Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
File: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft (raw, json)
Hash identifier: WFAlX+SX2PS+Y2G6RQ/xlnll0D127SIVu8B+tcB5I1M=
Subject key identifier: 2D:14:DC:D9:81:C1:EF:7B:7F:26:CF:7D:1D:DD:EE:B3:BE:C3:07:C6
Authority key identifier: E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
Certificate issuer: /CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Certificate serial: 01A0BF1E11CB0ED377F89C0653BEAA7CCEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
Manifest number: DD
Signing time: Sun 20 Sep 2026 14:00:13 +0000
Manifest this update: Sun 20 Sep 2026 14:00:13 +0000
Manifest next update: Mon 21 Sep 2026 14:00:13 +0000
Files and hashes: 1: 4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl (hash: ZCIDNPFgqp7nw29QTLqMTBV2ezNgZERtEupfWS7j+rQ=)
2: I0KwTqxUocsvcaYGRR4zapPMMqg.roa (hash: dmUgwCvOQahbw3iSzZonSHUNI6WWUEQvrZXsD8lNy/k=)
3: JJAZ-O4IJgQLGyAfc-8wTWBxykA.roa (hash: YSeY7xqTEtO7PqfrAlhTz5nmFBQdhs7hiSlxvWOUhkI=)
4: fQIWqImR4nVYlfvLLjiNXx70sEs.asa (hash: ThEh+n6WvESDD7EZWCsgtnIgGCyu7Kb1at4ATMHl6rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:11:cb:0e:d3:77:f8:9c:06:53:be:aa:7c:ce:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0527776674f9baf0bc295ed260f16b0d83b676d
Validity
Not Before: Sep 20 14:00:13 2026 GMT
Not After : Sep 21 14:00:13 2026 GMT
Subject: CN=2d14dcd981c1ef7b7f26cf7d1dddeeb3bec307c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:e1:52:14:0d:38:5f:94:23:7a:27:4d:90:
70:3b:82:3c:73:59:1e:31:c0:c9:c8:04:f9:f1:e0:
bc:3a:9b:48:90:32:52:3b:e8:50:9a:51:57:ea:02:
66:5e:dc:8d:07:51:af:0a:3d:3c:5c:16:29:6d:0d:
2d:a2:e2:02:8f:4b:c0:67:91:d5:5c:f7:8e:0b:a6:
5b:21:43:d3:6e:c9:ab:9b:ea:39:ce:5d:52:13:32:
22:8f:84:77:7f:94:ec:c3:3e:6f:81:54:ea:52:c5:
f5:da:73:ea:2d:57:cc:a9:c7:14:34:07:67:60:cb:
61:c4:f7:91:0e:78:b2:04:1b:91:04:3e:f5:43:f2:
ed:e9:68:03:6d:86:02:3d:2d:33:62:0c:60:47:1c:
86:92:49:8c:88:33:f7:2a:d8:81:34:4e:1f:e8:96:
1e:b8:49:22:30:1a:31:07:e6:e9:8a:eb:38:91:5c:
a5:0d:91:b3:a3:0c:52:84:1e:73:80:7c:3a:84:9e:
df:20:ed:7c:7d:ea:cf:ce:d7:14:66:71:7b:bc:5a:
3b:3c:18:48:ba:fc:11:fe:cf:b5:f8:5f:82:b1:44:
77:86:37:e1:de:22:8a:0d:4f:1e:f6:0a:ee:c1:ba:
ee:be:60:1b:61:59:5e:4d:3e:44:97:ab:65:64:9b:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:14:DC:D9:81:C1:EF:7B:7F:26:CF:7D:1D:DD:EE:B3:BE:C3:07:C6
X509v3 Authority Key Identifier:
keyid:E0:52:77:76:67:4F:9B:AF:0B:C2:95:ED:26:0F:16:B0:D8:3B:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FJ3dmdPm68LwpXtJg8WsNg7Z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/067650-dd11-449f-ace3-20b6f2cd47c9/1/4FJ3dmdPm68LwpXtJg8WsNg7Z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:c8:0f:61:53:bd:35:ca:c2:10:d6:ec:9d:fd:18:88:bb:
8a:24:bd:38:16:9c:4f:03:98:c8:e1:0a:67:d0:e0:c9:24:a2:
20:2a:f7:90:bc:6e:60:4a:c6:9d:f4:d0:7e:8e:fa:21:70:05:
a0:aa:f2:f3:26:1f:4a:1b:cb:71:e4:be:5c:cd:28:53:0d:37:
c8:aa:1f:6d:fe:24:33:5c:c3:0e:5d:f5:ed:6e:dc:31:a0:32:
98:9c:10:af:e9:b1:ed:a0:99:5f:02:79:7f:1b:8c:e2:41:2e:
77:4b:f9:b5:8e:25:96:ec:ad:dc:aa:a5:92:55:b2:25:af:31:
ec:cd:3b:ae:19:4a:46:52:5a:8c:1a:52:02:e0:c4:5a:cd:f4:
36:e0:74:97:57:f5:0d:ec:45:2c:b4:b0:c2:78:7f:18:ed:5b:
b3:c1:c6:b1:c6:ec:73:38:79:e6:9b:ce:16:b0:22:2e:90:31:
3e:6b:be:a2:6a:1f:71:ea:6f:49:f9:19:81:77:9a:97:58:3d:
d6:98:ad:05:4d:e6:6a:89:55:3a:3f:e0:d0:31:17:83:e3:d8:
f7:d6:a2:36:ee:60:04:6e:6d:aa:2e:5b:51:f6:4f:08:82:9d:
7b:85:1e:73:34:0e:73:bc:ee:a2:45:8d:c3:12:f8:6e:45:7a:
df:8c:bf:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/HhHLDtN3+JwGU76qfM73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTI3Nzc2Njc0ZjliYWYwYmMyOTVlZDI2MGYxNmIwZDgz
YjY3NmQwHhcNMjYwOTIwMTQwMDEzWhcNMjYwOTIxMTQwMDEzWjAzMTEwLwYDVQQD
EygyZDE0ZGNkOTgxYzFlZjdiN2YyNmNmN2QxZGRkZWViM2JlYzMwN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz7hUhQNOF+UI3onTZBwO4I8c1ke
McDJyAT58eC8OptIkDJSO+hQmlFX6gJmXtyNB1GvCj08XBYpbQ0touICj0vAZ5HV
XPeOC6ZbIUPTbsmrm+o5zl1SEzIij4R3f5Tswz5vgVTqUsX12nPqLVfMqccUNAdn
YMthxPeRDniyBBuRBD71Q/Lt6WgDbYYCPS0zYgxgRxyGkkmMiDP3KtiBNE4f6JYe
uEkiMBoxB+bpius4kVylDZGzowxShB5zgHw6hJ7fIO18ferPztcUZnF7vFo7PBhI
uvwR/s+1+F+CsUR3hjfh3iKKDU8e9gruwbruvmAbYVleTT5El6tlZJta+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0U3NmBwe97fybPfR3d7rO+wwfGMB8GA1UdIwQY
MBaAFOBSd3ZnT5uvC8KV7SYPFrDYO2dtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZKM2RtZFBtNjhMd3BYdEpnOFdzTmc3WjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8wNjc2NTAtZGQxMS00NDlmLWFjZTMt
MjBiNmYyY2Q0N2M5LzEvNEZKM2RtZFBtNjhMd3BYdEpnOFdzTmc3WjIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8wNjc2NTAtZGQxMS00NDlmLWFjZTMtMjBiNmYyY2Q0N2M5
LzEvNEZKM2RtZFBtNjhMd3BYdEpnOFdzTmc3WjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZrID2FT
vTXKwhDW7J39GIi7iiS9OBacTwOYyOEKZ9DgySSiICr3kLxuYErGnfTQfo76IXAF
oKry8yYfShvLceS+XM0oUw03yKofbf4kM1zDDl317W7cMaAymJwQr+mx7aCZXwJ5
fxuM4kEud0v5tY4lluyt3KqlklWyJa8x7M07rhlKRlJajBpSAuDEWs30NuB0l1f1
DexFLLSwwnh/GO1bs8HGscbsczh55pvOFrAiLpAxPmu+omofcepvSfkZgXeal1g9
1pitBU3maolVOj/g0DEXg+PY99aiNu5gBG5tqi5bUfZPCIKde4UeczQOc7zuokWN
wxL4bkV634y/Mg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:13:10 2026 by rpki-client