Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: qXrVVyG+TxFfS2qeZ7EGC5skR0thoTUQskXwPfZcowg=
Subject key identifier: 69:59:C7:73:34:98:D2:59:B2:07:2F:80:7E:8F:79:DB:BB:7B:E1:4F
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 01A0C1B18E7FABDC90ADE5DC13AE1AC60F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 02:00:34 +0000
Manifest this update: Mon 21 Sep 2026 02:00:34 +0000
Manifest next update: Tue 22 Sep 2026 02:00:34 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: Grio4r3sELS9ExEutwT1SrHuwVhEClUVBSUhTRd9I14=)
2: KUodnXGsFwyNehqN551Z9d54ZJM.roa (hash: 6vmbRe0Gw7jdU6fIKbRaOK9xmSJJHl1pGRS+mY2Td7Y=)
3: RxQknk-i6X3uYtHklAq4xTvLElU.roa (hash: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:8e:7f:ab:dc:90:ad:e5:dc:13:ae:1a:c6:0f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Sep 21 02:00:34 2026 GMT
Not After : Sep 22 02:00:34 2026 GMT
Subject: CN=6959c7733498d259b2072f807e8f79dbbb7be14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:f7:95:ba:0c:64:1c:45:16:85:44:3f:2d:
fb:e1:73:1a:15:41:38:21:fa:57:cc:da:53:99:d1:
2f:d2:9f:34:e0:5a:bf:67:a7:56:b3:af:3f:67:36:
32:13:84:54:db:c6:83:d5:6d:cb:7d:a8:c4:be:ff:
d4:84:4c:4c:34:45:90:53:52:5f:82:99:7b:be:34:
e3:9f:25:e8:12:e4:c0:6f:d3:1f:99:a9:a8:51:96:
00:09:a6:bd:4a:e5:b6:7c:8e:9f:50:65:88:34:e8:
fd:b4:c9:38:d5:a8:5a:b8:15:b5:6f:91:c3:c6:67:
c6:c5:47:5d:ea:c9:73:06:21:f3:04:48:3f:32:90:
c7:64:31:86:ae:15:59:f3:c6:e5:0e:bc:ef:0c:64:
0c:35:25:8f:33:cf:57:e9:a8:d4:ad:40:97:51:45:
cb:e6:79:60:76:fc:2b:1e:32:2d:06:da:2d:61:a3:
12:77:45:78:03:05:8a:ef:27:5f:3b:a7:19:9c:bb:
9a:c5:8a:a6:bf:47:b8:8d:fe:84:18:26:1e:59:13:
1b:91:ee:ff:29:6b:92:4f:73:62:8c:76:47:22:eb:
ec:1d:36:de:a7:57:a5:c1:fb:c3:24:df:f3:6e:7d:
fa:92:92:3e:48:1d:dc:7e:7c:58:1e:9a:04:86:1f:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:59:C7:73:34:98:D2:59:B2:07:2F:80:7E:8F:79:DB:BB:7B:E1:4F
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:32:32:59:39:05:11:4f:07:9a:6b:de:ee:e4:66:db:69:10:
13:e2:ea:ec:30:f2:5d:5b:27:1b:64:08:54:17:de:bb:6e:7b:
cf:00:18:fb:62:53:6e:82:8e:50:d7:f5:6c:09:0a:a5:cb:a5:
2d:6e:ac:3f:5c:e2:14:47:44:87:81:6b:b2:39:0b:03:88:f0:
bd:50:7f:e9:f3:b2:96:03:40:53:10:ce:3e:b8:c3:ee:54:51:
6c:9e:86:b4:d4:03:70:b1:60:07:c0:e3:06:11:d4:94:3a:b9:
2d:10:e8:00:31:84:cf:ff:2a:2e:70:e8:b1:f3:f6:aa:1c:a2:
90:ed:05:a0:b3:2f:5f:1d:b4:cd:ef:40:b1:6b:a8:5c:02:e5:
e3:be:e3:dc:a8:07:72:a6:95:21:1e:6c:9f:5d:29:4a:f5:cb:
ba:5d:35:53:c3:e8:6c:39:63:fd:e5:05:32:33:9b:f8:85:ba:
3a:b7:2d:f1:c9:fa:18:0a:a9:6f:01:0e:bb:8f:b9:16:ad:80:
0e:f4:97:5c:8b:6f:23:8f:f4:dc:4f:5e:47:fa:55:7e:62:e8:
b8:1e:66:a6:3a:8c:0e:fd:10:c6:ca:dc:89:22:be:cc:17:cb:
9f:f1:d8:46:59:1a:fb:fc:3b:28:d2:44:cd:1c:33:06:e3:7c:
7d:f7:a9:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsY5/q9yQreXcE64axg9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWEyZGFjZjVkZDRlOWJmYTJkMmQ5YjJkM2MzZjk2Nzg3
NDU4NDEwHhcNMjYwOTIxMDIwMDM0WhcNMjYwOTIyMDIwMDM0WjAzMTEwLwYDVQQD
Eyg2OTU5Yzc3MzM0OThkMjU5YjIwNzJmODA3ZThmNzlkYmJiN2JlMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN73lboMZBxFFoVEPy374XMaFUE4
IfpXzNpTmdEv0p804Fq/Z6dWs68/ZzYyE4RU28aD1W3LfajEvv/UhExMNEWQU1Jf
gpl7vjTjnyXoEuTAb9MfmamoUZYACaa9SuW2fI6fUGWINOj9tMk41ahauBW1b5HD
xmfGxUdd6slzBiHzBEg/MpDHZDGGrhVZ88blDrzvDGQMNSWPM89X6ajUrUCXUUXL
5nlgdvwrHjItBtotYaMSd0V4AwWK7ydfO6cZnLuaxYqmv0e4jf6EGCYeWRMbke7/
KWuST3NijHZHIuvsHTbep1elwfvDJN/zbn36kpI+SB3cfnxYHpoEhh+GXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlZx3M0mNJZsgcvgH6Pedu7e+FPMB8GA1UdIwQY
MBaAFOBaLaz13U6b+i0tmy08P5Z4dFhBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEt
YWYwN2E5ZTg3ZmMwLzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEtYWYwN2E5ZTg3ZmMw
LzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjIyWTkF
EU8Hmmve7uRm22kQE+Lq7DDyXVsnG2QIVBfeu257zwAY+2JTboKOUNf1bAkKpcul
LW6sP1ziFEdEh4FrsjkLA4jwvVB/6fOylgNAUxDOPrjD7lRRbJ6GtNQDcLFgB8Dj
BhHUlDq5LRDoADGEz/8qLnDosfP2qhyikO0FoLMvXx20ze9AsWuoXALl477j3KgH
cqaVIR5sn10pSvXLul01U8PobDlj/eUFMjOb+IW6Orct8cn6GAqpbwEOu4+5Fq2A
DvSXXItvI4/03E9eR/pVfmLouB5mpjqMDv0QxsrciSK+zBfLn/HYRlka+/w7KNJE
zRwzBuN8ffepNQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:47:25 2026 by rpki-client