Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: JwZAiXfpK7gdoFNG3Vih2H4L0JbkfYFywPWOr46nKTA=
Subject key identifier: F1:71:DF:5E:14:9A:9C:EB:D3:70:6B:72:E3:8E:DF:18:E5:60:FA:62
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 01A0C1B1D875B70CE37FDE29ABF0F884774B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 02:00:52 +0000
Manifest this update: Mon 21 Sep 2026 02:00:52 +0000
Manifest next update: Tue 22 Sep 2026 02:00:52 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: 4B+xq8TUvvA3tF6MXXJeh35e62WyvUr9/tocQ/eie4k=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:d8:75:b7:0c:e3:7f:de:29:ab:f0:f8:84:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Sep 21 02:00:52 2026 GMT
Not After : Sep 22 02:00:52 2026 GMT
Subject: CN=f171df5e149a9cebd3706b72e38edf18e560fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:51:a2:1d:35:a7:04:a7:1a:f8:a4:dc:00:
7a:0f:ba:5b:bb:5a:08:68:57:d1:24:1c:d8:b9:03:
70:3e:cf:6c:c0:ee:49:65:9e:23:86:95:b4:64:ea:
60:66:eb:90:e1:92:c7:01:ee:2f:2c:72:9b:de:87:
e3:07:99:28:e0:52:f5:0a:e2:fc:fd:e2:67:a9:2a:
95:c0:fe:42:6a:46:1e:0c:ee:65:c9:61:33:47:41:
c3:f2:08:dd:8a:70:18:52:e4:09:81:d9:a3:9b:89:
b4:07:e8:3d:89:56:4f:d8:c2:3d:83:7f:f1:d9:0c:
f7:c6:29:07:b9:25:31:f1:b6:07:31:20:c3:b5:f0:
ce:73:1f:c0:1c:ea:57:af:96:57:d3:58:66:fb:f4:
2e:4e:c1:99:22:84:99:99:69:33:f0:14:d2:81:97:
af:ac:d3:61:38:0e:09:bb:f2:c5:a7:23:fc:4b:94:
be:6b:ca:ac:48:45:a3:29:b6:bb:c0:60:fd:0a:0b:
71:ab:24:cd:7f:3c:8b:71:23:30:be:08:13:86:aa:
60:91:68:b8:5e:aa:23:a1:b1:a2:2c:bc:50:35:71:
13:af:8c:aa:c0:85:af:f9:8e:96:90:ce:f8:83:90:
46:e6:d1:68:a3:78:2d:8f:a0:1d:f0:2b:20:36:17:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:71:DF:5E:14:9A:9C:EB:D3:70:6B:72:E3:8E:DF:18:E5:60:FA:62
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2e:ad:0d:57:48:16:c1:5a:c8:62:cf:5d:02:d7:68:52:11:
48:72:9d:08:02:f5:7d:fa:31:75:9a:ca:4c:ca:b0:88:0e:50:
f6:3e:0b:ea:d1:38:cb:3b:c1:fc:98:55:8b:69:70:72:e9:4a:
6c:fc:aa:e5:61:0b:96:79:9f:fd:6e:f5:5c:8b:8b:58:55:6a:
da:7a:ee:94:48:4f:42:5a:30:e5:1b:9a:9f:19:eb:8a:fd:88:
85:3e:a2:4e:7d:2e:22:a3:bb:a9:f2:2d:87:8c:82:49:8b:c1:
a2:bf:d5:a3:75:6a:bb:15:8d:cb:91:b8:1d:2b:e7:6f:9f:4e:
c1:90:24:ed:26:09:6f:85:9d:6b:71:da:51:85:80:fe:39:76:
d9:40:da:b3:aa:1c:26:db:46:65:61:1d:fb:2b:d9:58:2b:2b:
1e:84:95:cc:9f:f0:62:b3:21:fb:70:82:1b:ef:31:fd:f2:c4:
13:a2:e6:b8:90:58:11:ed:e9:fe:6e:02:5b:bb:e2:d3:fb:11:
7c:ae:af:0f:6f:d0:92:36:cf:08:9b:a4:1b:15:d1:c4:0f:f5:
fa:2b:dc:20:90:83:ba:11:37:b3:19:df:0f:58:9e:99:fd:e7:
b2:bd:ee:5e:3d:f3:bf:ac:82:1c:f9:18:51:e2:9e:c9:be:18:
81:7e:62:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsdh1twzjf94pq/D4hHdLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOWY0OTY0MDA5Yzc0YmI4MWFlZDljNjcwNzgwMTNkYzg2
OGVmMTcwHhcNMjYwOTIxMDIwMDUyWhcNMjYwOTIyMDIwMDUyWjAzMTEwLwYDVQQD
EyhmMTcxZGY1ZTE0OWE5Y2ViZDM3MDZiNzJlMzhlZGYxOGU1NjBmYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9xRoh01pwSnGvik3AB6D7pbu1oI
aFfRJBzYuQNwPs9swO5JZZ4jhpW0ZOpgZuuQ4ZLHAe4vLHKb3ofjB5ko4FL1CuL8
/eJnqSqVwP5CakYeDO5lyWEzR0HD8gjdinAYUuQJgdmjm4m0B+g9iVZP2MI9g3/x
2Qz3xikHuSUx8bYHMSDDtfDOcx/AHOpXr5ZX01hm+/QuTsGZIoSZmWkz8BTSgZev
rNNhOA4Ju/LFpyP8S5S+a8qsSEWjKba7wGD9CgtxqyTNfzyLcSMwvggThqpgkWi4
XqojobGiLLxQNXETr4yqwIWv+Y6WkM74g5BG5tFoo3gtj6Ad8CsgNhd/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFx314Umpzr03BrcuOO3xjlYPpiMB8GA1UdIwQY
MBaAFOKfSWQAnHS7ga7ZxnB4AT3IaO8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgt
OTMyYWIzNDFhMzY3LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS82NTVhMWMtYmFmNS00NzVmLWEzMDgtOTMyYWIzNDFhMzY3
LzEvNHA5SlpBQ2NkTHVCcnRuR2NIZ0JQY2hvN3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqS6tDVdI
FsFayGLPXQLXaFIRSHKdCAL1ffoxdZrKTMqwiA5Q9j4L6tE4yzvB/JhVi2lwculK
bPyq5WELlnmf/W71XIuLWFVq2nrulEhPQlow5Ruanxnriv2IhT6iTn0uIqO7qfIt
h4yCSYvBor/Vo3VquxWNy5G4HSvnb59OwZAk7SYJb4Wda3HaUYWA/jl22UDas6oc
JttGZWEd+yvZWCsrHoSVzJ/wYrMh+3CCG+8x/fLEE6LmuJBYEe3p/m4CW7vi0/sR
fK6vD2/QkjbPCJukGxXRxA/1+ivcIJCDuhE3sxnfD1iemf3nsr3uXj3zv6yCHPkY
UeKeyb4YgX5iwQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:23:47 2026 by rpki-client