Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: mHLRl2a+BEC4U4lpBDmwRerc6ib3drjnPMKbkjZYEnI=
Subject key identifier: 3C:91:EE:64:84:7A:33:E6:70:67:E7:0B:50:79:9A:88:32:B6:7C:87
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 01A0C28DD070F9B3EBE9B979BD5141FEA319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 06:01:08 +0000
Manifest this update: Mon 21 Sep 2026 06:01:08 +0000
Manifest next update: Tue 22 Sep 2026 06:01:08 +0000
Files and hashes: 1: 2fN3eFa0bjosUQqjhzxnSC-ZbG4.roa (hash: adZ7mZtP0EOWzdaHjuDb/aCtRN0v7AY6Df2Y3DcoCAs=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: 9v9tfUbw2tDI0XUcrud94ftXMSy3W9nIct+9ALVMniU=)
3: 9v_0JWu-xS3HupRXSgVGs4u-y9E.asa (hash: sTee8C1I1rz26eDODyCBNjrldfLm0tSqfnc3UkcLmsI=)
4: VFTnlB7fVRBsXRxIBDV1iFufXkE.asa (hash: iqnFhWzzO6j+t2K9kgwBf/ErkVyc0h9GJuE4NZx67oA=)
5: Vq_xfXcXdKcO1UzpZxW6yviyyFE.asa (hash: m8FshAEN/KHrFIoeny5MQ2gIm897mevyMxMfoqG/biI=)
6: YivW_0JV1PXQKNZNuU-YZa-0178.asa (hash: UK5xEl6Yl9PtluY9Smceeot0bF0az/oSTMQ4CgDOsRs=)
7: fQpqOd1l93-P-yMVY0liF15r3FA.roa (hash: fe669y4X3Xx1cDS4i66TQBvbP8wPt7PZfJZDiZ3TAoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:d0:70:f9:b3:eb:e9:b9:79:bd:51:41:fe:a3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Sep 21 06:01:08 2026 GMT
Not After : Sep 22 06:01:08 2026 GMT
Subject: CN=3c91ee64847a33e67067e70b50799a8832b67c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:be:2d:bf:3f:5e:83:20:cf:72:d0:3a:e3:
64:aa:fe:13:53:83:a3:cf:0c:ba:4b:b0:c7:e7:be:
71:b1:4e:89:a1:df:1b:b8:ec:dd:6e:38:7c:f0:9e:
d3:ea:4a:bf:c0:43:4e:2a:e5:5b:76:b6:25:b5:7a:
10:8a:5a:e6:b5:8b:fe:b7:79:20:bd:73:aa:1e:e2:
e9:36:63:3a:1c:31:1f:92:a2:56:4a:ca:3b:4c:cc:
c6:2a:dd:74:c4:9d:9f:87:03:2b:f7:db:cc:6e:6a:
f3:2d:a6:c4:20:6b:4f:de:30:ca:64:8b:ea:19:db:
3a:d1:30:09:02:a4:e4:fd:5a:03:4d:72:50:b8:9b:
e2:13:da:c0:65:e8:af:c5:6a:8f:c7:d5:6d:9d:fb:
e7:c1:63:04:c1:b2:90:96:03:06:6c:e7:2f:9f:64:
ee:93:e7:37:85:d7:ce:e4:33:57:a3:e5:ff:ce:b7:
cc:2d:41:db:f7:a6:76:8d:6d:50:a6:79:4a:0b:17:
e0:42:10:52:b1:eb:f5:bb:3f:18:0c:79:b3:0e:13:
f5:6e:84:7e:6c:31:cc:53:68:ff:6d:fa:2b:55:e0:
ab:17:66:24:8e:85:93:13:65:bc:97:5b:5f:8e:6f:
d8:db:0b:fe:24:46:dd:8a:13:95:d2:84:69:d4:c2:
5a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:91:EE:64:84:7A:33:E6:70:67:E7:0B:50:79:9A:88:32:B6:7C:87
