Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: NxNUcWWqd3YvDbPJBG0rr5RPHVbJq8MXWb53Pyhj67o=
Subject key identifier: 71:3D:88:74:0C:59:C7:63:4D:CF:9B:2E:53:85:BD:F2:82:98:F3:59
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 01A0C5FC9421FEBD06FC86F43F340ADFDB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 22:00:59 +0000
Manifest this update: Mon 21 Sep 2026 22:00:59 +0000
Manifest next update: Tue 22 Sep 2026 22:00:59 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: QMtog07vGCeqkN6GoC8sgewGepJwE8siTA0r8gV9Y48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:94:21:fe:bd:06:fc:86:f4:3f:34:0a:df:db:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Sep 21 22:00:59 2026 GMT
Not After : Sep 22 22:00:59 2026 GMT
Subject: CN=713d88740c59c7634dcf9b2e5385bdf28298f359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:3c:2d:dd:d8:f0:33:80:6b:fa:69:67:35:
cd:52:2a:0e:fa:8e:0c:63:d9:a7:80:f0:fd:4f:2b:
52:55:8c:0d:84:06:57:79:c5:ea:f4:8a:8d:33:ba:
a1:0f:07:74:3b:a7:e3:7c:dd:f6:3a:91:eb:b7:eb:
73:4a:09:04:85:6d:d1:ed:fe:1d:cb:9c:59:19:fe:
c7:ce:05:89:20:71:aa:97:31:ef:ac:93:c7:7f:d9:
9e:62:6d:01:6b:77:31:10:1e:89:9e:de:aa:9b:ee:
65:19:2a:74:33:78:f3:39:49:50:f5:98:af:6e:24:
14:3d:24:3e:f6:b5:58:ab:29:85:1b:9b:7a:52:f0:
81:ef:49:af:bf:f0:f2:52:cf:f9:3a:ec:a0:ea:72:
57:fb:cd:a4:3d:bd:67:da:e0:68:7a:22:30:ef:b0:
2c:57:25:b8:77:ab:88:47:a2:f5:4a:0d:21:c0:69:
63:4b:58:e2:1f:e4:12:fb:8a:27:72:96:49:bc:04:
17:52:7f:33:56:27:1b:1f:90:c6:bc:ee:77:7c:c5:
e3:2c:47:f8:e8:6c:26:78:28:70:d0:da:2d:49:04:
6e:2e:0e:46:6c:72:99:98:a7:96:18:ac:0a:19:23:
63:15:4a:71:9f:21:e2:ef:20:02:f8:86:dd:74:69:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3D:88:74:0C:59:C7:63:4D:CF:9B:2E:53:85:BD:F2:82:98:F3:59
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:df:f4:9a:30:4f:9a:c1:e7:0b:de:ba:c6:58:b0:10:c6:54:
50:9a:61:04:15:71:0b:e6:c4:b3:ae:20:75:44:47:e0:23:e3:
2a:5d:04:d0:11:67:d6:63:c2:2c:14:8e:01:56:08:4a:d0:e1:
f8:ff:1e:8d:1a:9f:1d:69:94:57:f4:e5:6a:1e:20:6d:c3:44:
6a:07:08:4a:4b:c0:c3:df:f2:b7:8e:ad:93:da:89:9f:78:81:
1c:ac:2a:9d:01:93:1e:56:6e:b0:bf:03:37:dd:a0:5f:df:b3:
9f:ac:3d:9a:56:9d:c2:a0:fc:3c:a2:06:65:fc:ac:e2:cc:74:
84:25:60:cf:1a:e2:12:dc:4d:01:43:e5:f6:ed:82:7e:16:2e:
aa:e2:05:e8:7f:bb:9d:59:07:3a:1e:7c:55:0f:a2:18:c1:61:
2d:cf:0f:23:c1:a4:15:68:ef:e4:f4:2b:a1:c3:42:23:c4:2c:
3f:54:fe:08:aa:43:af:68:e4:c2:b0:da:01:7c:07:78:c4:17:
83:8d:66:54:28:f7:bb:09:c7:fb:79:fe:3a:ac:68:30:5e:6b:
a8:2b:a2:be:a6:00:0a:82:b9:60:e1:97:b9:b1:56:00:80:33:
b4:4e:aa:53:30:92:f3:c1:6b:f8:5b:74:36:db:3a:02:c4:f5:
ee:99:d5:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/JQh/r0G/Ib0PzQK39sTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjg2MWVjODRmYzU2ZWFjYTliOGM2MzZlNzkyM2U2Zjky
ZGNjZWEwHhcNMjYwOTIxMjIwMDU5WhcNMjYwOTIyMjIwMDU5WjAzMTEwLwYDVQQD
Eyg3MTNkODg3NDBjNTljNzYzNGRjZjliMmU1Mzg1YmRmMjgyOThmMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfM8Ld3Y8DOAa/ppZzXNUioO+o4M
Y9mngPD9TytSVYwNhAZXecXq9IqNM7qhDwd0O6fjfN32OpHrt+tzSgkEhW3R7f4d
y5xZGf7HzgWJIHGqlzHvrJPHf9meYm0Ba3cxEB6Jnt6qm+5lGSp0M3jzOUlQ9Ziv
biQUPSQ+9rVYqymFG5t6UvCB70mvv/DyUs/5Ouyg6nJX+82kPb1n2uBoeiIw77As
VyW4d6uIR6L1Sg0hwGljS1jiH+QS+4oncpZJvAQXUn8zVicbH5DGvO53fMXjLEf4
6GwmeChw0NotSQRuLg5GbHKZmKeWGKwKGSNjFUpxnyHi7yAC+IbddGkTEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHE9iHQMWcdjTc+bLlOFvfKCmPNZMB8GA1UdIwQY
MBaAFOH4YeyE/FbqypuMY255I+b5LczqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mZDhhOTQtZGFlZi00NjQ0LWJiNWUt
MjFhNGQ1Y2MyYWJmLzEvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mZDhhOTQtZGFlZi00NjQ0LWJiNWUtMjFhNGQ1Y2MyYWJm
LzEvNGZoaDdJVDhWdXJLbTR4amJua2o1dmt0ek9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHN/0mjBP
msHnC966xliwEMZUUJphBBVxC+bEs64gdURH4CPjKl0E0BFn1mPCLBSOAVYIStDh
+P8ejRqfHWmUV/Tlah4gbcNEagcISkvAw9/yt46tk9qJn3iBHKwqnQGTHlZusL8D
N92gX9+zn6w9mladwqD8PKIGZfys4sx0hCVgzxriEtxNAUPl9u2CfhYuquIF6H+7
nVkHOh58VQ+iGMFhLc8PI8GkFWjv5PQrocNCI8QsP1T+CKpDr2jkwrDaAXwHeMQX
g41mVCj3uwnH+3n+OqxoMF5rqCuivqYACoK5YOGXubFWAIAztE6qUzCS88Fr+Ft0
Nts6AsT17pnVDQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:47:20 2026 by rpki-client