Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: zYCCSO6Vk79xIbj6kFtXStpPg1e9qoWdisovWYOrxV8=
Subject key identifier: 50:7F:9A:40:70:7B:D2:74:90:3A:85:22:87:3A:C1:DD:1F:5D:6A:13
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 01A0C4B2A9BB7B40D711C435CD67CF95F823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1A62
Signing time: Mon 21 Sep 2026 16:00:38 +0000
Manifest this update: Mon 21 Sep 2026 16:00:38 +0000
Manifest next update: Tue 22 Sep 2026 16:00:38 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: aKGdqUQvBdRCD2Qf1qs5FfT53GiGXVcYlj/vEoT79BI=)
2: sz56j9LVi6BvJ23bxmQK9h0mrwg.asa (hash: L3jU/73+xzk1SL2NMp3V4ynSAIXNNRQbicPSs6+Khfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:a9:bb:7b:40:d7:11:c4:35:cd:67:cf:95:f8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Sep 21 16:00:38 2026 GMT
Not After : Sep 22 16:00:38 2026 GMT
Subject: CN=507f9a40707bd274903a8522873ac1dd1f5d6a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:4d:4d:b3:bc:86:32:08:8e:e5:44:a4:c7:
b2:0a:d5:4b:a5:de:53:b2:18:7d:5c:df:08:d0:7a:
41:cd:11:84:e4:fa:d8:a3:1c:b8:69:9a:2d:25:41:
39:57:d4:f5:17:a9:72:ff:82:19:6d:52:8f:3b:e8:
e3:fa:c8:5b:99:3a:3b:9c:48:fe:05:af:32:dc:ef:
ed:02:ec:4b:a9:7c:2c:f1:2a:cc:22:99:48:53:60:
a3:a5:de:c5:f2:8a:35:39:ef:41:7f:7c:4f:6c:38:
c2:e7:e0:df:64:4a:19:f4:a6:26:c2:dd:a6:5e:ff:
f3:7c:e6:c7:6f:27:1f:61:d3:e7:a3:be:0f:0b:10:
d4:8d:02:88:24:fc:1d:90:ad:e6:73:b0:5e:73:c2:
34:1b:d3:15:00:42:ff:8a:07:69:45:7f:03:48:10:
b4:ef:5e:70:8f:c6:78:c5:53:f1:f6:24:da:10:a7:
58:fa:5c:f3:09:98:d0:cd:5e:8a:5b:32:9d:45:34:
50:b1:4d:d0:24:6e:12:3e:2b:87:25:b4:85:7f:59:
6f:b8:15:67:d8:cd:96:f7:83:f7:2e:f5:7d:0f:51:
69:ca:0e:2a:18:1a:d1:1a:f5:7b:4a:56:f5:50:82:
d8:e1:e0:d4:11:65:61:a7:e7:62:30:70:31:00:50:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7F:9A:40:70:7B:D2:74:90:3A:85:22:87:3A:C1:DD:1F:5D:6A:13
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:79:11:39:26:41:86:a6:09:77:0f:a8:1c:a6:ec:c7:2f:
b5:5a:c7:58:77:65:ad:ba:ef:7c:1b:9f:85:e0:53:e3:5a:57:
fd:f7:cf:28:48:b7:f0:13:eb:d1:34:90:26:6a:4e:27:ab:91:
ff:aa:77:cd:fe:d9:c1:33:13:2c:02:ad:ca:2d:4e:66:2b:32:
5f:89:ac:c5:c7:b6:9e:da:1e:41:52:8e:10:05:5b:03:2a:9f:
d5:19:24:e5:fb:c0:b0:fa:39:11:d1:4f:64:ce:aa:01:49:1c:
68:73:bd:6d:04:0e:3e:d8:03:10:3a:b3:83:b1:36:3c:26:3e:
81:f7:0f:ca:4c:5a:93:af:90:d9:5c:40:99:df:a0:59:51:52:
0d:f9:db:d4:d1:e4:c2:40:69:35:38:75:26:70:1d:c9:a7:19:
60:f5:e8:d1:93:45:40:59:32:a3:e2:59:39:bb:65:67:e6:f1:
14:c7:25:7f:b1:f9:ed:3a:5f:f6:07:58:2e:7e:99:dd:02:af:
f1:89:84:52:c2:be:d9:8f:e1:ed:59:d6:40:c6:3b:4d:e8:a5:
ff:36:85:44:71:5a:50:a8:a8:03:56:7a:36:10:bd:01:63:5d:
2e:3f:03:bd:ef:c9:ee:f7:ea:fd:64:a8:bd:a7:f2:f8:f6:cf:
66:88:0e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEsqm7e0DXEcQ1zWfPlfgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh
NTY3ZjYwHhcNMjYwOTIxMTYwMDM4WhcNMjYwOTIyMTYwMDM4WjAzMTEwLwYDVQQD
Eyg1MDdmOWE0MDcwN2JkMjc0OTAzYTg1MjI4NzNhYzFkZDFmNWQ2YTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzNNTbO8hjIIjuVEpMeyCtVLpd5T
shh9XN8I0HpBzRGE5PrYoxy4aZotJUE5V9T1F6ly/4IZbVKPO+jj+shbmTo7nEj+
Ba8y3O/tAuxLqXws8SrMIplIU2Cjpd7F8oo1Oe9Bf3xPbDjC5+DfZEoZ9KYmwt2m
Xv/zfObHbycfYdPno74PCxDUjQKIJPwdkK3mc7Bec8I0G9MVAEL/igdpRX8DSBC0
715wj8Z4xVPx9iTaEKdY+lzzCZjQzV6KWzKdRTRQsU3QJG4SPiuHJbSFf1lvuBVn
2M2W94P3LvV9D1Fpyg4qGBrRGvV7Slb1UILY4eDUEWVhp+diMHAxAFAfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB/mkBwe9J0kDqFIoc6wd0fXWoTMB8GA1UdIwQY
MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt
ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3
LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzx5ETkm
QYamCXcPqBym7McvtVrHWHdlrbrvfBufheBT41pX/ffPKEi38BPr0TSQJmpOJ6uR
/6p3zf7ZwTMTLAKtyi1OZisyX4msxce2ntoeQVKOEAVbAyqf1Rkk5fvAsPo5EdFP
ZM6qAUkcaHO9bQQOPtgDEDqzg7E2PCY+gfcPykxak6+Q2VxAmd+gWVFSDfnb1NHk
wkBpNTh1JnAdyacZYPXo0ZNFQFkyo+JZObtlZ+bxFMclf7H57Tpf9gdYLn6Z3QKv
8YmEUsK+2Y/h7VnWQMY7Teil/zaFRHFaUKioA1Z6NhC9AWNdLj8Dve/J7vfq/WSo
vafy+PbPZogO/w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:58:31 2026 by rpki-client