
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
File: 4KM3CoQbiT57aPhqOTNjWC4QVkg.mft (raw, json)
Hash identifier: MMUzXaTbQVAQEMyVu2Lo3KFUEneknYROhMXmVItmWcA=
Subject key identifier: C1:32:1A:C6:00:7C:15:0E:7A:26:90:A9:69:B5:C4:7F:39:41:68:56
Authority key identifier: E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48
Certificate issuer: /CN=e0a3370a841b893e7b68f86a393363582e105648
Certificate serial: 01A0DBAA02D83D0D6DDD68850631B96F0F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
Manifest number: 0F4B
Signing time: Sat 26 Sep 2026 03:02:27 +0000
Manifest this update: Sat 26 Sep 2026 03:02:27 +0000
Manifest next update: Sun 27 Sep 2026 03:02:27 +0000
Files and hashes: 1: 4KM3CoQbiT57aPhqOTNjWC4QVkg.crl (hash: 9nev7Y/K/7t0A/rpfTYjc5cBTlNXui0oXSCOdMO7tC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:aa:02:d8:3d:0d:6d:dd:68:85:06:31:b9:6f:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a3370a841b893e7b68f86a393363582e105648
Validity
Not Before: Sep 26 03:02:27 2026 GMT
Not After : Sep 27 03:02:27 2026 GMT
Subject: CN=c1321ac6007c150e7a2690a969b5c47f39416856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:b7:ec:8f:87:c5:ca:1e:1a:b3:f2:79:98:
17:92:a2:e9:b5:8b:3e:dc:18:dc:2e:ac:ce:ea:89:
31:b6:06:a0:49:5c:5c:2e:16:df:ff:03:0f:e4:76:
57:b4:0d:e1:5f:7d:cb:a2:c3:5c:ed:b7:af:75:54:
71:d0:77:b4:1e:21:e0:f6:71:f0:ce:13:3e:4e:3b:
da:8a:73:d3:d5:9a:4a:9d:7a:cf:2c:2b:5e:d7:3f:
23:f6:c0:0a:b7:dc:11:1d:bd:df:13:3f:75:96:8f:
fa:5e:ef:5f:b3:a8:df:eb:78:1e:42:21:0e:50:a3:
d1:40:67:ca:d6:62:31:eb:e8:7a:94:48:79:ba:73:
8e:5d:d9:82:8a:aa:d1:35:f7:35:1b:03:e5:42:67:
ef:08:ea:7b:3c:f6:95:2f:13:a6:ef:21:93:14:ca:
f9:bc:05:64:d1:16:18:41:82:87:88:23:2a:89:5a:
3d:38:8f:8f:12:2c:f0:f3:ea:13:50:8e:f1:37:3d:
05:dc:ca:ee:52:db:7b:5f:53:df:cc:3d:f6:5b:de:
58:93:b3:c4:2b:51:13:21:63:d2:f8:6a:35:a9:da:
c7:7f:b2:5d:20:57:e0:75:ac:c9:ba:0e:bd:28:84:
6b:5a:73:65:81:a3:b7:f5:4b:70:1b:44:4e:27:f5:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:1A:C6:00:7C:15:0E:7A:26:90:A9:69:B5:C4:7F:39:41:68:56
X509v3 Authority Key Identifier:
keyid:E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:81:30:46:69:b4:14:ea:e4:e8:cc:d9:b7:8f:1e:98:26:
6a:d7:f9:07:8e:bb:0a:32:6a:d5:98:5d:3a:c9:fd:8c:83:14:
66:fb:e0:e1:e9:f3:1c:6f:e8:2b:39:50:4b:3f:31:ab:86:08:
b0:15:0e:b7:39:b3:58:6c:8e:8e:02:b8:3d:33:25:13:b9:8e:
6a:73:41:4f:b4:41:c8:13:9b:b5:91:bd:53:72:84:f7:76:f2:
dc:01:15:d9:ba:27:fa:ef:20:32:71:d3:e2:01:f5:f5:ac:59:
95:0e:d5:4c:25:42:24:6a:15:2f:7a:80:84:8c:dd:6d:03:55:
b6:3c:d6:17:bb:f5:07:62:68:42:ee:50:23:16:f2:b1:2f:67:
12:a9:97:dd:b7:a1:0d:9e:7a:8a:26:0c:be:68:2f:04:09:db:
fe:8d:cc:0e:fb:11:e2:45:0b:04:41:80:29:e3:92:eb:02:56:
ab:06:fb:5f:71:15:6f:7a:48:bf:1d:7b:ac:bb:1f:54:a1:a7:
16:4e:bb:c0:38:ce:fe:e6:59:0e:22:95:96:cf:1c:32:5e:8b:
8c:a9:80:62:92:7f:f9:4b:7f:f5:c3:68:88:bf:7e:a0:fc:ed:
5e:2b:e5:0c:03:85:e3:b6:f7:69:6a:fb:80:48:26:c4:dc:ef:
46:7d:eb:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqgLYPQ1t3WiFBjG5bw+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTMzNzBhODQxYjg5M2U3YjY4Zjg2YTM5MzM2MzU4MmUx
MDU2NDgwHhcNMjYwOTI2MDMwMjI3WhcNMjYwOTI3MDMwMjI3WjAzMTEwLwYDVQQD
EyhjMTMyMWFjNjAwN2MxNTBlN2EyNjkwYTk2OWI1YzQ3ZjM5NDE2ODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOO37I+HxcoeGrPyeZgXkqLptYs+
3BjcLqzO6okxtgagSVxcLhbf/wMP5HZXtA3hX33LosNc7bevdVRx0He0HiHg9nHw
zhM+TjvainPT1ZpKnXrPLCte1z8j9sAKt9wRHb3fEz91lo/6Xu9fs6jf63geQiEO
UKPRQGfK1mIx6+h6lEh5unOOXdmCiqrRNfc1GwPlQmfvCOp7PPaVLxOm7yGTFMr5
vAVk0RYYQYKHiCMqiVo9OI+PEizw8+oTUI7xNz0F3MruUtt7X1PfzD32W95Yk7PE
K1ETIWPS+Go1qdrHf7JdIFfgdazJug69KIRrWnNlgaO39UtwG0ROJ/W0JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEyGsYAfBUOeiaQqWm1xH85QWhWMB8GA1UdIwQY
MBaAFOCjNwqEG4k+e2j4ajkzY1guEFZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtNM0NvUWJpVDU3YVBocU9UTmpXQzRRVmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85NTc0NmUtYmU1Mi00MmVlLTljYzgt
YzNlZGI0ZDhmNzFlLzEvNEtNM0NvUWJpVDU3YVBocU9UTmpXQzRRVmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85NTc0NmUtYmU1Mi00MmVlLTljYzgtYzNlZGI0ZDhmNzFl
LzEvNEtNM0NvUWJpVDU3YVBocU9UTmpXQzRRVmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBmBMEZp
tBTq5OjM2bePHpgmatf5B467CjJq1ZhdOsn9jIMUZvvg4enzHG/oKzlQSz8xq4YI
sBUOtzmzWGyOjgK4PTMlE7mOanNBT7RByBObtZG9U3KE93by3AEV2bon+u8gMnHT
4gH19axZlQ7VTCVCJGoVL3qAhIzdbQNVtjzWF7v1B2JoQu5QIxbysS9nEqmX3beh
DZ56iiYMvmgvBAnb/o3MDvsR4kULBEGAKeOS6wJWqwb7X3EVb3pIvx17rLsfVKGn
Fk67wDjO/uZZDiKVls8cMl6LjKmAYpJ/+Ut/9cNoiL9+oPztXivlDAOF47b3aWr7
gEgmxNzvRn3raw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:18:03 2026 by rpki-client