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:23:f5:33:1a:a8:53:b0:a7:b2:7b:37:c4:5f:fa:76:e7:5a:
86:0a:46:85:26:50:f9:68:0a:19:b5:7a:7e:e7:bc:97:fc:36:
c4:5f:71:f7:98:1d:f3:d0:aa:3b:55:2f:29:fb:30:7c:b9:f6:
1b:f4:7f:d3:7d:48:40:31:73:39:fc:96:c5:74:b4:a9:43:7b:
1a:d7:dc:4e:9a:80:2e:be:61:48:8a:20:2c:8b:f6:5c:b6:98:
1e:de:52:59:92:65:bd:e8:06:8f:41:cf:96:50:ec:cb:5d:af:
63:26:2a:55:df:d0:74:f5:5d:5b:cc:cf:7b:75:cc:84:28:a0:
88:65:65:7f:7c:a2:61:85:a2:ed:b5:bd:4f:5e:60:e3:ac:95:
18:b7:b3:c9:b2:08:b6:fd:05:98:38:87:dc:ec:a3:f0:2b:bb:
16:51:7c:60:c5:ef:61:4d:30:af:15:dd:dd:13:f1:c5:52:01:
b0:44:7f:1b:9a:d6:b9:76:7a:63:ff:b1:fc:c2:60:67:07:7c:
10:2b:a0:1b:78:1e:e6:83:f3:33:bf:b8:38:b8:ce:ee:97:55:
eb:14:ac:2c:b9:f5:96:56:62:c3:c2:bf:1f:48:b2:9e:ae:05:
c9:13:73:06:75:7a:d3:e9:1e:b4:1a:61:29:38:54:3a:04:76:
eb:41:26:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjdBw+bPr6bl5vVFB/qMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGJjMjg3MGRlMjU5OWRhZjY2NDk3ZjU3MjljNzRiMzNl
Zjk5M2EwHhcNMjYwOTIxMDYwMTA4WhcNMjYwOTIyMDYwMTA4WjAzMTEwLwYDVQQD
EygzYzkxZWU2NDg0N2EzM2U2NzA2N2U3MGI1MDc5OWE4ODMyYjY3Yzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGK+Lb8/XoMgz3LQOuNkqv4TU4Oj
zwy6S7DH575xsU6Jod8buOzdbjh88J7T6kq/wENOKuVbdrYltXoQilrmtYv+t3kg
vXOqHuLpNmM6HDEfkqJWSso7TMzGKt10xJ2fhwMr99vMbmrzLabEIGtP3jDKZIvq
Gds60TAJAqTk/VoDTXJQuJviE9rAZeivxWqPx9VtnfvnwWMEwbKQlgMGbOcvn2Tu
k+c3hdfO5DNXo+X/zrfMLUHb96Z2jW1QpnlKCxfgQhBSsev1uz8YDHmzDhP1boR+
bDHMU2j/bforVeCrF2YkjoWTE2W8l1tfjm/Y2wv+JEbdihOV0oRp1MJauwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyR7mSEejPmcGfnC1B5mogytnyHMB8GA1UdIwQY
MBaAFOJLwocN4lmdr2ZJf1cpx0sz75k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEt
NjhhMmYwYmI1YjdhLzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iZTE3MjAtODAxZS00ZjllLWE1YzEtNjhhMmYwYmI1Yjdh
LzEvNGt2Q2h3M2lXWjJ2WmtsX1Z5bkhTelB2bVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiP1Mxqo
U7Cnsns3xF/6dudahgpGhSZQ+WgKGbV6fue8l/w2xF9x95gd89CqO1UvKfswfLn2
G/R/031IQDFzOfyWxXS0qUN7GtfcTpqALr5hSIogLIv2XLaYHt5SWZJlvegGj0HP
llDsy12vYyYqVd/QdPVdW8zPe3XMhCigiGVlf3yiYYWi7bW9T15g46yVGLezybII
tv0FmDiH3Oyj8Cu7FlF8YMXvYU0wrxXd3RPxxVIBsER/G5rWuXZ6Y/+x/MJgZwd8
ECugG3ge5oPzM7+4OLjO7pdV6xSsLLn1llZiw8K/H0iynq4FyRNzBnV60+ketBph
KThUOgR260Emnw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:16:46 2026 by rpki-client