Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.mft (raw, json)
Hash identifier: HFDpgCH/ZVKcM86/VVlMHn/Fd7YIoDIGVSwa7x5KDgU=
Subject key identifier: FA:18:82:33:8E:66:85:9E:EC:BD:4D:79:D2:FC:EF:91:0E:57:EA:0E
Authority key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Certificate issuer: /CN=d381b701705190b9ce9d1b184535384e71ca3165
Certificate serial: 01A0CFA3BAB6D98387751B4500D8B02D3D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 19:00:08 +0000
Manifest this update: Wed 23 Sep 2026 19:00:08 +0000
Manifest next update: Thu 24 Sep 2026 19:00:08 +0000
Files and hashes: 1: 04G3AXBRkLnOnRsYRTU4TnHKMWU.crl (hash: XMk7TAw5qHYuph+VrG4jM00IxvWEU0jPgSjeMDQT2X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 19:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:ba:b6:d9:83:87:75:1b:45:00:d8:b0:2d:3d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d381b701705190b9ce9d1b184535384e71ca3165
Validity
Not Before: Sep 23 19:00:08 2026 GMT
Not After : Sep 24 19:00:08 2026 GMT
Subject: CN=fa1882338e66859eecbd4d79d2fcef910e57ea0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:e1:05:a9:23:6c:ff:cf:eb:08:78:68:23:
dc:63:67:df:d4:f9:bd:1b:63:00:09:83:ce:f7:79:
00:61:6e:ff:62:07:d8:70:ed:e7:39:c0:07:92:2b:
a2:07:a5:ce:00:cd:3c:63:b2:d1:e0:3d:03:c0:b7:
d8:fc:4f:87:63:de:54:9c:0a:44:57:f7:dc:38:58:
8a:0a:ce:58:32:85:5f:39:b8:85:f5:19:73:55:38:
fe:1e:68:a5:41:f4:ef:d3:2c:26:45:ee:dd:aa:7d:
bd:c1:34:7e:a5:f9:d0:c8:4e:b6:24:ba:0e:f8:19:
4b:d1:f5:4e:89:ae:14:9f:88:72:cc:f6:56:c1:b8:
cb:33:63:96:e0:76:8d:fd:1b:b2:ce:cb:bb:39:5d:
2e:47:66:96:bd:60:b4:87:09:d4:c9:ab:83:81:0d:
12:51:5c:fd:41:7e:1a:52:3f:e6:a0:95:4c:f7:20:
f8:95:52:c3:22:2e:0f:34:c9:0c:c9:31:52:10:2b:
5f:52:97:a7:ac:1e:7f:63:d3:67:69:2b:55:fe:e0:
10:d1:a4:03:b9:eb:53:17:be:0f:40:de:e2:7f:c7:
19:d7:25:4d:e1:36:1a:36:93:c5:4a:38:36:a5:bc:
ce:16:cd:23:61:a6:72:0c:e4:df:23:d0:f6:c5:95:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:82:33:8E:66:85:9E:EC:BD:4D:79:D2:FC:EF:91:0E:57:EA:0E
X509v3 Authority Key Identifier:
keyid:D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f6:14:a0:9b:56:bd:58:3c:86:dd:1d:e4:0f:64:29:3e:c2:
90:77:45:81:a6:c4:ab:37:5e:f9:cd:4a:41:ea:d2:32:6d:af:
d8:e5:19:41:47:09:1d:50:b6:c0:d8:ae:d7:53:45:73:d4:45:
c0:ad:0b:a3:79:4c:d8:3d:83:ea:17:c8:9d:24:20:ec:da:81:
7f:c3:2c:69:6d:e5:32:ca:50:ac:6e:52:80:b3:9a:44:3d:fe:
6c:0d:68:22:78:dc:3c:ec:5e:a1:2f:49:c8:fa:42:b3:22:7b:
cc:bf:51:1c:e2:78:4e:dc:18:ed:e3:55:40:14:5e:4f:86:a4:
07:1f:05:41:42:93:61:8b:d9:e5:32:c5:b0:eb:8f:3e:d2:3a:
cd:6f:1b:ae:94:7c:2a:87:0a:a3:8d:2c:5e:a5:8f:a7:b9:07:
09:0b:a9:87:b9:b9:a3:0f:7f:0c:ae:27:0d:f5:d3:33:27:72:
cd:47:fa:42:42:4d:3e:75:f4:b7:df:0f:95:4d:cc:99:f3:bf:
ce:b4:3e:80:2e:4f:bf:ff:00:37:83:6b:12:d6:34:71:e5:a2:
4e:c2:70:b5:7e:8b:c8:cb:a6:3d:e2:d0:7a:15:09:b5:1a:ad:
b9:11:c0:59:61:50:fb:e6:60:e3:ef:cb:be:0d:79:de:03:19:
90:df:20:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPo7q22YOHdRtFANiwLT0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODFiNzAxNzA1MTkwYjljZTlkMWIxODQ1MzUzODRlNzFj
YTMxNjUwHhcNMjYwOTIzMTkwMDA4WhcNMjYwOTI0MTkwMDA4WjAzMTEwLwYDVQQD
EyhmYTE4ODIzMzhlNjY4NTllZWNiZDRkNzlkMmZjZWY5MTBlNTdlYTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvLhBakjbP/P6wh4aCPcY2ff1Pm9
G2MACYPO93kAYW7/YgfYcO3nOcAHkiuiB6XOAM08Y7LR4D0DwLfY/E+HY95UnApE
V/fcOFiKCs5YMoVfObiF9RlzVTj+HmilQfTv0ywmRe7dqn29wTR+pfnQyE62JLoO
+BlL0fVOia4Un4hyzPZWwbjLM2OW4HaN/Ruyzsu7OV0uR2aWvWC0hwnUyauDgQ0S
UVz9QX4aUj/moJVM9yD4lVLDIi4PNMkMyTFSECtfUpenrB5/Y9NnaStV/uAQ0aQD
uetTF74PQN7if8cZ1yVN4TYaNpPFSjg2pbzOFs0jYaZyDOTfI9D2xZVWRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoYgjOOZoWe7L1NedL875EOV+oOMB8GA1UdIwQY
MBaAFNOBtwFwUZC5zp0bGEU1OE5xyjFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRHM0FYQlJrTG5PblJzWVJUVTRUbkhLTVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82MDNjNTgtMTAwMi00MDY5LTg5MTct
NzA1NGViMmM0YzAwLzEvMDRHM0FYQlJrTG5PblJzWVJUVTRUbkhLTVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82MDNjNTgtMTAwMi00MDY5LTg5MTctNzA1NGViMmM0YzAw
LzEvMDRHM0FYQlJrTG5PblJzWVJUVTRUbkhLTVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfYUoJtW
vVg8ht0d5A9kKT7CkHdFgabEqzde+c1KQerSMm2v2OUZQUcJHVC2wNiu11NFc9RF
wK0Lo3lM2D2D6hfInSQg7NqBf8MsaW3lMspQrG5SgLOaRD3+bA1oInjcPOxeoS9J
yPpCsyJ7zL9RHOJ4TtwY7eNVQBReT4akBx8FQUKTYYvZ5TLFsOuPPtI6zW8brpR8
KocKo40sXqWPp7kHCQuph7m5ow9/DK4nDfXTMydyzUf6QkJNPnX0t98PlU3MmfO/
zrQ+gC5Pv/8AN4NrEtY0ceWiTsJwtX6LyMumPeLQehUJtRqtuRHAWWFQ++Zg4+/L
vg153gMZkN8gHg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:30:00 2026 by rpki-client