Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
File: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft (raw, json)
Hash identifier: pdSzrcyfYn2BP7rm21rz8kDS3BITKoITwyWaOTIFmmU=
Subject key identifier: 43:B7:7E:76:4B:66:29:6C:DF:6E:F5:BF:C6:BF:F8:C9:FF:2F:3B:F3
Authority key identifier: E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
Certificate issuer: /CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Certificate serial: 01A0C1B1D932D0F47F3EE3F6FF871F19E1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
Manifest number: 093D
Signing time: Mon 21 Sep 2026 02:00:53 +0000
Manifest this update: Mon 21 Sep 2026 02:00:53 +0000
Manifest next update: Tue 22 Sep 2026 02:00:53 +0000
Files and hashes: 1: 4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl (hash: Foe59SySlq2lismCgoKF27eHSdh5AZc05xKlAMLSLv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:d9:32:d0:f4:7f:3e:e3:f6:ff:87:1f:19:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c43ca4c49cf652d60ccdf366e601150d0f00b9
Validity
Not Before: Sep 21 02:00:53 2026 GMT
Not After : Sep 22 02:00:53 2026 GMT
Subject: CN=43b77e764b66296cdf6ef5bfc6bff8c9ff2f3bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:a9:da:5d:f3:07:6e:4f:8f:ff:a1:ce:69:
4d:9b:24:63:11:ba:fd:52:ae:16:a5:1c:15:26:64:
92:41:45:8b:d0:ae:51:9c:1b:47:d6:ed:1f:d4:9e:
cd:61:37:89:77:29:1f:3c:c8:3a:b6:5c:32:cd:32:
99:78:ed:5a:d1:13:f4:b6:d1:e2:ff:2d:bc:91:98:
bf:f9:3c:e2:b2:43:07:b7:56:13:4a:09:40:0d:1d:
c7:6f:8f:a8:52:24:7b:33:1b:00:9a:dd:ca:99:bb:
62:06:d5:14:e1:da:81:a4:a7:29:54:0d:2a:e9:cc:
eb:9d:cc:87:f1:77:2c:e3:14:22:e6:cd:f3:2a:1e:
c0:7a:d0:52:4b:c1:11:a1:52:99:92:cb:6a:7f:7e:
61:70:9a:8e:f9:fe:90:fb:9d:0e:23:52:bb:77:62:
0e:e5:1d:72:ae:87:5c:d6:d8:ad:03:a3:90:64:5b:
6f:1e:9c:6c:6b:1f:c3:20:22:af:78:1c:c6:96:28:
fb:90:61:5a:62:11:c5:43:9b:b7:25:40:5a:9a:4e:
a1:21:56:65:b5:29:13:f8:29:b9:af:66:6a:5c:1f:
9b:07:7a:c0:e0:f9:b1:10:d9:3b:64:15:4b:34:9d:
31:35:6c:f5:f7:b9:7f:4a:69:74:63:cf:17:61:d5:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:7E:76:4B:66:29:6C:DF:6E:F5:BF:C6:BF:F8:C9:FF:2F:3B:F3
X509v3 Authority Key Identifier:
keyid:E0:C4:3C:A4:C4:9C:F6:52:D6:0C:CD:F3:66:E6:01:15:0D:0F:00:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e81f8f-6dff-497f-8125-05fa4918c410/1/4MQ8pMSc9lLWDM3zZuYBFQ0PALk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:fd:39:76:c2:4a:8a:c0:92:9d:7d:df:3e:2e:4d:aa:9c:a3:
