Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier: KMjyO3G2i+YNZpA/w4Aq5hbgNI/dQT1DeUHL5sQzMwk=
Subject key identifier: A4:77:EA:DD:7F:CB:7A:81:2E:03:83:28:3A:7D:6D:03:7C:1A:DA:E0
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial: 01A0C1B1FFEDFA9090E383929EEB2D2A322E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number: 0DA7
Signing time: Mon 21 Sep 2026 02:01:03 +0000
Manifest this update: Mon 21 Sep 2026 02:01:03 +0000
Manifest next update: Tue 22 Sep 2026 02:01:03 +0000
Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: YVS1bFWmXl8dUstC+DfAHswbrjowsMm7tRdeZj9LMX4=)
2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:ff:ed:fa:90:90:e3:83:92:9e:eb:2d:2a:32:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Validity
Not Before: Sep 21 02:01:03 2026 GMT
Not After : Sep 22 02:01:03 2026 GMT
Subject: CN=a477eadd7fcb7a812e0383283a7d6d037c1adae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:45:8f:63:c0:3a:ff:b1:18:dd:49:b7:11:
a3:41:c4:0f:3f:6e:25:ae:70:7c:c4:77:3c:6b:41:
66:fb:bc:42:c9:2a:a4:9c:b3:6f:f7:4b:c0:cf:ab:
da:57:53:18:ed:51:12:33:3c:86:e6:84:f6:aa:69:
b8:49:2e:bb:56:16:10:b8:05:56:a8:6b:cb:7d:75:
7a:03:d7:b6:59:54:52:44:ef:04:9d:1d:03:dd:44:
d7:ed:4f:00:eb:32:4c:6d:7a:65:50:c1:75:a9:13:
85:32:ed:8b:78:f5:ed:d9:df:b3:fd:0b:28:7c:57:
46:1f:1f:1f:57:f0:a1:68:02:25:ca:72:05:14:ef:
b7:0b:ba:3b:35:d4:80:05:ae:49:49:c8:36:19:b3:
de:d7:3f:73:71:8f:75:22:33:d0:25:1a:36:9e:f4:
b4:6f:df:f3:23:75:9d:f7:d3:56:8a:7c:d7:13:84:
6f:63:92:41:a5:32:f7:49:8e:f2:83:c6:9e:19:8d:
ac:65:89:ab:ac:73:b4:5d:0d:85:19:48:8b:e6:7f:
be:34:f0:84:6e:29:3e:33:be:8a:48:d0:53:ac:bf:
ec:24:a5:ba:f2:1d:74:52:55:6a:b2:65:3e:3c:f1:
9b:a8:e3:10:ed:8e:ea:52:95:ae:dd:69:66:c7:97:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:EA:DD:7F:CB:7A:81:2E:03:83:28:3A:7D:6D:03:7C:1A:DA:E0
X509v3 Authority Key Identifier:
keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:51:63:83:5c:63:4e:b4:51:28:d5:26:f7:ed:86:8c:f4:e0:
10:61:75:49:ce:56:d5:b3:d2:9e:76:be:65:12:a1:43:e9:51:
fb:7d:24:c9:66:c1:ca:36:04:ca:7c:5a:37:6b:a1:95:5b:38:
0a:ad:43:4d:45:1b:70:8d:1a:58:17:24:2d:7b:7a:17:6d:67:
ab:cc:a8:f1:a5:cc:13:c7:15:15:74:b2:1a:e7:a8:3e:fa:95:
76:cd:59:49:01:00:4e:b9:40:6b:04:00:47:17:69:92:c3:12:
4e:76:68:30:f4:23:e2:89:48:a4:f2:11:56:2f:0b:3d:54:b3:
c0:79:e1:f3:77:54:9a:cf:f3:48:2f:31:a1:4c:a2:99:71:61:
c4:74:fd:cb:4a:03:8f:03:91:95:7e:fd:58:f1:93:66:ca:26:
93:12:17:68:90:1a:88:2f:e3:fe:93:62:bf:2d:20:2e:e2:fe:
99:c7:fa:51:ff:82:44:e8:69:f5:b6:63:30:50:1a:8f:dc:da:
1c:e2:54:8c:3d:34:09:ac:91:48:75:0c:e7:f8:84:c7:25:02:
1d:38:ad:5e:b8:92:ff:b5:fe:11:6a:ee:f3:74:c3:d1:bd:7b:
bb:d4:55:3c:80:1e:c4:fb:79:17:5f:39:3a:eb:1d:61:49:e3:
6e:e9:1f:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsf/t+pCQ44OSnustKjIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTJhYjBhMjc1YTJkMDRmMWUyNjM1YWIyYzc3ZWIzYWU2
MDM4Y2MwHhcNMjYwOTIxMDIwMTAzWhcNMjYwOTIyMDIwMTAzWjAzMTEwLwYDVQQD
EyhhNDc3ZWFkZDdmY2I3YTgxMmUwMzgzMjgzYTdkNmQwMzdjMWFkYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp59Fj2PAOv+xGN1JtxGjQcQPP24l
rnB8xHc8a0Fm+7xCySqknLNv90vAz6vaV1MY7VESMzyG5oT2qmm4SS67VhYQuAVW
qGvLfXV6A9e2WVRSRO8EnR0D3UTX7U8A6zJMbXplUMF1qROFMu2LePXt2d+z/Qso
fFdGHx8fV/ChaAIlynIFFO+3C7o7NdSABa5JScg2GbPe1z9zcY91IjPQJRo2nvS0
b9/zI3Wd99NWinzXE4RvY5JBpTL3SY7yg8aeGY2sZYmrrHO0XQ2FGUiL5n++NPCE
bik+M76KSNBTrL/sJKW68h10UlVqsmU+PPGbqOMQ7Y7qUpWu3Wlmx5dIVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR36t1/y3qBLgODKDp9bQN8GtrgMB8GA1UdIwQY
MBaAFOKiqwonWi0E8eJjWrLHfrOuYDjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMt
N2U0N2RhMWNlNDA2LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81NWQ5MmMtZDNlMi00ZGExLThkNTMtN2U0N2RhMWNlNDA2
LzEvNHFLckNpZGFMUVR4NG1OYXNzZC1zNjVnT013LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFFjg1xj
TrRRKNUm9+2GjPTgEGF1Sc5W1bPSnna+ZRKhQ+lR+30kyWbByjYEynxaN2uhlVs4
Cq1DTUUbcI0aWBckLXt6F21nq8yo8aXME8cVFXSyGueoPvqVds1ZSQEATrlAawQA
RxdpksMSTnZoMPQj4olIpPIRVi8LPVSzwHnh83dUms/zSC8xoUyimXFhxHT9y0oD
jwORlX79WPGTZsomkxIXaJAaiC/j/pNivy0gLuL+mcf6Uf+CROhp9bZjMFAaj9za
HOJUjD00CayRSHUM5/iExyUCHTitXriS/7X+EWru83TD0b17u9RVPIAexPt5F185
OusdYUnjbukfEg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:39 2026 by rpki-client