
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: wYHm+2TpK9Ho6y4iPS68IuN0jKw/Y8Dk5Q13ZqbYfXM=
Subject key identifier: 8D:99:24:A2:20:92:8F:48:19:FC:CA:30:F2:99:F4:E8:5E:35:62:49
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 01A0C3697C42F878A4E859CB2307AF738B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 1A38
Signing time: Mon 21 Sep 2026 10:01:05 +0000
Manifest this update: Mon 21 Sep 2026 10:01:05 +0000
Manifest next update: Tue 22 Sep 2026 10:01:05 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: 4OTquz0T4ZAUoe3bucKwSgIJeR8+qRtFVHP3rhjvHVQ=)
2: bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa (hash: z7weft+bC6v8Gp+CtsE+ZYXb+kZuusFeVfZLKQMSX24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:7c:42:f8:78:a4:e8:59:cb:23:07:af:73:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Sep 21 10:01:05 2026 GMT
Not After : Sep 22 10:01:05 2026 GMT
Subject: CN=8d9924a220928f4819fcca30f299f4e85e356249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:cb:29:be:91:f4:2f:d1:82:aa:d3:99:48:
d6:a7:0f:bc:5f:44:0c:2c:6a:f3:29:98:1a:0b:73:
ff:47:68:71:c2:68:aa:19:0f:57:cc:95:0d:0f:fb:
28:89:e6:a3:11:ac:fd:6e:d7:1c:24:1b:80:87:0d:
f3:c8:4e:f4:3a:6c:d5:66:3c:4a:19:c0:7b:bd:b3:
f5:6d:ef:f1:cb:df:2f:62:8f:9e:78:99:00:39:b7:
f4:ad:10:cc:15:45:06:f4:a1:d2:fb:cc:64:13:08:
21:33:5f:40:3f:5b:30:59:2a:5e:13:aa:95:f2:b4:
a3:95:a1:09:d4:5c:b3:35:bf:12:64:c6:e5:b7:7b:
11:25:fa:28:df:4f:dc:af:8c:bf:6b:76:dc:80:b7:
d3:ec:60:d6:36:18:e2:ab:c0:f7:f0:87:bf:6c:0a:
4b:34:20:4e:0b:6f:f6:66:14:aa:81:30:52:a7:62:
6e:3d:28:84:64:28:0c:3a:75:b8:f6:b3:54:b1:9b:
2f:5b:43:bc:82:b2:c4:c6:6b:08:27:0e:f5:9a:f5:
bd:a2:3b:be:61:9c:37:8a:8f:e2:74:e3:3c:9b:36:
88:1b:99:f9:6d:42:08:be:ef:3d:cf:f5:2e:95:d4:
8c:34:7d:4c:dd:32:66:2c:dc:b4:ca:8d:17:6e:1f:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:99:24:A2:20:92:8F:48:19:FC:CA:30:F2:99:F4:E8:5E:35:62:49
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c6:4a:bf:47:db:ea:46:5d:31:5c:a9:0b:2e:27:e4:a8:39:
24:19:71:02:98:73:ed:49:e6:ab:9d:12:c8:f1:ce:0a:f2:62:
93:4c:8b:c7:1a:58:69:bc:92:20:1e:a9:b0:e5:7a:0b:03:7a:
0c:06:31:e5:45:4e:3f:72:13:e1:69:b9:90:2a:14:be:4d:0a:
31:d1:0b:67:69:37:1d:b1:a3:4a:66:f1:19:10:af:ab:11:cf:
aa:30:ef:67:68:c9:13:08:14:b5:30:ad:68:4d:7d:fa:21:c1:
a1:29:ac:f9:68:22:87:bd:76:4a:05:c4:18:51:36:38:b4:49:
b0:1a:31:4e:3f:9a:74:46:86:ee:b2:9e:85:d6:50:19:8c:05:
2f:a8:7f:68:3c:56:18:fb:66:21:78:d2:5d:f6:7b:e1:a4:8b:
1f:f7:41:bf:7a:68:62:a7:fc:8e:fb:2d:e7:9e:59:a4:d5:ae:
33:02:df:0b:77:c7:9c:ee:73:ba:60:32:51:d4:8e:34:62:bc:
5f:6a:18:40:98:03:86:cc:3d:c6:ee:5e:14:28:0e:f7:6b:4b:
f3:62:ab:5a:61:c3:8b:7b:56:20:34:56:92:8d:ad:29:df:60:
63:8f:11:a1:43:99:b9:6e:1d:f1:31:53:2d:8b:28:8c:47:37:
62:b8:3b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaXxC+Hik6FnLIwevc4tLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmJjNzA2N2Y4YTdjNTdkNjg2ZDY3NWViNDY4ZTk5Yjg2
YmQ2MmQwHhcNMjYwOTIxMTAwMTA1WhcNMjYwOTIyMTAwMTA1WjAzMTEwLwYDVQQD
Eyg4ZDk5MjRhMjIwOTI4ZjQ4MTlmY2NhMzBmMjk5ZjRlODVlMzU2MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNHLKb6R9C/RgqrTmUjWpw+8X0QM
LGrzKZgaC3P/R2hxwmiqGQ9XzJUND/soieajEaz9btccJBuAhw3zyE70OmzVZjxK
GcB7vbP1be/xy98vYo+eeJkAObf0rRDMFUUG9KHS+8xkEwghM19AP1swWSpeE6qV
8rSjlaEJ1FyzNb8SZMblt3sRJfoo30/cr4y/a3bcgLfT7GDWNhjiq8D38Ie/bApL
NCBOC2/2ZhSqgTBSp2JuPSiEZCgMOnW49rNUsZsvW0O8grLExmsIJw71mvW9oju+
YZw3io/idOM8mzaIG5n5bUIIvu89z/UuldSMNH1M3TJmLNy0yo0Xbh8TEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2ZJKIgko9IGfzKMPKZ9OheNWJJMB8GA1UdIwQY
MBaAFOK7xwZ/inxX1obWdetGjpm4a9YtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUt
MWRhMmFjYzc2ZTExLzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUtMWRhMmFjYzc2ZTEx
LzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8ZKv0fb
6kZdMVypCy4n5Kg5JBlxAphz7Unmq50SyPHOCvJik0yLxxpYabySIB6psOV6CwN6
DAYx5UVOP3IT4Wm5kCoUvk0KMdELZ2k3HbGjSmbxGRCvqxHPqjDvZ2jJEwgUtTCt
aE19+iHBoSms+Wgih712SgXEGFE2OLRJsBoxTj+adEaG7rKehdZQGYwFL6h/aDxW
GPtmIXjSXfZ74aSLH/dBv3poYqf8jvst555ZpNWuMwLfC3fHnO5zumAyUdSONGK8
X2oYQJgDhsw9xu5eFCgO92tL82KrWmHDi3tWIDRWko2tKd9gY48RoUOZuW4d8TFT
LYsojEc3Yrg7rg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:47:52 2026 by rpki-client