Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File: 4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier: huNIKZQTRYlDMleQvhNC9g/JXJcY4ND5EntG1Dqtdw4=
Subject key identifier: 23:7F:D2:A2:7D:00:5B:31:E8:ED:6C:29:E3:78:7E:A0:BF:69:F7:7E
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial: 01A103FFEF91F7B24006FCE3462BB7407120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number: 0F51
Signing time: Sat 03 Oct 2026 23:01:06 +0000
Manifest this update: Sat 03 Oct 2026 23:01:06 +0000
Manifest next update: Sun 04 Oct 2026 23:01:06 +0000
Files and hashes: 1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: 5ZW5pF7gFEeZEy4CluPG+wDJpgf1GjobzN4ZIKLWyO4=)
2: WmLHmdZMxDOKlC1Fqsc3FlKEnfY.asa (hash: m/8JCGEVFLwz3ghFyicJoK6G6xzZBUtlwCYggVSvDxc=)
3: XexrTT-WjOfF1IH0hIaeXZfiLag.roa (hash: HDA8bu6O9RqOeUyNIrj9FwIn/BuM4ZQvluzThKczOzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:ff:ef:91:f7:b2:40:06:fc:e3:46:2b:b7:40:71:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Validity
Not Before: Oct 3 23:01:06 2026 GMT
Not After : Oct 4 23:01:06 2026 GMT
Subject: CN=237fd2a27d005b31e8ed6c29e3787ea0bf69f77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:5f:15:d9:00:2c:06:46:6b:29:c7:6e:f8:
de:dc:c7:86:bf:91:c6:68:c7:3e:68:12:f3:aa:34:
8a:bd:ba:2d:5f:be:9b:b1:79:22:be:2a:29:53:da:
c0:00:06:50:85:ef:8d:1d:0f:0e:2d:6b:6f:e0:91:
9c:c7:cb:d9:0b:9c:1a:7f:63:7c:a0:22:76:3f:58:
1c:24:de:d9:41:71:b4:bf:8a:7b:f1:3a:69:a7:18:
61:c9:a5:c9:04:4a:b0:b3:ee:c3:e9:16:70:6b:e0:
b0:02:d5:70:db:c0:7a:03:88:88:3c:03:b7:4c:b1:
47:3b:e1:65:5d:03:89:9c:54:cb:7f:70:30:81:97:
3c:7e:63:b4:a3:04:a4:02:9b:a8:ff:87:38:9f:bc:
78:81:c7:a7:42:18:44:ba:19:54:a7:34:2c:5d:38:
35:16:0d:5e:1f:a9:ff:6e:ac:fb:8b:3d:a6:37:e1:
94:eb:2a:2e:40:3f:0c:9d:8c:0a:ad:6b:23:9a:f3:
5b:6b:fe:8b:81:0d:2c:e6:1e:0f:ac:02:49:76:c4:
97:b5:ac:ab:49:f4:ed:8d:8a:fe:9e:9e:27:79:a5:
55:93:b4:b3:5d:7f:86:f2:a8:e3:96:27:26:0a:1f:
62:23:8c:15:1b:7a:e2:eb:1d:22:2b:4a:17:16:2d:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:D2:A2:7D:00:5B:31:E8:ED:6C:29:E3:78:7E:A0:BF:69:F7:7E
X509v3 Authority Key Identifier:
keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ba:12:34:cb:d1:65:8e:27:4b:56:38:66:99:7a:85:71:3a:
16:ea:5e:18:4a:84:6c:f1:2f:74:bb:69:e0:c7:b0:0a:4a:18:
da:86:c8:38:d2:67:25:57:2e:a3:36:a6:08:dd:3e:ac:28:d5:
8a:af:e2:25:f7:b1:6d:93:d7:ce:9e:b4:2a:4b:a5:c6:cb:fe:
f8:01:c4:8c:28:f7:e2:d4:7a:5f:a5:fb:99:fb:8c:de:8d:44:
5e:cd:31:29:53:17:cf:52:66:95:a0:43:70:30:71:22:3a:97:
84:58:59:fe:16:3f:10:d2:07:e3:b3:de:6a:a8:c5:c5:92:79:
88:1e:c3:a2:db:06:ce:65:b8:49:e4:e9:ba:bd:37:fa:c2:e2:
ea:a9:96:ce:37:80:fe:ff:f7:ea:1f:9c:80:39:68:a8:24:9c:
0d:72:f8:08:88:c5:71:9b:43:47:d5:bc:73:7d:a5:b3:d2:87:
6c:4a:04:35:a9:79:bd:88:c6:bb:3d:d9:83:13:c5:3d:02:92:
a1:ba:2a:f7:43:64:96:e0:6a:f7:66:fe:ae:e0:0e:2c:cb:b1:
72:0e:91:36:65:f6:e7:8a:98:ae:28:a0:e4:34:27:20:1e:55:
c4:fc:df:51:7d:b9:6f:b1:aa:7b:36:d4:40:1f:27:75:38:77:
da:ff:68:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaED/++R97JABvzjRiu3QHEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDA3YTc2OTZmMDc5ODQxNDMwNTRkNDExZTNjYTVmMTgz
NmVjZDQwHhcNMjYxMDAzMjMwMTA2WhcNMjYxMDA0MjMwMTA2WjAzMTEwLwYDVQQD
EygyMzdmZDJhMjdkMDA1YjMxZThlZDZjMjllMzc4N2VhMGJmNjlmNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqstfFdkALAZGaynHbvje3MeGv5HG
aMc+aBLzqjSKvbotX76bsXkiviopU9rAAAZQhe+NHQ8OLWtv4JGcx8vZC5waf2N8
oCJ2P1gcJN7ZQXG0v4p78TpppxhhyaXJBEqws+7D6RZwa+CwAtVw28B6A4iIPAO3
TLFHO+FlXQOJnFTLf3AwgZc8fmO0owSkApuo/4c4n7x4gcenQhhEuhlUpzQsXTg1
Fg1eH6n/bqz7iz2mN+GU6youQD8MnYwKrWsjmvNba/6LgQ0s5h4PrAJJdsSXtayr
SfTtjYr+np4neaVVk7SzXX+G8qjjlicmCh9iI4wVG3ri6x0iK0oXFi11HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCN/0qJ9AFsx6O1sKeN4fqC/afd+MB8GA1UdIwQY
MBaAFOJAenaW8HmEFDBU1BHjyl8YNuzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQt
ZjBiMmRkMDdmNzI3LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQtZjBiMmRkMDdmNzI3
LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLoSNMvR
ZY4nS1Y4Zpl6hXE6FupeGEqEbPEvdLtp4MewCkoY2obIONJnJVcuozamCN0+rCjV
iq/iJfexbZPXzp60Kkulxsv++AHEjCj34tR6X6X7mfuM3o1EXs0xKVMXz1JmlaBD
cDBxIjqXhFhZ/hY/ENIH47PeaqjFxZJ5iB7DotsGzmW4SeTpur03+sLi6qmWzjeA
/v/36h+cgDloqCScDXL4CIjFcZtDR9W8c32ls9KHbEoENal5vYjGuz3ZgxPFPQKS
oboq90NkluBq92b+ruAOLMuxcg6RNmX254qYriig5DQnIB5VxPzfUX25b7GqezbU
QB8ndTh32v9oDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:30:12 2026 by rpki-client