Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: efbM42XylzzjXa5RJLoNtAl1rIZjQPYTJ/ReWyVwqcA=
Subject key identifier: A5:2C:DC:DF:E3:E1:DD:AF:2D:39:3D:B1:DA:DF:91:0C:20:3B:3D:B8
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 01A0F230E3E50404A8C581A4560CD428B0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 0938
Signing time: Wed 30 Sep 2026 12:01:25 +0000
Manifest this update: Wed 30 Sep 2026 12:01:25 +0000
Manifest next update: Thu 01 Oct 2026 12:01:25 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: 1R9efHW6pJ18pFhirQYnxpd7nYEb+PZSdtHDoNxEsQc=)
2: 6-2FD8HR51guZuZo3woN4IVR9zc.roa (hash: PJc3A8dXSGr4yP32dRfCtlI52+k/p1Mtsy/ZQcI6iOs=)
3: X7BmyTsEbGnFLW3J_leT1himypU.roa (hash: YLQzVzV/7MjHj/da8FwrBCVQuruzlxfvIrqTRIBeu1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:30:e3:e5:04:04:a8:c5:81:a4:56:0c:d4:28:b0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: Sep 30 12:01:25 2026 GMT
Not After : Oct 1 12:01:25 2026 GMT
Subject: CN=a52cdcdfe3e1ddaf2d393db1dadf910c203b3db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:a1:a8:bd:04:36:52:3f:e7:34:1f:6e:b5:
2f:4b:a4:e9:24:05:93:f4:3c:ca:01:91:61:f6:27:
26:f5:8c:39:7f:ce:a1:f0:ae:c7:cc:73:82:46:a4:
c0:44:b0:3d:19:ed:b4:c1:49:72:df:6f:a8:e6:9b:
a7:b8:b3:1f:ee:5e:b9:3c:05:04:f0:d4:1c:40:7b:
c6:bc:c2:8d:76:9f:dc:8f:39:39:8a:f5:1f:b5:fe:
f4:97:2c:b3:20:dc:53:b9:8a:0a:98:94:41:ef:b8:
11:fa:e8:77:fe:9b:9f:4e:5f:25:26:a1:f1:c9:7d:
10:ce:4b:2d:cc:1e:11:44:3e:0e:c1:e9:0d:e6:7e:
41:d0:e5:fd:01:60:5e:97:a5:73:52:5c:d5:0c:51:
12:07:e5:58:4c:10:1d:73:c3:18:dd:66:b0:b7:69:
4c:55:e5:23:fd:9f:3c:b9:72:8a:36:41:06:59:2b:
91:b3:6b:11:ea:e2:4b:7e:42:73:f0:02:44:e1:c8:
d3:24:87:48:1a:9b:a4:1a:74:5b:5c:92:a9:0f:6d:
ab:10:91:8d:2b:3b:5e:aa:dd:91:8d:f0:89:0d:97:
7e:07:d1:ef:a3:d8:8f:88:47:7c:61:5e:1f:43:0b:
43:d0:4f:1a:25:2b:18:e8:d3:f0:a0:ea:44:2f:2d:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:DC:DF:E3:E1:DD:AF:2D:39:3D:B1:DA:DF:91:0C:20:3B:3D:B8
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1c:91:66:35:ac:cc:49:d4:c8:6f:c3:9d:f7:cd:91:47:91:
a6:e3:07:de:78:3c:bc:9b:61:79:e2:7c:c9:91:f9:52:54:b4:
45:d6:55:d2:38:1b:e6:fe:a4:3e:8a:29:6f:82:57:ae:b0:82:
59:ac:cf:e7:f8:81:74:c8:0a:8b:c8:79:3a:c2:e1:e2:a3:7a:
20:21:c8:b5:11:31:9f:ed:b5:87:94:92:27:4f:52:2c:fa:05:
87:d2:4f:98:59:71:0f:a0:65:20:b0:f6:a0:cd:eb:29:10:c2:
10:c4:43:11:d1:86:62:b0:d2:3a:f8:a7:12:75:77:93:5b:46:
e2:54:28:61:c7:ab:81:1d:c4:bc:0f:02:66:4b:db:09:7d:ec:
2c:14:5c:11:51:6c:19:89:35:10:4a:52:3e:0b:5d:a1:c4:3a:
11:ca:8c:71:7c:25:69:d8:d8:aa:0e:26:80:6a:79:31:6d:7f:
1b:f2:3f:19:b5:69:47:8b:e2:e7:c9:17:9a:ec:28:9f:8b:57:
bf:c5:eb:5a:16:b4:75:06:92:91:1f:d6:76:1d:0c:82:89:d6:
60:0f:fe:eb:8a:f0:2c:14:ed:07:ab:95:aa:94:cb:13:a1:ce:
0a:99:f5:8d:1e:3a:23:1d:55:e2:82:6c:65:40:27:85:b2:70:
a2:99:d3:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDyMOPlBASoxYGkVgzUKLD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjQzZjNlNjE5OTBmZDNlNTc2N2RlYmU5OGU1MWNjMTlj
YWM3MDgwHhcNMjYwOTMwMTIwMTI1WhcNMjYxMDAxMTIwMTI1WjAzMTEwLwYDVQQD
EyhhNTJjZGNkZmUzZTFkZGFmMmQzOTNkYjFkYWRmOTEwYzIwM2IzZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTKhqL0ENlI/5zQfbrUvS6TpJAWT
9DzKAZFh9icm9Yw5f86h8K7HzHOCRqTARLA9Ge20wUly32+o5punuLMf7l65PAUE
8NQcQHvGvMKNdp/cjzk5ivUftf70lyyzINxTuYoKmJRB77gR+uh3/pufTl8lJqHx
yX0QzkstzB4RRD4OwekN5n5B0OX9AWBel6VzUlzVDFESB+VYTBAdc8MY3Wawt2lM
VeUj/Z88uXKKNkEGWSuRs2sR6uJLfkJz8AJE4cjTJIdIGpukGnRbXJKpD22rEJGN
Kzteqt2RjfCJDZd+B9Hvo9iPiEd8YV4fQwtD0E8aJSsY6NPwoOpELy01hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUs3N/j4d2vLTk9sdrfkQwgOz24MB8GA1UdIwQY
MBaAFOH0Pz5hmQ/T5XZ96+mOUcwZyscIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNTM4M2ItMTBlNS00M2U5LWIzMjAt
MzIzNDE2MGRiY2Q0LzEvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kNTM4M2ItMTBlNS00M2U5LWIzMjAtMzIzNDE2MGRiY2Q0
LzEvNGZRX1BtR1pEOVBsZG4zcjZZNVJ6Qm5LeHdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhyRZjWs
zEnUyG/DnffNkUeRpuMH3ng8vJtheeJ8yZH5UlS0RdZV0jgb5v6kPoopb4JXrrCC
WazP5/iBdMgKi8h5OsLh4qN6ICHItRExn+21h5SSJ09SLPoFh9JPmFlxD6BlILD2
oM3rKRDCEMRDEdGGYrDSOvinEnV3k1tG4lQoYcergR3EvA8CZkvbCX3sLBRcEVFs
GYk1EEpSPgtdocQ6EcqMcXwladjYqg4mgGp5MW1/G/I/GbVpR4vi58kXmuwon4tX
v8XrWha0dQaSkR/Wdh0MgonWYA/+64rwLBTtB6uVqpTLE6HOCpn1jR46Ix1V4oJs
ZUAnhbJwopnTnQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:50:57 2026 by rpki-client