Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: 0aGIXrWIMaUdXaYKDg0jZpAlLoQMNuPSwZMWgWLxZYE=
Subject key identifier: 1E:76:87:72:4A:19:C1:A0:53:ED:CD:19:99:6A:45:91:F6:53:19:AC
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 01A0C21FD7BEDCD4AF4A2A3B2678E753BA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 04:01:01 +0000
Manifest this update: Mon 21 Sep 2026 04:01:01 +0000
Manifest next update: Tue 22 Sep 2026 04:01:01 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: J2FbOjF80lYikS3/ECGP/zYyKGvc3UQ3Bcvk0qCPL3M=)
2: MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (hash: X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:d7:be:dc:d4:af:4a:2a:3b:26:78:e7:53:ba:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Sep 21 04:01:01 2026 GMT
Not After : Sep 22 04:01:01 2026 GMT
Subject: CN=1e7687724a19c1a053edcd19996a4591f65319ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:11:01:87:ba:43:73:63:48:aa:cd:90:b1:
4b:e8:31:c3:c1:ea:60:7e:9e:61:32:51:24:68:a7:
82:4a:e3:00:24:02:e6:32:88:d4:40:a6:4b:c6:8c:
a0:b7:4c:e1:30:8a:51:df:d0:0d:e3:81:0b:7e:be:
cd:a0:79:e6:ed:cc:7b:46:99:0b:c7:38:98:f2:5b:
9f:5d:23:67:02:55:86:c4:ad:1f:a3:8e:e0:4b:da:
74:4d:85:be:9d:15:b0:77:65:51:38:00:c6:03:f3:
c9:b2:39:87:80:9a:80:71:b9:2f:83:8f:db:f8:5d:
40:c3:37:bf:cc:8c:9c:e9:da:24:41:e9:6a:94:64:
f0:9b:d9:a2:10:c8:69:08:61:bc:5a:85:3c:d4:84:
6a:ae:42:b1:ee:68:2d:ba:5d:2a:e4:f7:0d:52:27:
98:fa:9b:4f:31:f3:c6:df:4c:ee:00:15:bd:47:54:
f9:db:09:20:53:f6:40:df:58:e4:bb:df:7c:66:fb:
61:10:89:bf:bf:93:3a:91:0a:8c:1a:04:29:c0:e5:
1a:59:52:99:28:30:94:14:4d:fa:07:ff:ff:c0:34:
04:26:ff:b5:a0:4b:6f:fa:6a:93:2a:7a:3a:f0:7a:
7d:76:ca:f1:f3:87:c6:4a:ac:e7:a2:16:71:9b:50:
3d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:76:87:72:4A:19:C1:A0:53:ED:CD:19:99:6A:45:91:F6:53:19:AC
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1d:c1:66:71:19:1e:91:f4:3a:59:fa:02:6f:35:01:c2:34:
01:5e:9f:e0:db:90:43:4a:64:4b:3c:e6:cb:18:40:df:d9:7c:
49:82:1d:39:74:17:ba:71:d7:03:ad:1a:6c:86:04:37:03:03:
74:6a:a7:27:a4:79:c0:9e:43:af:a2:9c:d9:c7:ba:6c:36:0f:
4b:56:5d:63:2e:4b:8b:79:cd:13:92:4e:45:fd:a3:10:b0:f3:
49:af:74:51:ee:72:4c:c9:40:44:3e:7a:7f:d0:40:16:62:18:
66:93:c8:c2:d0:d6:0c:51:1e:f8:25:d7:38:e4:5c:6d:5b:d0:
d7:ed:b9:c0:6f:37:14:ae:6f:87:31:47:93:b3:77:2f:ae:96:
92:dd:80:a7:cb:2d:91:ff:3a:e1:9d:8c:90:d2:be:e8:09:a1:
0e:ba:e7:49:35:79:f1:c4:52:df:f3:5d:7c:c2:5f:c3:e0:a8:
2b:76:9c:25:c3:8f:e6:22:af:83:9e:fc:0a:60:6a:e2:92:99:
ac:61:f2:fa:b8:fe:41:28:4b:ce:22:62:f7:f3:5d:6f:71:50:
9f:10:fe:7a:e9:d0:4e:01:1c:d6:40:c8:37:cd:a9:c1:84:43:
3a:37:c8:7d:73:1e:9f:7c:02:c2:e2:9b:55:e1:3b:03:02:45:
9c:5c:e4:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCH9e+3NSvSio7JnjnU7pYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMjM4ZTIyODc3ZjczMDM5NjQwMDdjZTNlMzQwNmY1ZmFk
OTQ5NjIwHhcNMjYwOTIxMDQwMTAxWhcNMjYwOTIyMDQwMTAxWjAzMTEwLwYDVQQD
EygxZTc2ODc3MjRhMTljMWEwNTNlZGNkMTk5OTZhNDU5MWY2NTMxOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPwRAYe6Q3NjSKrNkLFL6DHDwepg
fp5hMlEkaKeCSuMAJALmMojUQKZLxoygt0zhMIpR39AN44ELfr7NoHnm7cx7RpkL
xziY8lufXSNnAlWGxK0fo47gS9p0TYW+nRWwd2VROADGA/PJsjmHgJqAcbkvg4/b
+F1Awze/zIyc6dokQelqlGTwm9miEMhpCGG8WoU81IRqrkKx7mgtul0q5PcNUieY
+ptPMfPG30zuABW9R1T52wkgU/ZA31jku998ZvthEIm/v5M6kQqMGgQpwOUaWVKZ
KDCUFE36B///wDQEJv+1oEtv+mqTKno68Hp9dsrx84fGSqznohZxm1A9LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB52h3JKGcGgU+3NGZlqRZH2UxmsMB8GA1UdIwQY
MBaAFOAjjiKHf3MDlkAHzj40BvX62UliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmIt
NTYxMTc1ZjA0ZDhlLzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kYTIyNzYtNmRiZi00MjJlLTllYmItNTYxMTc1ZjA0ZDhl
LzEvNENPT0lvZF9jd09XUUFmT1BqUUc5ZnJaU1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjh3BZnEZ
HpH0Oln6Am81AcI0AV6f4NuQQ0pkSzzmyxhA39l8SYIdOXQXunHXA60abIYENwMD
dGqnJ6R5wJ5Dr6Kc2ce6bDYPS1ZdYy5Li3nNE5JORf2jELDzSa90Ue5yTMlARD56
f9BAFmIYZpPIwtDWDFEe+CXXOORcbVvQ1+25wG83FK5vhzFHk7N3L66Wkt2Ap8st
kf864Z2MkNK+6AmhDrrnSTV58cRS3/NdfMJfw+CoK3acJcOP5iKvg578CmBq4pKZ
rGHy+rj+QShLziJi9/Ndb3FQnxD+eunQTgEc1kDIN82pwYRDOjfIfXMen3wCwuKb
VeE7AwJFnFzkCg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:37:25 2026 by rpki-client