e8:33:38:0f:86:dd:ad:a4:85:59:49:44:e7:ee:a5:3d:61:28:
98:1c:d5:54:3a:21:ec:cb:59:e7:75:62:b1:8e:42:09:e6:96:
dd:22:9f:87:02:17:b6:74:e4:89:32:9b:59:d1:c6:c3:21:42:
db:be:a7:81:79:fc:a8:9c:b6:be:7d:fa:00:70:4a:a4:df:62:
16:0d:e6:0e:c9:2e:fa:0e:a9:5a:5f:c6:c9:18:e6:67:fd:23:
8f:6b:f6:64:f2:c2:7f:72:8a:f6:1b:79:ba:cb:e9:b3:1c:db:
9d:db:ee:af:88:18:f4:d7:dc:7a:41:d2:06:83:ed:9b:bf:ce:
bf:d9:1e:53:d7:80:c0:e9:0c:77:01:d4:9a:a1:d4:7a:cb:3d:
8e:fc:f5:31:7f:91:1b:8f:9e:57:28:e2:fd:03:0c:94:0a:50:
c0:b7:c0:38:2a:a4:84:48:42:2b:0b:f6:01:54:65:e8:0d:95:
d5:22:97:71:28:c3:a0:94:0e:3b:5c:be:5c:5e:dc:49:a0:02:
b2:24:8d:44:b5:a5:7a:95:ec:f7:13:40:09:41:6c:ff:86:77:
5b:03:cf:21:7b:73:6b:3a:dd:52:4d:e7:1c:d5:1a:d5:e5:d7:
9c:95:48:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsdky0PR/PuP2/4cfGeGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzQzY2E0YzQ5Y2Y2NTJkNjBjY2RmMzY2ZTYwMTE1MGQw
ZjAwYjkwHhcNMjYwOTIxMDIwMDUzWhcNMjYwOTIyMDIwMDUzWjAzMTEwLwYDVQQD
Eyg0M2I3N2U3NjRiNjYyOTZjZGY2ZWY1YmZjNmJmZjhjOWZmMmYzYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYap2l3zB25Pj/+hzmlNmyRjEbr9
Uq4WpRwVJmSSQUWL0K5RnBtH1u0f1J7NYTeJdykfPMg6tlwyzTKZeO1a0RP0ttHi
/y28kZi/+TziskMHt1YTSglADR3Hb4+oUiR7MxsAmt3KmbtiBtUU4dqBpKcpVA0q
6czrncyH8Xcs4xQi5s3zKh7AetBSS8ERoVKZkstqf35hcJqO+f6Q+50OI1K7d2IO
5R1yrodc1titA6OQZFtvHpxsax/DICKveBzGlij7kGFaYhHFQ5u3JUBamk6hIVZl
tSkT+Cm5r2ZqXB+bB3rA4PmxENk7ZBVLNJ0xNWz197l/Sml0Y88XYdVcGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO3fnZLZils3271v8a/+Mn/LzvzMB8GA1UdIwQY
MBaAFODEPKTEnPZS1gzN82bmARUNDwC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1ROHBNU2M5bExXRE0zelp1WUJGUTBQQUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lODFmOGYtNmRmZi00OTdmLTgxMjUt
MDVmYTQ5MThjNDEwLzEvNE1ROHBNU2M5bExXRE0zelp1WUJGUTBQQUxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lODFmOGYtNmRmZi00OTdmLTgxMjUtMDVmYTQ5MThjNDEw
LzEvNE1ROHBNU2M5bExXRE0zelp1WUJGUTBQQUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbP05dsJK
isCSnX3fPi5Nqpyj6DM4D4bdraSFWUlE5+6lPWEomBzVVDoh7MtZ53VisY5CCeaW
3SKfhwIXtnTkiTKbWdHGwyFC276ngXn8qJy2vn36AHBKpN9iFg3mDsku+g6pWl/G
yRjmZ/0jj2v2ZPLCf3KK9ht5usvpsxzbndvur4gY9NfcekHSBoPtm7/Ov9keU9eA
wOkMdwHUmqHUess9jvz1MX+RG4+eVyji/QMMlApQwLfAOCqkhEhCKwv2AVRl6A2V
1SKXcSjDoJQOO1y+XF7cSaACsiSNRLWlepXs9xNACUFs/4Z3WwPPIXtzazrdUk3n
HNUa1eXXnJVIsw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:41:36 2026 by rpki-client