Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
File: 4xubYpkE1DhFESeFW1L4guvhYqo.mft (raw, json)
Hash identifier: mP1qt2rowYfNsFZ3XzDJMsNGp833fps7M52L4ZJEsz4=
Subject key identifier: D6:A9:E1:4D:E0:35:6F:81:71:B9:DF:40:6C:1E:5D:64:48:27:52:90
Authority key identifier: E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
Certificate issuer: /CN=e31b9b629904d438451127855b52f882ebe162aa
Certificate serial: 01A0C7468BF308A1FE2D032D8EB149C73E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
Manifest number: 1398
Signing time: Tue 22 Sep 2026 04:01:24 +0000
Manifest this update: Tue 22 Sep 2026 04:01:24 +0000
Manifest next update: Wed 23 Sep 2026 04:01:24 +0000
Files and hashes: 1: 4xubYpkE1DhFESeFW1L4guvhYqo.crl (hash: RX2T7GJblZGZwdx0B69Fz4u8WNfSnjfoRhJclQCz6lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:8b:f3:08:a1:fe:2d:03:2d:8e:b1:49:c7:3e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31b9b629904d438451127855b52f882ebe162aa
Validity
Not Before: Sep 22 04:01:24 2026 GMT
Not After : Sep 23 04:01:24 2026 GMT
Subject: CN=d6a9e14de0356f8171b9df406c1e5d6448275290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:5f:4a:e4:8f:fa:49:e8:7c:73:99:a6:f8:
34:1e:68:b8:f6:3b:ce:ed:5c:91:ba:9d:6b:7a:df:
a2:94:a2:6e:98:a3:f6:ff:4d:28:3b:be:a5:c5:e3:
26:be:e3:cb:e0:c0:31:32:c8:a2:79:32:54:12:e6:
46:af:ce:6a:1c:f7:10:d6:3e:17:5a:bd:d6:fe:b7:
26:8e:21:4e:9a:8b:e1:cb:99:8e:67:95:ed:d4:ea:
39:15:22:bc:fb:ae:53:7f:a5:64:cd:d6:54:7a:8c:
23:24:20:68:c9:7a:3d:6f:5a:ef:cf:06:b0:f6:9f:
d0:2c:71:6b:d1:99:43:e2:dd:54:c0:63:49:c2:76:
32:be:6b:4c:dd:70:cd:c5:0e:4d:03:b7:eb:e0:0a:
60:52:5c:1c:a6:2a:d8:58:4c:61:79:33:d9:6c:a1:
43:06:3e:fa:16:7c:0e:c2:d9:b5:11:62:1e:ea:92:
fc:b6:cb:e1:12:a3:1f:30:94:00:2e:82:28:63:81:
24:56:db:49:62:8b:a6:2a:90:33:98:e6:60:d9:8e:
6e:6a:eb:94:68:0f:cf:29:e0:22:2a:1a:4c:bd:f5:
d5:9f:5a:67:85:74:51:c4:f8:47:ac:46:ac:77:78:
a4:95:fa:a6:6a:2c:e2:d3:c8:a2:71:fc:64:d8:df:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:E1:4D:E0:35:6F:81:71:B9:DF:40:6C:1E:5D:64:48:27:52:90
X509v3 Authority Key Identifier:
keyid:E3:1B:9B:62:99:04:D4:38:45:11:27:85:5B:52:F8:82:EB:E1:62:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xubYpkE1DhFESeFW1L4guvhYqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfecaa-050d-409b-887e-ded7ad5a8870/1/4xubYpkE1DhFESeFW1L4guvhYqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9f:6a:40:97:c3:12:b5:55:f8:0f:3c:d8:ac:02:36:dc:93:
