Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier: e8rls2K2wJrRJNIiLgx9xX+FNIRVO44Z/xXiXzUdKPw=
Subject key identifier: 61:6F:BE:F8:4C:9B:56:FC:AD:91:B1:D1:6C:AB:FD:CE:25:84:E5:C0
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial: 01A0C4B24BB704102889175C52F903E957C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number: 1960
Signing time: Mon 21 Sep 2026 16:00:14 +0000
Manifest this update: Mon 21 Sep 2026 16:00:14 +0000
Manifest next update: Tue 22 Sep 2026 16:00:14 +0000
Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: hpApE9fLHVGkIPFKXYAvhf2nlcREaU38Yv+RotAFt3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:4b:b7:04:10:28:89:17:5c:52:f9:03:e9:57:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Validity
Not Before: Sep 21 16:00:14 2026 GMT
Not After : Sep 22 16:00:14 2026 GMT
Subject: CN=616fbef84c9b56fcad91b1d16cabfdce2584e5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:df:ce:99:39:ee:e8:d1:fd:c9:89:4a:21:c2:
03:8e:e7:29:47:c5:00:18:20:16:a7:ac:ea:36:0e:
99:3e:c0:8c:23:0b:74:e2:34:92:90:50:09:1d:41:
47:7c:c5:f5:c7:09:d4:06:d5:c8:da:fd:dc:d7:b4:
cc:71:7f:4c:65:35:0e:49:90:0f:a9:19:90:09:e5:
d7:05:19:7a:d7:3b:9c:32:f5:5b:6c:e9:2a:6e:de:
d3:2a:9d:2c:e4:27:ce:6e:ba:80:cf:55:c6:a5:d7:
67:ce:93:79:22:3f:90:67:71:fd:57:64:e9:73:e7:
56:55:e6:33:bf:51:fa:10:9c:0e:27:67:10:77:c0:
39:4e:c2:f5:18:fd:20:cf:13:b2:f2:91:29:0a:88:
00:63:12:c2:49:f6:6d:47:11:e2:d1:5d:2e:9b:37:
8e:ba:16:19:40:3a:25:c9:7c:7e:e6:10:7e:9f:60:
de:16:7e:3e:2f:84:0b:f3:5e:2f:98:32:f4:5b:eb:
90:29:74:7d:31:a8:8b:49:e3:a5:bc:8f:43:e3:ad:
6b:87:be:31:4f:a1:57:ab:2a:94:98:df:a1:c5:0e:
20:01:1f:aa:64:2f:9e:24:c9:25:d8:3e:0e:b4:e9:
0e:3c:ef:d0:2e:00:83:35:0a:7a:40:93:44:e0:0a:
6a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6F:BE:F8:4C:9B:56:FC:AD:91:B1:D1:6C:AB:FD:CE:25:84:E5:C0
X509v3 Authority Key Identifier:
keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:44:56:ac:0b:4c:d7:16:70:3a:2d:f7:21:06:39:c9:27:e7:
49:76:b4:f2:75:6b:d9:10:78:37:49:47:3f:38:81:04:55:fc:
94:dc:a7:a6:72:f2:4b:f7:59:01:17:33:4e:5c:b7:b7:9c:fe:
16:c5:ab:f7:63:d6:e1:92:9a:6e:a5:39:8f:fa:e8:15:a3:75:
29:17:46:3b:38:a2:ff:e1:ce:2b:87:aa:66:53:a6:2e:aa:9c:
bd:00:74:53:27:89:ca:4c:60:e4:66:50:2b:5d:5c:80:f6:59:
18:e9:b0:a9:6f:cf:99:f1:04:3e:8e:f0:05:4e:87:82:13:e7:
d7:e6:c3:89:28:57:a2:7a:13:42:57:ca:1c:f0:18:ec:bf:1d:
38:b3:28:6c:6d:82:22:26:b8:57:62:d1:72:fd:04:9a:58:f6:
61:a0:89:fc:8a:07:06:08:b5:dd:a8:e4:ed:30:35:06:91:9d:
80:26:0b:56:22:38:0e:f8:31:d5:95:00:71:b5:c1:34:80:91:
9a:e0:49:b2:b0:10:f8:24:35:89:ab:86:5c:32:9e:d1:5b:65:
d7:93:82:23:60:d2:4e:32:56:e0:85:f6:e2:42:d9:77:59:5d:
02:fa:7a:80:26:c9:45:73:ae:08:75:04:e4:73:b2:9e:5d:ce:
ff:d7:b4:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEsku3BBAoiRdcUvkD6VfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTUwM2IxMWI5OGE1ZjU4ZDRmNTVlZmFlYTNhZDJiMjFh
YWVjODMwHhcNMjYwOTIxMTYwMDE0WhcNMjYwOTIyMTYwMDE0WjAzMTEwLwYDVQQD
Eyg2MTZmYmVmODRjOWI1NmZjYWQ5MWIxZDE2Y2FiZmRjZTI1ODRlNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d/OmTnu6NH9yYlKIcIDjucpR8UA
GCAWp6zqNg6ZPsCMIwt04jSSkFAJHUFHfMX1xwnUBtXI2v3c17TMcX9MZTUOSZAP
qRmQCeXXBRl61zucMvVbbOkqbt7TKp0s5CfObrqAz1XGpddnzpN5Ij+QZ3H9V2Tp
c+dWVeYzv1H6EJwOJ2cQd8A5TsL1GP0gzxOy8pEpCogAYxLCSfZtRxHi0V0umzeO
uhYZQDolyXx+5hB+n2DeFn4+L4QL814vmDL0W+uQKXR9MaiLSeOlvI9D461rh74x
T6FXqyqUmN+hxQ4gAR+qZC+eJMkl2D4OtOkOPO/QLgCDNQp6QJNE4ApqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFvvvhMm1b8rZGx0Wyr/c4lhOXAMB8GA1UdIwQY
MBaAFOFVA7EbmKX1jU9V766jrSshquyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYt
MzVhNWEyNWYxNDAxLzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYtMzVhNWEyNWYxNDAx
LzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0RWrAtM
1xZwOi33IQY5ySfnSXa08nVr2RB4N0lHPziBBFX8lNynpnLyS/dZARczTly3t5z+
FsWr92PW4ZKabqU5j/roFaN1KRdGOzii/+HOK4eqZlOmLqqcvQB0UyeJykxg5GZQ
K11cgPZZGOmwqW/PmfEEPo7wBU6HghPn1+bDiShXonoTQlfKHPAY7L8dOLMobG2C
Iia4V2LRcv0Emlj2YaCJ/IoHBgi13ajk7TA1BpGdgCYLViI4Dvgx1ZUAcbXBNICR
muBJsrAQ+CQ1iauGXDKe0Vtl15OCI2DSTjJW4IX24kLZd1ldAvp6gCbJRXOuCHUE
5HOynl3O/9e0Cg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:26:18 2026 by rpki-client