Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: GwIyRp9cXhY0abuYxLiRletUISC8D7H+Qro9pE4D4kk=
Subject key identifier: 23:72:00:33:92:16:A3:51:00:82:5B:EB:FF:8A:EB:51:40:72:BC:0F
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 01A0C21FECE5A39A1F71BEBBB8A532C34C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0DC0
Signing time: Mon 21 Sep 2026 04:01:06 +0000
Manifest this update: Mon 21 Sep 2026 04:01:06 +0000
Manifest next update: Tue 22 Sep 2026 04:01:06 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: qcvQvseg0yrgX/hZ3w2S9KEFkDFo1BNCVbrNbiYvlvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:ec:e5:a3:9a:1f:71:be:bb:b8:a5:32:c3:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Sep 21 04:01:06 2026 GMT
Not After : Sep 22 04:01:06 2026 GMT
Subject: CN=237200339216a35100825bebff8aeb514072bc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:08:18:34:08:06:ac:45:54:d9:52:27:fc:
10:e2:51:4f:8b:7c:41:ff:56:06:4f:fa:2d:eb:30:
34:95:2a:22:3d:62:7d:d2:5b:2e:46:2a:36:da:01:
6b:af:30:bb:07:e2:c1:69:c2:e2:d3:b4:a3:af:f2:
84:08:92:cf:51:47:6a:d3:71:36:2e:35:a9:e7:22:
ef:5a:7e:f5:58:eb:3b:0f:c0:77:f7:aa:9f:e2:5b:
b5:86:2d:6c:d7:fe:cb:31:c0:e9:44:ac:8c:97:3c:
bb:0d:11:10:0d:f3:0e:6c:27:5f:35:33:e6:38:b4:
32:7c:4a:a4:30:0b:c3:a4:59:3f:b3:08:9f:97:18:
72:2f:2c:9e:e2:17:a7:7f:9d:23:36:21:da:36:90:
d5:09:1a:29:26:cc:72:98:80:c6:3e:94:a4:ac:ff:
26:81:5e:d9:c2:3a:30:7e:59:7c:e7:b3:46:84:97:
e0:66:ea:e6:09:2f:e1:b5:72:f0:aa:04:33:f7:96:
a7:39:e9:0e:30:a1:ca:8b:b4:14:eb:9a:7d:96:ef:
30:5b:ed:45:9c:f7:25:f5:45:7d:04:20:b4:05:0d:
89:85:96:ba:2b:d8:f8:9b:47:bc:db:54:c3:ec:77:
0c:0d:d8:7e:e6:a3:15:06:0a:8f:26:9b:12:54:ee:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:72:00:33:92:16:A3:51:00:82:5B:EB:FF:8A:EB:51:40:72:BC:0F
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0d:e3:ad:df:7d:33:bf:06:94:fb:7c:ed:92:fc:f9:7e:bf:
fa:94:f5:c3:a2:8f:e6:6d:d7:70:cb:26:ec:ee:4f:83:bd:6f:
bc:15:1f:2c:fb:79:9c:5e:5e:9a:8f:ed:45:cb:ad:79:8c:69:
08:52:df:ce:6d:78:13:5b:88:ba:75:c2:15:95:1c:f1:84:f0:
46:57:ef:86:ae:66:a1:f4:49:65:80:d0:b8:43:e7:29:e6:b6:
67:f7:04:47:cd:0c:1c:c1:2e:d0:11:b9:3e:9f:b4:72:1e:e7:
fc:e2:ad:e5:a6:47:4f:a7:de:31:f1:c3:d7:57:69:7e:74:b2:
a6:10:b1:f6:58:28:2a:3d:91:f0:0e:20:b6:02:7f:1a:b9:17:
7e:bb:79:58:29:ab:a0:88:1d:0b:22:72:2a:e5:a7:53:70:91:
47:a8:60:97:c1:06:fc:f2:ff:e7:be:b4:77:e0:01:0c:57:4d:
30:79:85:09:94:83:2e:ab:8c:78:eb:7e:90:be:7a:e4:0f:94:
47:43:40:78:d3:42:f4:8c:4d:85:f0:18:1a:65:7e:c7:5c:1e:
95:51:33:2f:bf:2a:e6:55:f9:2b:07:b6:62:47:d9:23:74:e8:
fa:46:53:75:c8:d2:47:cc:6d:3c:9a:71:e8:ad:fb:bc:c7:d0:
40:44:7c:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCH+zlo5ofcb67uKUyw0yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWYxODc3NDNhN2EwNzdmNmExZTA2NjVmZGRhYWVmNGQx
MjQ5ZmIwHhcNMjYwOTIxMDQwMTA2WhcNMjYwOTIyMDQwMTA2WjAzMTEwLwYDVQQD
EygyMzcyMDAzMzkyMTZhMzUxMDA4MjViZWJmZjhhZWI1MTQwNzJiYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm04IGDQIBqxFVNlSJ/wQ4lFPi3xB
/1YGT/ot6zA0lSoiPWJ90lsuRio22gFrrzC7B+LBacLi07Sjr/KECJLPUUdq03E2
LjWp5yLvWn71WOs7D8B396qf4lu1hi1s1/7LMcDpRKyMlzy7DREQDfMObCdfNTPm
OLQyfEqkMAvDpFk/swiflxhyLyye4henf50jNiHaNpDVCRopJsxymIDGPpSkrP8m
gV7Zwjowfll857NGhJfgZurmCS/htXLwqgQz95anOekOMKHKi7QU65p9lu8wW+1F
nPcl9UV9BCC0BQ2JhZa6K9j4m0e821TD7HcMDdh+5qMVBgqPJpsSVO4JRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNyADOSFqNRAIJb6/+K61FAcrwPMB8GA1UdIwQY
MBaAFOOvGHdDp6B39qHgZl/dqu9NEkn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgt
NDFlYmU2OWUzMDMxLzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgtNDFlYmU2OWUzMDMx
LzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEg3jrd99
M78GlPt87ZL8+X6/+pT1w6KP5m3XcMsm7O5Pg71vvBUfLPt5nF5emo/tRcuteYxp
CFLfzm14E1uIunXCFZUc8YTwRlfvhq5mofRJZYDQuEPnKea2Z/cER80MHMEu0BG5
Pp+0ch7n/OKt5aZHT6feMfHD11dpfnSyphCx9lgoKj2R8A4gtgJ/GrkXfrt5WCmr
oIgdCyJyKuWnU3CRR6hgl8EG/PL/5760d+ABDFdNMHmFCZSDLquMeOt+kL565A+U
R0NAeNNC9IxNhfAYGmV+x1welVEzL78q5lX5Kwe2YkfZI3To+kZTdcjSR8xtPJpx
6K37vMfQQER8tg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:53:56 2026 by rpki-client