Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: xXa5acN7eX9pyYUtdD3VJ6qB1VDKW7V3E9l4sp3QCT4=
Subject key identifier: B9:AA:71:A0:7C:84:7E:EA:3A:5E:67:B5:20:61:53:95:35:9E:DA:5C
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 01A0C7B3D06590E476AA5B5F0E532A37308F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 19F9
Signing time: Tue 22 Sep 2026 06:00:45 +0000
Manifest this update: Tue 22 Sep 2026 06:00:45 +0000
Manifest next update: Wed 23 Sep 2026 06:00:45 +0000
Files and hashes: 1: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (hash: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y=)
2: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: tgmXthJ5a3T7t1l3pdUMJm49n4/9JIXksdBpEWyIxlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:d0:65:90:e4:76:aa:5b:5f:0e:53:2a:37:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Sep 22 06:00:45 2026 GMT
Not After : Sep 23 06:00:45 2026 GMT
Subject: CN=b9aa71a07c847eea3a5e67b520615395359eda5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:c0:4c:df:1f:ee:34:41:cf:cd:86:b6:41:
5d:0c:9f:60:9c:75:c1:30:22:32:c5:96:72:32:af:
59:4b:18:0a:2a:ca:9f:1c:76:56:04:7d:fe:c2:21:
05:30:d2:05:8c:8e:f4:d0:5a:df:cf:98:9e:ac:f6:
5a:95:3b:d8:ca:4c:2e:f1:c0:6e:94:0d:07:12:f7:
1f:5a:3e:3e:78:12:2b:8b:0a:a4:54:b9:e6:c8:7a:
80:5a:72:ff:13:4b:7a:8b:a5:b1:08:9d:7c:6a:dc:
e5:a4:20:e0:ea:69:29:bf:2d:15:fe:6a:01:c9:02:
12:b5:3d:39:f0:10:80:3d:44:1f:43:d0:10:31:37:
0e:02:c0:db:16:bc:2a:d7:8a:3a:c7:49:8e:4f:c5:
1b:35:98:82:0b:c4:ea:a1:d6:48:4c:02:2e:bb:66:
22:9b:28:bd:f8:ec:59:e4:7f:c8:4e:85:0b:8d:19:
d4:38:7d:02:5f:d4:25:83:e9:5f:02:13:b8:56:0e:
75:8b:a0:81:a2:79:40:7d:d4:7d:bf:28:ac:c2:68:
07:d5:9a:b9:3b:39:60:2a:02:b9:c8:a1:d4:36:1d:
92:2b:4a:5e:52:13:18:3c:b8:e5:ac:07:2e:10:56:
ff:72:80:a4:0a:0a:1c:d7:8f:e2:08:c5:63:8d:a1:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:71:A0:7C:84:7E:EA:3A:5E:67:B5:20:61:53:95:35:9E:DA:5C
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4d:85:be:c6:e1:70:01:45:5d:24:a1:50:9d:93:42:22:87:
b5:52:d2:8e:3a:9e:90:cf:d7:35:8b:3e:8d:58:1f:08:d3:19:
c1:54:d2:38:de:cc:8f:9c:5e:32:45:7d:01:15:3e:a8:26:ef:
b7:30:ba:67:d4:ca:86:aa:ba:82:d0:57:ae:1a:61:cd:58:85:
76:19:60:7e:e1:87:f1:55:b8:32:16:c6:85:98:f4:6a:dd:36:
6f:7a:d5:6b:ed:63:82:f2:88:90:04:ea:cd:5f:d9:3d:16:1a:
0d:35:65:74:84:bc:21:a5:8a:74:54:b0:03:05:17:ce:08:9b:
e1:01:dd:2e:fd:c6:f5:18:64:f9:f4:aa:c4:f5:f4:31:44:c9:
f7:bf:e7:38:0f:89:04:56:5a:8b:3e:0c:9b:67:0f:48:ce:42:
30:70:89:09:aa:78:14:7d:25:71:c0:bd:52:70:41:e8:74:a6:
6b:a5:45:17:6c:75:ad:80:38:ea:69:81:cd:fe:09:a4:7a:c5:
34:4d:83:d4:3e:62:f2:3d:8a:25:ed:e2:bd:2b:6c:a1:b8:91:
80:52:83:c4:d8:37:74:7f:66:e9:ff:1e:2f:22:92:e0:55:13:
20:ab:8f:e5:58:cf:49:7b:c1:d3:b1:30:80:8b:21:07:3c:9e:
20:30:8d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs9BlkOR2qltfDlMqNzCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZDFhODM2NmMyMTE1OWYwNzk0NzhhOTAzMDg0M2ZiZjYw
NjMxYjkwHhcNMjYwOTIyMDYwMDQ1WhcNMjYwOTIzMDYwMDQ1WjAzMTEwLwYDVQQD
EyhiOWFhNzFhMDdjODQ3ZWVhM2E1ZTY3YjUyMDYxNTM5NTM1OWVkYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSPATN8f7jRBz82GtkFdDJ9gnHXB
MCIyxZZyMq9ZSxgKKsqfHHZWBH3+wiEFMNIFjI700Frfz5ierPZalTvYykwu8cBu
lA0HEvcfWj4+eBIriwqkVLnmyHqAWnL/E0t6i6WxCJ18atzlpCDg6mkpvy0V/moB
yQIStT058BCAPUQfQ9AQMTcOAsDbFrwq14o6x0mOT8UbNZiCC8TqodZITAIuu2Yi
myi9+OxZ5H/IToULjRnUOH0CX9Qlg+lfAhO4Vg51i6CBonlAfdR9vyiswmgH1Zq5
OzlgKgK5yKHUNh2SK0peUhMYPLjlrAcuEFb/coCkCgoc14/iCMVjjaHdDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmqcaB8hH7qOl5ntSBhU5U1ntpcMB8GA1UdIwQY
MBaAFODRqDZsIRWfB5R4qQMIQ/v2BjG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjIt
ZjhhZTBkYmM1ZGYyLzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZGUzMjQtODZjNy00M2Q2LTlkZjItZjhhZTBkYmM1ZGYy
LzEvNE5Hb05td2hGWjhIbEhpcEF3aEQtX1lHTWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfU2Fvsbh
cAFFXSShUJ2TQiKHtVLSjjqekM/XNYs+jVgfCNMZwVTSON7Mj5xeMkV9ARU+qCbv
tzC6Z9TKhqq6gtBXrhphzViFdhlgfuGH8VW4MhbGhZj0at02b3rVa+1jgvKIkATq
zV/ZPRYaDTVldIS8IaWKdFSwAwUXzgib4QHdLv3G9Rhk+fSqxPX0MUTJ97/nOA+J
BFZaiz4Mm2cPSM5CMHCJCap4FH0lccC9UnBB6HSma6VFF2x1rYA46mmBzf4JpHrF
NE2D1D5i8j2KJe3ivStsobiRgFKDxNg3dH9m6f8eLyKS4FUTIKuP5VjPSXvB07Ew
gIshBzyeIDCN0Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:21:16 2026 by rpki-client