Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
File: 4VW0MN7doRMQ9shzieMgj8ZSnps.mft (raw, json)
Hash identifier: 9emM53WABBghEqsxEWR0kjdMI6dq93ePV0phUjcXO4s=
Subject key identifier: CE:E5:9A:6B:0E:0C:94:AA:0F:A7:5A:4F:6B:9A:9E:0B:9A:91:09:75
Authority key identifier: E1:55:B4:30:DE:DD:A1:13:10:F6:C8:73:89:E3:20:8F:C6:52:9E:9B
Certificate issuer: /CN=e155b430dedda11310f6c87389e3208fc6529e9b
Certificate serial: 01A0C47C737FD9F7015C5D9159B9C571AA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
Manifest number: 138E
Signing time: Mon 21 Sep 2026 15:01:25 +0000
Manifest this update: Mon 21 Sep 2026 15:01:25 +0000
Manifest next update: Tue 22 Sep 2026 15:01:25 +0000
Files and hashes: 1: 4VW0MN7doRMQ9shzieMgj8ZSnps.crl (hash: akrMLMLmEngTWcA4tHYIshrJ2jZ0zY7rq5LpXwrOVlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:73:7f:d9:f7:01:5c:5d:91:59:b9:c5:71:aa:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e155b430dedda11310f6c87389e3208fc6529e9b
Validity
Not Before: Sep 21 15:01:25 2026 GMT
Not After : Sep 22 15:01:25 2026 GMT
Subject: CN=cee59a6b0e0c94aa0fa75a4f6b9a9e0b9a910975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:b3:16:c0:36:10:03:4a:9b:54:7d:1a:cb:
51:e2:ab:29:0e:4c:be:27:ff:e0:ea:3f:35:5a:71:
b7:75:52:f9:7e:4c:a7:ec:9a:c4:63:e6:44:cd:eb:
7b:3a:ed:cb:2d:3c:11:ad:bd:83:d8:5a:99:d8:ac:
c4:40:9d:65:26:73:0a:f6:51:11:1f:80:8f:d8:ae:
e0:88:d4:af:a5:4b:0b:01:74:6d:3e:2b:ad:49:1f:
8a:cf:ab:a8:46:8e:9c:df:c3:9d:ff:00:39:fe:07:
1c:a6:f4:86:2f:4b:e2:f6:bf:c6:e6:4f:05:8c:be:
a8:53:5b:89:90:84:e1:e7:1f:6c:89:b8:96:c6:6a:
21:80:5a:3e:7c:c4:4b:b9:e9:99:7f:31:a9:dd:e0:
7f:da:33:02:e2:0c:3d:de:36:a2:2b:18:e0:78:cd:
a4:89:21:83:60:4c:25:ba:1f:5e:25:5b:c1:f1:73:
6b:f2:56:e2:a9:f7:23:83:3c:77:0a:90:5b:6f:60:
d0:6f:84:04:34:1f:5a:c7:4c:fd:25:63:38:d2:18:
fa:7c:c7:3c:d7:ec:fa:f2:df:96:32:2d:01:14:2b:
f0:5e:7c:90:1e:7a:7d:33:43:9d:d1:a7:11:c7:db:
bc:8a:e8:6a:26:1c:0e:98:7c:f1:2e:0f:03:55:8d:
87:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E5:9A:6B:0E:0C:94:AA:0F:A7:5A:4F:6B:9A:9E:0B:9A:91:09:75
X509v3 Authority Key Identifier:
keyid:E1:55:B4:30:DE:DD:A1:13:10:F6:C8:73:89:E3:20:8F:C6:52:9E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VW0MN7doRMQ9shzieMgj8ZSnps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bf9d55-b0d5-4b07-92b0-0d74060a16dd/1/4VW0MN7doRMQ9shzieMgj8ZSnps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:db:ca:c3:0f:5f:29:2f:4a:23:91:e4:cf:e2:d7:42:ca:63:
ef:73:3d:88:98:e4:e5:0c:ea:ae:3f:32:76:1b:dd:e9:c7:ea:
d7:fb:0c:c0:38:76:f1:c4:d7:56:8d:f4:07:57:6f:29:07:3d:
33:97:24:a7:14:dd:9d:42:fd:21:33:7e:20:39:0a:1c:9f:e0:
59:36:61:d2:76:6b:fd:bd:20:b0:02:1f:27:4a:c4:8c:36:ae:
2c:bc:0c:0b:d2:8c:38:65:1e:b2:93:ac:d9:91:26:d8:8d:45:
94:a0:c2:fc:57:1f:98:1b:61:b5:f7:b7:6b:05:54:8d:c8:e7:
b9:0f:f7:03:19:9e:e0:22:e3:8b:08:3b:67:80:e1:88:a7:7d:
ff:78:12:dd:a7:a4:8a:ac:d5:e3:65:8a:f0:54:21:3f:0f:41:
4f:fb:9f:92:dd:39:45:d7:31:35:95:40:f2:a6:14:4c:9c:ff:
f9:d1:bc:ea:be:2b:86:cb:7e:ce:be:c8:ba:13:b2:25:5c:6b:
e8:36:57:4c:17:6f:e0:99:a2:65:c7:07:1d:f4:6d:b4:15:44:
99:8c:9c:70:8a:1c:47:bd:ab:ea:e3:33:47:84:79:db:9b:dc:
c2:15:d3:12:17:fb:bf:34:39:83:34:e6:26:32:f9:10:37:7e:
e0:e5:7d:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfHN/2fcBXF2RWbnFcaqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTViNDMwZGVkZGExMTMxMGY2Yzg3Mzg5ZTMyMDhmYzY1
MjllOWIwHhcNMjYwOTIxMTUwMTI1WhcNMjYwOTIyMTUwMTI1WjAzMTEwLwYDVQQD
EyhjZWU1OWE2YjBlMGM5NGFhMGZhNzVhNGY2YjlhOWUwYjlhOTEwOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpOzFsA2EANKm1R9GstR4qspDky+
J//g6j81WnG3dVL5fkyn7JrEY+ZEzet7Ou3LLTwRrb2D2FqZ2KzEQJ1lJnMK9lER
H4CP2K7giNSvpUsLAXRtPiutSR+Kz6uoRo6c38Od/wA5/gccpvSGL0vi9r/G5k8F
jL6oU1uJkITh5x9sibiWxmohgFo+fMRLuemZfzGp3eB/2jMC4gw93jaiKxjgeM2k
iSGDYEwluh9eJVvB8XNr8lbiqfcjgzx3CpBbb2DQb4QENB9ax0z9JWM40hj6fMc8
1+z68t+WMi0BFCvwXnyQHnp9M0Od0acRx9u8iuhqJhwOmHzxLg8DVY2HSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7lmmsODJSqD6daT2uanguakQl1MB8GA1UdIwQY
MBaAFOFVtDDe3aETEPbIc4njII/GUp6bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZXME1ON2RvUk1ROXNoemllTWdqOFpTbnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iZjlkNTUtYjBkNS00YjA3LTkyYjAt
MGQ3NDA2MGExNmRkLzEvNFZXME1ON2RvUk1ROXNoemllTWdqOFpTbnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iZjlkNTUtYjBkNS00YjA3LTkyYjAtMGQ3NDA2MGExNmRk
LzEvNFZXME1ON2RvUk1ROXNoemllTWdqOFpTbnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNvKww9f
KS9KI5Hkz+LXQspj73M9iJjk5Qzqrj8ydhvd6cfq1/sMwDh28cTXVo30B1dvKQc9
M5ckpxTdnUL9ITN+IDkKHJ/gWTZh0nZr/b0gsAIfJ0rEjDauLLwMC9KMOGUespOs
2ZEm2I1FlKDC/FcfmBthtfe3awVUjcjnuQ/3Axme4CLjiwg7Z4DhiKd9/3gS3aek
iqzV42WK8FQhPw9BT/ufkt05RdcxNZVA8qYUTJz/+dG86r4rhst+zr7IuhOyJVxr
6DZXTBdv4JmiZccHHfRttBVEmYyccIocR72r6uMzR4R525vcwhXTEhf7vzQ5gzTm
JjL5EDd+4OV91w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:49:49 2026 by rpki-client