Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
File: 4BpLB7xMpvoFciL96uhg9kRAR-A.mft (raw, json)
Hash identifier: AjTsSMd62jVtt6EaXpxENblUrsJ2/gzTHlxY+dYPhiQ=
Subject key identifier: 6D:BD:69:52:B8:46:0B:77:10:97:1B:B9:02:BC:85:F6:9A:E4:4D:09
Authority key identifier: E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0
Certificate issuer: /CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
Certificate serial: 01A0EA40B2ABC148DAC0EF78067560C8C1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
Manifest number: 084A
Signing time: Mon 28 Sep 2026 23:01:43 +0000
Manifest this update: Mon 28 Sep 2026 23:01:43 +0000
Manifest next update: Tue 29 Sep 2026 23:01:43 +0000
Files and hashes: 1: 4BpLB7xMpvoFciL96uhg9kRAR-A.crl (hash: GOGiARdujDUtahQRH0OesceH5mCCNFPjbCyOEtEDvdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:b2:ab:c1:48:da:c0:ef:78:06:75:60:c8:c1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01a4b07bc4ca6fa057222fdeae860f6444047e0
Validity
Not Before: Sep 28 23:01:43 2026 GMT
Not After : Sep 29 23:01:43 2026 GMT
Subject: CN=6dbd6952b8460b7710971bb902bc85f69ae44d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:66:fc:e2:bb:79:cc:d7:0e:2d:7a:6b:09:
7b:19:c0:8a:e6:cf:2e:dc:23:f3:cc:70:03:30:5d:
86:77:4e:8f:29:97:41:f0:fb:bc:7b:cb:cc:18:2c:
ac:ff:15:da:5f:8a:9c:4f:57:64:dc:6a:5b:52:cd:
08:6c:13:7d:a5:fa:aa:80:fa:e3:16:b1:7b:fd:89:
e8:45:32:26:66:18:be:2d:57:c5:80:7b:bb:5c:e6:
c5:00:ca:62:6b:87:38:52:27:96:8d:f3:83:e5:6f:
f6:07:50:5a:fb:10:ef:c8:46:18:79:34:ee:10:3c:
0f:64:be:6c:d6:a5:ea:b5:f6:c9:a1:e4:b7:67:5b:
82:b5:d2:5e:0d:99:8c:df:01:e3:34:1e:e0:bb:ca:
4c:78:cc:8d:9e:90:b5:7b:d5:15:d0:9a:0d:a7:f8:
eb:a1:9b:d8:fa:d4:93:07:93:19:54:64:e0:70:d3:
03:c3:8d:90:1a:d6:ff:e3:2f:3c:ae:cf:66:2e:c6:
46:c9:0a:2b:15:a3:2e:2a:84:16:a9:8a:c4:d8:82:
f6:58:48:17:a2:e1:42:f8:7a:8e:d8:04:71:c8:e9:
59:f0:1e:f5:8a:38:71:28:53:51:12:b0:c4:08:98:
c3:3b:a7:63:dc:52:d6:0b:68:27:08:e5:e4:2d:92:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BD:69:52:B8:46:0B:77:10:97:1B:B9:02:BC:85:F6:9A:E4:4D:09
X509v3 Authority Key Identifier:
keyid:E0:1A:4B:07:BC:4C:A6:FA:05:72:22:FD:EA:E8:60:F6:44:40:47:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BpLB7xMpvoFciL96uhg9kRAR-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/944c8f-f0f8-4c71-9ede-7a3c532d3a55/1/4BpLB7xMpvoFciL96uhg9kRAR-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:98:bd:ba:44:dc:69:f4:48:73:a3:2b:03:b4:13:66:5f:63:
