a7:d3:d1:f9:54:fa:74:a5:fb:3e:
fc:68:94:94:10:91:62:82:35:27:db:31:58:cf:4d:77:72:39:
70:b1:cd:08:8e:3d:59:35:2a:c7:20:72:6a:2a:7f:73:6c:cd:
dd:97:90:4c:be:a0:b5:4d:d4:3c:ae:9f:c1:25:ae:04:6d:db:
7d:d4:1e:e0:96:b5:d2:c0:6b:04:b8:33:25:f7:45:42:9a:c7:
a7:ad:92:f1:71:17:38:a7:d9:53:c2:8b:0e:e5:5a:55:97:c7:
0c:42:10:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8fWl0irkioqcg/HD3N/OwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1
M2Q5NDAwHhcNMjYxMDAyMTIwMTEyWhcNMjYxMDAzMTIwMTEyWjAzMTEwLwYDVQQD
Eyg1MzUxNDRkNjU2YjEzNzY2OGQyN2JkNDg1NWYxNjU0NjAzYWVhNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssXxzL7oyIDBHEJzitwmUpk8y+Ch
OlYozTgQTwQ2pAkqslPrEs7IJO7uqnSBPyqLGjbKsaB6MDaN8ku90C07+iyP1CEp
sCGI/Mu/HztKxWhz9WRX0n/N+FTRRiXtvH4FhDNmTJI3ePoD5XSrgMhPAcEmzzOf
DLqhPQ1/OdZeZr9UcFL96EGrbOW+PKP1GW0ejEtzeahCiawk5XUV92mo/OGfgSty
wB7oc7CIgl9BVrYKlHKkTDk5OboGAju+PBFd0MWCNitIV7srSxe2zwYoUgDPvG9L
+VOr/aS/s6oHDverCNBtDynJwv1ZPdzCb8UcZgWYeasBr7/CFGVCAOL/mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNRRNZWsTdmjSe9SFXxZUYDrqW0MB8GA1UdIwQY
MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt
MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1
LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdG3uCb2
Immj0HnkEQgUyFdV829kccWsCuhmsXowk569jnvHaAkm98UQ7pVcD2Fil1kDy8uH
/u+ZBZdCPE2L/GV52ReHei4AVnaRS1pEaIouz38+DL88MQVOlULnVkwyuy3zBqK4
FCWN71L2gKENlNVARywy2Mv5IrNqoY+sBhsSNgrFl7jbej87Zu2P9OB8H/t/vvTY
0POn09H5VPp0pfs+/GiUlBCRYoI1J9sxWM9Nd3I5cLHNCI49WTUqxyByaip/c2zN
3ZeQTL6gtU3UPK6fwSWuBG3bfdQe4Ja10sBrBLgzJfdFQprHp62S8XEXOKfZU8KL
DuVaVZfHDEIQ/w==
-----END CERTIFICATE-----
Generated at Fri Oct 2 17:17:12 2026 by rpki-client