Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier: 48R+pDdu5hJQ9IDcox1qc/vFdK2V2J0gxdds4gTQkUY=
Subject key identifier: A3:7E:57:31:34:C9:F8:8F:0B:C3:67:41:39:FE:0C:DD:FA:98:48:CB
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 01A0C5209EED5E52C53C94549DF8A99B15C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number: 0BE8
Signing time: Mon 21 Sep 2026 18:00:44 +0000
Manifest this update: Mon 21 Sep 2026 18:00:44 +0000
Manifest next update: Tue 22 Sep 2026 18:00:44 +0000
Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: T/KgKARFkFi8lSrXJhtkYZrIK+5txEZtEEmDwHOdaIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:9e:ed:5e:52:c5:3c:94:54:9d:f8:a9:9b:15:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Sep 21 18:00:44 2026 GMT
Not After : Sep 22 18:00:44 2026 GMT
Subject: CN=a37e573134c9f88f0bc3674139fe0cddfa9848cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:98:55:b9:1e:98:5a:76:ff:95:81:9b:8b:
66:ca:f3:13:86:38:35:6b:d9:62:d8:d8:d1:55:94:
f7:31:13:2a:db:b2:5d:4b:51:90:4d:1c:95:16:e6:
16:77:d3:9b:d0:2c:e3:06:7d:25:b0:e1:ef:4e:5d:
05:b9:02:d5:85:9b:d9:25:60:65:a4:e4:e4:54:8d:
1d:3b:93:52:a1:3b:da:65:83:de:67:7d:f2:e4:36:
7d:7b:65:dc:78:fc:07:38:18:02:a9:43:8b:a8:f7:
ee:1f:fb:ed:ea:b1:f8:c2:f0:e0:c4:63:37:b3:54:
88:da:16:f4:5d:4d:bd:06:84:a7:a2:23:a4:cb:7d:
43:df:9d:44:21:b6:26:68:c5:d2:9f:d3:b1:c6:a8:
31:d4:80:85:6d:09:22:f5:ed:71:b5:5c:f0:89:24:
c7:8a:70:0e:6e:f6:f9:d1:d8:c1:89:79:c2:a6:f0:
c5:a6:0b:5d:f3:08:7d:26:11:70:3f:f3:7f:3e:4d:
cf:30:2c:c3:9d:56:b3:c9:c9:e3:28:bc:7c:fe:cf:
26:29:62:9d:ff:6a:8e:0e:e1:17:5c:67:b0:72:fc:
c0:21:8c:19:84:31:b8:33:5f:06:b3:ab:67:02:34:
e4:86:b1:4c:dd:37:c7:26:1f:cf:fd:69:60:37:35:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7E:57:31:34:C9:F8:8F:0B:C3:67:41:39:FE:0C:DD:FA:98:48:CB
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:23:49:8e:98:6b:f2:b5:11:bc:6d:78:bc:c6:56:96:5c:09:
3b:90:00:26:4e:d4:f4:75:26:c5:f7:3c:71:1a:8a:c4:b0:70:
aa:bd:2f:61:61:09:63:5f:a4:59:d0:90:ce:e0:fc:12:d2:00:
df:2a:8b:7c:36:98:22:17:6e:ec:0e:9f:3b:6e:a2:a5:e0:80:
57:f4:76:81:0e:9b:9d:b3:86:9a:6e:1b:62:5c:bf:7d:fd:f1:
87:7a:10:21:10:60:41:8d:dc:cf:a4:39:9e:20:b4:c0:70:68:
00:7d:39:9a:e6:1e:ee:ba:23:42:9b:2c:f5:43:55:c3:8c:65:
18:95:79:7d:92:9d:51:d7:30:73:dd:74:ca:62:b5:5e:08:b7:
3c:63:b7:46:a2:a5:58:c5:16:91:09:a9:e6:4a:18:47:53:41:
56:98:bd:7d:cc:7a:c3:3c:ee:ae:3a:8c:c9:a1:bf:e3:0e:2f:
c6:3a:93:67:50:0f:a0:a0:ce:88:4d:c3:c2:91:e5:d8:a9:24:
ba:33:74:df:d4:ec:ef:bb:09:8a:25:2c:5a:8f:5c:ec:db:89:
1b:dd:70:ef:fb:2b:14:45:a4:a9:73:87:f0:15:9a:e2:40:95:
ad:60:34:04:55:83:8a:1d:e7:7d:b4:49:76:2e:9c:51:25:87:
9c:b7:8f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFIJ7tXlLFPJRUnfipmxXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOGM3MThiNDVhNzc2NzU5MDlkN2ZkMWFmZWM2ZGFhYmFm
ZTg4YjIwHhcNMjYwOTIxMTgwMDQ0WhcNMjYwOTIyMTgwMDQ0WjAzMTEwLwYDVQQD
EyhhMzdlNTczMTM0YzlmODhmMGJjMzY3NDEzOWZlMGNkZGZhOTg0OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S+YVbkemFp2/5WBm4tmyvMThjg1
a9li2NjRVZT3MRMq27JdS1GQTRyVFuYWd9Ob0CzjBn0lsOHvTl0FuQLVhZvZJWBl
pOTkVI0dO5NSoTvaZYPeZ33y5DZ9e2XcePwHOBgCqUOLqPfuH/vt6rH4wvDgxGM3
s1SI2hb0XU29BoSnoiOky31D351EIbYmaMXSn9Oxxqgx1ICFbQki9e1xtVzwiSTH
inAObvb50djBiXnCpvDFpgtd8wh9JhFwP/N/Pk3PMCzDnVazycnjKLx8/s8mKWKd
/2qODuEXXGewcvzAIYwZhDG4M18Gs6tnAjTkhrFM3TfHJh/P/WlgNzU5YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKN+VzE0yfiPC8NnQTn+DN36mEjLMB8GA1UdIwQY
MBaAFOGMcYtFp3Z1kJ1/0a/sbaq6/oiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5Nzgt
MDRmMDQ0YmI5OGMyLzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5NzgtMDRmMDQ0YmI5OGMy
LzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSNJjphr
8rURvG14vMZWllwJO5AAJk7U9HUmxfc8cRqKxLBwqr0vYWEJY1+kWdCQzuD8EtIA
3yqLfDaYIhdu7A6fO26ipeCAV/R2gQ6bnbOGmm4bYly/ff3xh3oQIRBgQY3cz6Q5
niC0wHBoAH05muYe7rojQpss9UNVw4xlGJV5fZKdUdcwc910ymK1Xgi3PGO3RqKl
WMUWkQmp5koYR1NBVpi9fcx6wzzurjqMyaG/4w4vxjqTZ1APoKDOiE3DwpHl2Kkk
ujN039Ts77sJiiUsWo9c7NuJG91w7/srFEWkqXOH8BWa4kCVrWA0BFWDih3nfbRJ
di6cUSWHnLePlw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:15:16 2026 by rpki-client