64:4d:49:9d:24:6a:2f:9e:0d:3e:90:8e:f7:7b:41:09:76:cb:
44:46:0a:0b:99:29:ba:47:6f:a9:36:3c:d8:9d:0e:d8:b4:f8:
f3:f2:f5:62:f2:c9:3e:73:02:39:e0:22:57:23:c2:e2:7c:10:
8f:ad:d0:e3:02:09:cc:23:f2:e5:de:2b:6a:36:52:ae:7c:8e:
fb:5a:73:e8:07:a8:cf:38:9b:b5:fd:0d:00:b0:22:bf:a5:e7:
62:a7:38:61:d9:bf:33:9b:a5:5e:ac:4e:ce:3c:d9:25:49:1b:
86:3f:27:46:80:44:d2:7d:e7:f8:b1:59:2a:34:ec:0f:96:25:
c1:31:93:82:2d:33:05:8a:60:99:44:d3:7a:18:8d:0d:10:ab:
b8:30:55:60:1f:30:85:06:ec:dd:f7:c3:41:f3:cc:3a:bd:ab:
3c:b2:39:fe:54:83:63:72:c4:5b:d4:b2:d0:a6:b9:8e:43:2d:
4d:c0:4f:ab:1c:4d:40:2e:79:87:7a:e7:4e:0f:28:04:5c:2d:
85:39:d2:f6:9f:d2:b6:23:30:aa:cb:24:92:7d:6e:15:13:8d:
ee:1a:48:27:fa:a9:51:b8:56:db:13:dd:f4:5e:13:2b:0c:ae:
97:8f:d7:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqQLKrwUjawO94BnVgyMGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWE0YjA3YmM0Y2E2ZmEwNTcyMjJmZGVhZTg2MGY2NDQ0
MDQ3ZTAwHhcNMjYwOTI4MjMwMTQzWhcNMjYwOTI5MjMwMTQzWjAzMTEwLwYDVQQD
Eyg2ZGJkNjk1MmI4NDYwYjc3MTA5NzFiYjkwMmJjODVmNjlhZTQ0ZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaxm/OK7eczXDi16awl7GcCK5s8u
3CPzzHADMF2Gd06PKZdB8Pu8e8vMGCys/xXaX4qcT1dk3GpbUs0IbBN9pfqqgPrj
FrF7/YnoRTImZhi+LVfFgHu7XObFAMpia4c4UieWjfOD5W/2B1Ba+xDvyEYYeTTu
EDwPZL5s1qXqtfbJoeS3Z1uCtdJeDZmM3wHjNB7gu8pMeMyNnpC1e9UV0JoNp/jr
oZvY+tSTB5MZVGTgcNMDw42QGtb/4y88rs9mLsZGyQorFaMuKoQWqYrE2IL2WEgX
ouFC+HqO2ARxyOlZ8B71ijhxKFNRErDECJjDO6dj3FLWC2gnCOXkLZJXMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG29aVK4Rgt3EJcbuQK8hfaa5E0JMB8GA1UdIwQY
MBaAFOAaSwe8TKb6BXIi/eroYPZEQEfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJwTEI3eE1wdm9GY2lMOTZ1aGc5a1JBUi1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NDRjOGYtZjBmOC00YzcxLTllZGUt
N2EzYzUzMmQzYTU1LzEvNEJwTEI3eE1wdm9GY2lMOTZ1aGc5a1JBUi1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85NDRjOGYtZjBmOC00YzcxLTllZGUtN2EzYzUzMmQzYTU1
LzEvNEJwTEI3eE1wdm9GY2lMOTZ1aGc5a1JBUi1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZi9ukTc
afRIc6MrA7QTZl9jZE1JnSRqL54NPpCO93tBCXbLREYKC5kpukdvqTY82J0O2LT4
8/L1YvLJPnMCOeAiVyPC4nwQj63Q4wIJzCPy5d4rajZSrnyO+1pz6Aeozzibtf0N
ALAiv6XnYqc4Ydm/M5ulXqxOzjzZJUkbhj8nRoBE0n3n+LFZKjTsD5YlwTGTgi0z
BYpgmUTTehiNDRCruDBVYB8whQbs3ffDQfPMOr2rPLI5/lSDY3LEW9Sy0Ka5jkMt
TcBPqxxNQC55h3rnTg8oBFwthTnS9p/StiMwqsskkn1uFRON7hpIJ/qpUbhW2xPd
9F4TKwyul4/Xmw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:49:49 2026 by rpki-client