Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: v2LgY252McJC+o49rBZtvPcIz+RqYG9bzVgjw2HlAys=
Subject key identifier: 71:25:0B:3F:67:D1:CA:1E:0F:DC:F9:99:68:C4:FA:D9:53:D4:7B:73
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 01A0C96B423E5CC553F4824DBECBA270314D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1878
Signing time: Tue 22 Sep 2026 14:00:44 +0000
Manifest this update: Tue 22 Sep 2026 14:00:44 +0000
Manifest next update: Wed 23 Sep 2026 14:00:44 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: O2Cr19XPDaXorwRYWBhNS0z/3FNXXTEzZ760gt0orjo=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:42:3e:5c:c5:53:f4:82:4d:be:cb:a2:70:31:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Sep 22 14:00:44 2026 GMT
Not After : Sep 23 14:00:44 2026 GMT
Subject: CN=71250b3f67d1ca1e0fdcf99968c4fad953d47b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:ac:00:98:9f:98:a2:15:e9:df:bb:d8:ec:
68:d7:34:fa:36:3d:b2:43:6a:46:a8:f7:fd:de:5c:
73:06:0b:07:1b:1e:92:6c:3f:11:51:94:a3:47:2d:
ed:6d:e9:dd:d2:24:75:6f:c3:fa:5f:73:1c:18:1a:
2e:6e:11:dc:1f:a0:ab:be:b6:b3:c5:99:c2:ed:4d:
96:de:23:7d:42:66:66:64:3b:2b:3c:e8:3a:bf:a4:
4f:14:1a:44:e9:68:3c:cf:50:09:07:f3:ae:75:60:
96:6c:5f:dc:e9:07:fa:5c:06:99:ee:c4:45:c4:75:
ea:41:fc:f7:b6:52:61:f8:21:dc:ab:c9:99:bd:e5:
79:14:bc:16:b6:aa:59:4a:5c:6e:8b:f0:26:49:02:
d1:dd:d3:03:eb:90:87:2d:f8:3e:01:4b:ac:45:3f:
85:9e:05:06:50:e0:39:61:84:bc:6d:4a:b6:37:44:
ba:07:19:e4:c8:a5:49:c4:e6:fa:50:c9:9e:44:a8:
8c:af:85:1b:c3:55:e8:03:5a:bb:17:fa:ba:6b:c5:
1c:c9:f1:30:9e:84:7f:27:e6:a0:22:b5:28:a4:5c:
f4:f4:8b:d7:e9:d2:de:f7:10:66:fc:24:80:33:d0:
d5:1f:d9:2e:bc:34:84:cc:ea:1a:5f:9b:a7:9c:5d:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:0B:3F:67:D1:CA:1E:0F:DC:F9:99:68:C4:FA:D9:53:D4:7B:73
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7c:6a:70:ca:1b:b7:54:7c:f3:7f:20:c5:59:77:95:61:f3:
ef:dd:5b:37:a3:aa:5c:7c:41:50:99:42:f0:91:2b:61:1d:b0:
03:d9:81:88:3d:53:13:c2:ea:88:aa:ab:2c:d8:6d:eb:63:45:
8e:7b:f5:c1:b7:34:50:6e:a0:b6:80:b2:9d:04:12:df:89:19:
a8:87:24:4c:80:41:18:26:7b:ea:fd:7f:cc:ae:54:16:26:83:
84:b0:33:da:90:85:ed:7c:85:dd:11:8a:35:68:a1:68:fa:d9:
19:46:c2:c6:a8:30:80:25:f9:b2:f5:2e:2f:0d:89:d6:07:ac:
56:98:9f:f0:a5:a5:b5:b9:8d:c5:39:79:45:1d:54:81:10:9c:
12:61:1d:cd:b9:6a:f7:6a:a8:40:c5:32:19:48:3a:24:30:af:
d7:05:8a:ff:a8:98:9c:ad:10:4a:1d:44:7c:d6:ce:f6:a4:31:
67:37:45:44:34:9b:16:5c:ae:27:41:20:af:09:fe:1b:2c:fe:
89:1d:c2:b4:64:43:ac:1f:b3:a3:3d:9c:cb:fa:56:96:c0:36:
f7:d2:10:4f:c4:d0:68:a1:df:72:6e:05:d7:ac:df:25:97:c9:
e5:61:f1:f0:51:64:0a:5a:0d:62:ad:7a:94:12:05:35:90:5c:
51:d5:5d:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa0I+XMVT9IJNvsuicDFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjUzNmQyYjE3YzQ1YzE3NTczOWYzMzEzMTE5YmUyMTlk
MzMxYWMwHhcNMjYwOTIyMTQwMDQ0WhcNMjYwOTIzMTQwMDQ0WjAzMTEwLwYDVQQD
Eyg3MTI1MGIzZjY3ZDFjYTFlMGZkY2Y5OTk2OGM0ZmFkOTUzZDQ3YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5WsAJifmKIV6d+72Oxo1zT6Nj2y
Q2pGqPf93lxzBgsHGx6SbD8RUZSjRy3tbend0iR1b8P6X3McGBoubhHcH6Crvraz
xZnC7U2W3iN9QmZmZDsrPOg6v6RPFBpE6Wg8z1AJB/OudWCWbF/c6Qf6XAaZ7sRF
xHXqQfz3tlJh+CHcq8mZveV5FLwWtqpZSlxui/AmSQLR3dMD65CHLfg+AUusRT+F
ngUGUOA5YYS8bUq2N0S6BxnkyKVJxOb6UMmeRKiMr4Ubw1XoA1q7F/q6a8UcyfEw
noR/J+agIrUopFz09IvX6dLe9xBm/CSAM9DVH9kuvDSEzOoaX5unnF0w2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHElCz9n0coeD9z5mWjE+tlT1HtzMB8GA1UdIwQY
MBaAFOBlNtKxfEXBdXOfMxMRm+IZ0zGsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEt
MDZjOGJiMzc0YTU4LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82ZTQzYjktYzZhNy00ZDUxLTgwNjEtMDZjOGJiMzc0YTU4
LzEvNEdVMjByRjhSY0YxYzU4ekV4R2I0aG5UTWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3xqcMob
t1R8838gxVl3lWHz791bN6OqXHxBUJlC8JErYR2wA9mBiD1TE8LqiKqrLNht62NF
jnv1wbc0UG6gtoCynQQS34kZqIckTIBBGCZ76v1/zK5UFiaDhLAz2pCF7XyF3RGK
NWihaPrZGUbCxqgwgCX5svUuLw2J1gesVpif8KWltbmNxTl5RR1UgRCcEmEdzblq
92qoQMUyGUg6JDCv1wWK/6iYnK0QSh1EfNbO9qQxZzdFRDSbFlyuJ0Egrwn+Gyz+
iR3CtGRDrB+zoz2cy/pWlsA299IQT8TQaKHfcm4F16zfJZfJ5WHx8FFkCloNYq16
lBIFNZBcUdVdLg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:18:35 2026 by rpki-client