Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: f4VwmDWbXLOKMTRFTleVJudCgKxIAUebJEnc7viOnuU=
Subject key identifier: 54:33:4B:CE:1F:E6:E5:E7:3F:16:4C:DF:1C:44:7B:CF:FB:34:6E:D7
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 01A0CEC87AB37A6DBC4D2C65B31E4DD9F4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 15:00:40 +0000
Manifest this update: Wed 23 Sep 2026 15:00:40 +0000
Manifest next update: Thu 24 Sep 2026 15:00:40 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: X0e5+3xAT50n4grt009cd8NHhtXcCms63dcCFI1RMVw=)
2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
3: fXnZtaUDrh43uq-zC1mqapT0DEg.roa (hash: 6JqlPygY2vobl9zvXxHng2bcbozRsoYkuHDvh0Ax49Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:7a:b3:7a:6d:bc:4d:2c:65:b3:1e:4d:d9:f4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Sep 23 15:00:40 2026 GMT
Not After : Sep 24 15:00:40 2026 GMT
Subject: CN=54334bce1fe6e5e73f164cdf1c447bcffb346ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:9d:26:bd:22:fc:0d:4c:85:cf:4e:42:af:
e2:5b:86:5c:c7:ea:91:5e:47:19:ef:73:f2:59:f9:
cb:28:56:c0:6d:9d:48:5c:d6:8a:28:d2:a6:fa:9a:
46:2b:48:f2:c4:d7:2a:94:68:1d:ab:98:f3:5e:40:
73:42:85:b2:63:57:a8:bb:42:11:e1:4a:43:48:ce:
15:50:ac:f6:4e:db:4c:25:ff:7f:82:07:f7:51:49:
20:40:e7:26:dc:36:b3:d7:07:6d:4e:2d:04:d2:60:
d4:0f:2f:49:dc:cd:7d:3a:e0:53:a7:13:65:78:d4:
cf:4f:e3:61:63:09:74:d3:28:eb:dc:16:4e:1a:f9:
f2:a8:c7:01:3a:dd:c4:ca:36:23:a8:9f:6f:91:16:
7f:25:27:3f:fe:de:d4:79:0a:eb:71:62:8c:2d:05:
2f:22:fd:bc:25:6b:27:c1:32:fa:57:28:fa:a1:7b:
17:b6:33:da:04:28:17:b1:b8:14:54:ae:2d:2e:27:
3d:d1:90:00:a8:69:f7:ae:d6:a0:89:47:28:41:1f:
5b:60:7b:0e:24:eb:8a:dc:6f:57:2d:59:ec:4a:db:
f9:9e:ad:f2:1f:d4:1c:55:3f:11:5c:a4:17:45:7e:
ef:e4:35:9c:1a:7f:16:1e:55:dc:a1:fb:f6:aa:fe:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:33:4B:CE:1F:E6:E5:E7:3F:16:4C:DF:1C:44:7B:CF:FB:34:6E:D7
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4f:8d:61:9b:aa:b7:de:35:e4:1a:79:b9:97:b6:e3:1d:30:
51:39:bb:38:85:68:ee:a3:fb:83:7a:ff:e5:53:42:8b:6f:54:
d3:b7:93:78:6d:a2:ff:54:f0:93:fd:ae:cc:39:f5:94:d8:65:
6c:99:fa:ed:a4:ba:d7:6b:00:5f:ae:c0:48:da:86:60:df:a9:
07:4b:44:87:85:b0:02:5d:b2:ce:bd:03:dd:12:50:70:eb:85:
43:e5:d4:35:2e:36:fd:f5:d6:8f:ab:af:f3:e5:c0:0c:47:51:
9b:68:c1:76:08:f1:ab:27:3a:29:0b:9a:5e:6b:09:91:0e:a1:
63:e0:9c:44:d0:a4:65:2b:9a:59:2e:23:a0:2e:66:8b:ce:61:
ee:33:81:4f:de:36:02:14:53:8a:e6:d6:e0:65:42:94:90:62:
b5:35:d2:73:9f:28:23:16:f5:1b:b6:96:fa:e3:13:da:7a:73:
a5:5b:e3:4c:42:2d:b3:c2:b1:f5:8f:22:2f:70:92:a3:73:a3:
d3:26:b1:fa:6f:69:0b:e9:97:c1:69:7c:82:ad:08:05:f7:ea:
7c:8b:3c:4b:5a:35:7e:4b:90:c8:51:ce:9b:37:42:22:dc:79:
2f:62:f0:3d:e1:93:32:bf:4a:71:ac:5f:e0:52:74:a4:d0:fb:
c0:dc:c1:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyHqzem28TSxlsx5N2fTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZmExYTBhODhiYmI1NGIzZjgyZmMyNTk3ZDI1MmFmZjc2
MTNiYzUwHhcNMjYwOTIzMTUwMDQwWhcNMjYwOTI0MTUwMDQwWjAzMTEwLwYDVQQD
Eyg1NDMzNGJjZTFmZTZlNWU3M2YxNjRjZGYxYzQ0N2JjZmZiMzQ2ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM+dJr0i/A1Mhc9OQq/iW4Zcx+qR
XkcZ73PyWfnLKFbAbZ1IXNaKKNKm+ppGK0jyxNcqlGgdq5jzXkBzQoWyY1eou0IR
4UpDSM4VUKz2TttMJf9/ggf3UUkgQOcm3Daz1wdtTi0E0mDUDy9J3M19OuBTpxNl
eNTPT+NhYwl00yjr3BZOGvnyqMcBOt3EyjYjqJ9vkRZ/JSc//t7UeQrrcWKMLQUv
Iv28JWsnwTL6Vyj6oXsXtjPaBCgXsbgUVK4tLic90ZAAqGn3rtagiUcoQR9bYHsO
JOuK3G9XLVnsStv5nq3yH9QcVT8RXKQXRX7v5DWcGn8WHlXcofv2qv6SpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQzS84f5uXnPxZM3xxEe8/7NG7XMB8GA1UdIwQY
MBaAFOP6GgqIu7VLP4L8JZfSUq/3YTvFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUt
NDY4M2JmZWQwMDM4LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2FjMzItYWZjZi00ZTI4LWFiZmUtNDY4M2JmZWQwMDM4
LzEvNF9vYUNvaTd0VXNfZ3Z3bGw5SlNyX2RoTzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0+NYZuq
t9415Bp5uZe24x0wUTm7OIVo7qP7g3r/5VNCi29U07eTeG2i/1Twk/2uzDn1lNhl
bJn67aS612sAX67ASNqGYN+pB0tEh4WwAl2yzr0D3RJQcOuFQ+XUNS42/fXWj6uv
8+XADEdRm2jBdgjxqyc6KQuaXmsJkQ6hY+CcRNCkZSuaWS4joC5mi85h7jOBT942
AhRTiubW4GVClJBitTXSc58oIxb1G7aW+uMT2npzpVvjTEIts8Kx9Y8iL3CSo3Oj
0yax+m9pC+mXwWl8gq0IBffqfIs8S1o1fkuQyFHOmzdCItx5L2LwPeGTMr9Kcaxf
4FJ0pND7wNzBTA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:23:13 2026 by rpki-client