50:6f:e8:e7:03:5a:d8:42:ec:b7:de:4f:4f:d4:f6:c9:89:0e:
fe:e9:fe:2d:c9:bc:52:f7:a0:93:b7:be:83:9f:aa:37:c8:e2:
98:53:67:c0:59:af:ea:74:de:eb:f8:5e:80:1f:84:0d:a3:25:
eb:59:b4:70:c2:44:b9:65:af:59:23:d5:9d:3f:59:55:71:18:
0a:59:9e:2f:c8:9c:8e:38:22:26:35:c3:9e:ee:8e:9d:ed:60:
c8:ad:cd:7f:2b:29:bc:93:62:cc:35:3e:47:49:04:5e:60:a8:
b0:24:4f:50:58:08:7c:24:4d:c8:2c:f9:da:c8:e2:5d:1c:c1:
e5:c6:10:33:d6:d1:a9:58:3d:bb:78:db:d0:1b:1c:23:85:df:
8d:75:14:10:6f:54:62:86:7a:76:dc:67:46:6e:e9:67:52:b8:
a8:7b:35:3c:26:f6:f1:26:3b:f3:23:62:db:a1:bb:31:fa:9b:
7f:03:13:0c:1a:4e:81:60:2b:f7:23:24:88:c3:cb:fc:d0:92:
65:48:69:5f:2a:37:d0:77:72:45:7a:14:d4:9a:d7:fe:52:8f:
98:1e:f5:fd:49:8d:81:eb:08:32:65:9f:41:f0:6d:8b:74:82:
73:9d:66:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRovzCKH+LQMtjrFJxz4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWI5YjYyOTkwNGQ0Mzg0NTExMjc4NTViNTJmODgyZWJl
MTYyYWEwHhcNMjYwOTIyMDQwMTI0WhcNMjYwOTIzMDQwMTI0WjAzMTEwLwYDVQQD
EyhkNmE5ZTE0ZGUwMzU2ZjgxNzFiOWRmNDA2YzFlNWQ2NDQ4Mjc1MjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZxfSuSP+knofHOZpvg0Hmi49jvO
7VyRup1ret+ilKJumKP2/00oO76lxeMmvuPL4MAxMsiieTJUEuZGr85qHPcQ1j4X
Wr3W/rcmjiFOmovhy5mOZ5Xt1Oo5FSK8+65Tf6VkzdZUeowjJCBoyXo9b1rvzwaw
9p/QLHFr0ZlD4t1UwGNJwnYyvmtM3XDNxQ5NA7fr4ApgUlwcpirYWExheTPZbKFD
Bj76FnwOwtm1EWIe6pL8tsvhEqMfMJQALoIoY4EkVttJYoumKpAzmOZg2Y5uauuU
aA/PKeAiKhpMvfXVn1pnhXRRxPhHrEasd3iklfqmaizi08iicfxk2N+kfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNap4U3gNW+BcbnfQGweXWRIJ1KQMB8GA1UdIwQY
MBaAFOMbm2KZBNQ4RREnhVtS+ILr4WKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHh1Yllwa0UxRGhGRVNlRlcxTDRndXZoWXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kZmVjYWEtMDUwZC00MDliLTg4N2Ut
ZGVkN2FkNWE4ODcwLzEvNHh1Yllwa0UxRGhGRVNlRlcxTDRndXZoWXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kZmVjYWEtMDUwZC00MDliLTg4N2UtZGVkN2FkNWE4ODcw
LzEvNHh1Yllwa0UxRGhGRVNlRlcxTDRndXZoWXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZ9qQJfD
ErVV+A882KwCNtyTUG/o5wNa2ELst95PT9T2yYkO/un+Lcm8Uvegk7e+g5+qN8ji
mFNnwFmv6nTe6/hegB+EDaMl61m0cMJEuWWvWSPVnT9ZVXEYClmeL8icjjgiJjXD
nu6One1gyK3NfyspvJNizDU+R0kEXmCosCRPUFgIfCRNyCz52sjiXRzB5cYQM9bR
qVg9u3jb0BscI4XfjXUUEG9UYoZ6dtxnRm7pZ1K4qHs1PCb28SY78yNi26G7Mfqb
fwMTDBpOgWAr9yMkiMPL/NCSZUhpXyo30HdyRXoU1JrX/lKPmB71/UmNgesIMmWf
QfBti3SCc51mtQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:14:34 2026 by rpki-client