Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
File: A2buGcyLQ0A-42qUouguQBnjUdE.mft (raw, json)
Hash identifier: Th1KFhsGw4iMym0rm75YBVWcFG2SR8Te+H56EYDUOlk=
Subject key identifier: E3:4F:FA:57:93:FE:99:2C:6F:21:E0:4C:F0:0B:42:97:94:36:C6:AF
Authority key identifier: 03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
Certificate issuer: /CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Certificate serial: 01A0C2C3F1D6FDDD8439931D59FCE0190945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
Manifest number: C4
Signing time: Mon 21 Sep 2026 07:00:16 +0000
Manifest this update: Mon 21 Sep 2026 07:00:16 +0000
Manifest next update: Tue 22 Sep 2026 07:00:16 +0000
Files and hashes: 1: A2buGcyLQ0A-42qUouguQBnjUdE.crl (hash: WvwUQEbA3vBLFQyswsmHKCFysIttJLuLn+nym9KLQvk=)
2: sbxckOpdRmsL3IOZkXvPw_lxG8g.roa (hash: +YSKpNz3HshHTq5k+BAAiNGsiW2WG4yJKy7VDrjUYAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:f1:d6:fd:dd:84:39:93:1d:59:fc:e0:19:09:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Validity
Not Before: Sep 21 07:00:16 2026 GMT
Not After : Sep 22 07:00:16 2026 GMT
Subject: CN=e34ffa5793fe992c6f21e04cf00b42979436c6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:bf:cc:13:61:f1:d5:6a:a0:f0:d9:a5:f7:
f3:26:0a:0e:cb:20:90:b0:95:ad:f3:73:28:77:3d:
cb:93:be:a6:a0:5c:97:1e:b8:85:ef:77:d4:1f:43:
61:77:be:74:cf:18:ab:da:81:51:89:36:29:73:8d:
39:29:ae:58:e6:32:b4:ba:1b:4d:72:a6:cb:23:44:
1e:3e:5b:ed:b4:d0:59:1a:67:c2:2c:21:39:54:cb:
ba:4f:8e:50:0a:c3:de:cb:d0:b2:3a:b5:b2:9c:69:
99:7e:12:67:3f:2e:e3:22:b7:f3:6a:fb:4b:57:7a:
b5:8e:63:84:56:5b:70:1b:e6:2d:97:08:8b:e4:dc:
74:d6:32:6c:09:4b:3f:a7:55:ff:af:57:09:49:7c:
f5:cb:d9:4e:eb:40:22:ed:95:25:1c:9e:82:8c:f3:
c0:d3:b3:c0:02:6f:b1:f4:d2:b3:e8:8f:73:05:59:
94:ab:61:c6:e3:5c:c1:69:09:cc:ad:06:e3:3f:d6:
76:59:ec:29:68:29:7e:5f:ee:5a:16:c7:77:8e:8f:
e9:c4:2e:e4:fa:58:b7:2e:42:26:69:cf:aa:bd:d9:
62:02:fb:e5:2e:31:be:51:2f:6a:65:5e:af:3e:6c:
38:47:45:02:a0:02:2e:d9:48:50:35:47:3f:6b:d0:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:FA:57:93:FE:99:2C:6F:21:E0:4C:F0:0B:42:97:94:36:C6:AF
X509v3 Authority Key Identifier:
keyid:03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:74:2f:9e:9c:f1:fa:43:36:5d:d4:41:9d:6d:94:02:b5:77:
18:fe:95:7f:40:ac:84:39:f5:00:a0:2d:b3:37:20:ba:9a:6e:
09:e5:2f:30:4a:67:54:be:c3:66:64:e5:2c:11:92:38:c5:aa:
d1:5f:c3:29:64:54:02:72:6f:d3:35:30:c2:b4:7f:95:f0:64:
b8:e3:54:e7:20:82:31:4a:65:a1:5f:03:14:25:83:b7:40:4a:
2c:e3:7e:68:6a:97:38:e5:b2:30:c2:09:41:5a:81:ef:e3:15:
5e:78:e2:6b:4a:18:0f:92:64:ec:8e:e4:45:ef:72:f0:01:26:
31:eb:3e:cb:29:13:bf:b8:57:02:d7:82:da:f3:1b:29:89:71:
19:84:34:48:21:88:ba:d3:62:75:90:c5:44:57:4d:f0:82:32:
59:d7:8d:aa:7a:03:10:c5:0f:70:ef:a2:5f:f0:ad:53:6e:14:
ca:d0:9d:61:2b:2c:98:42:33:2a:3b:a9:e0:5f:86:4d:50:1e:
3c:69:4a:b7:8c:8d:f1:bc:78:5b:33:4e:f9:ff:65:4b:3d:dc:
e3:af:23:7c:0b:b5:b6:65:f8:07:7c:a2:3b:84:3a:0b:df:d4:
5b:ad:7f:9b:2b:f6:c4:a2:b0:cb:2b:cf:4b:89:a8:b5:64:2a:
bc:ee:d0:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCw/HW/d2EOZMdWfzgGQlFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNjZlZTE5Y2M4YjQzNDAzZWUzNmE5NGEyZTgyZTQwMTll
MzUxZDEwHhcNMjYwOTIxMDcwMDE2WhcNMjYwOTIyMDcwMDE2WjAzMTEwLwYDVQQD
EyhlMzRmZmE1NzkzZmU5OTJjNmYyMWUwNGNmMDBiNDI5Nzk0MzZjNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgG/zBNh8dVqoPDZpffzJgoOyyCQ
sJWt83Modz3Lk76moFyXHriF73fUH0Nhd750zxir2oFRiTYpc405Ka5Y5jK0uhtN
cqbLI0QePlvttNBZGmfCLCE5VMu6T45QCsPey9CyOrWynGmZfhJnPy7jIrfzavtL
V3q1jmOEVltwG+YtlwiL5Nx01jJsCUs/p1X/r1cJSXz1y9lO60Ai7ZUlHJ6CjPPA
07PAAm+x9NKz6I9zBVmUq2HG41zBaQnMrQbjP9Z2WewpaCl+X+5aFsd3jo/pxC7k
+li3LkImac+qvdliAvvlLjG+US9qZV6vPmw4R0UCoAIu2UhQNUc/a9BA5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONP+leT/pksbyHgTPALQpeUNsavMB8GA1UdIwQY
MBaAFANm7hnMi0NAPuNqlKLoLkAZ41HRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJidUdjeUxRMEEtNDJxVW91Z3VRQm5qVWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lNjQwOWUtZTcyZS00NTYyLTllNWIt
MTNiNGEyM2RhMmMzLzEvQTJidUdjeUxRMEEtNDJxVW91Z3VRQm5qVWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lNjQwOWUtZTcyZS00NTYyLTllNWItMTNiNGEyM2RhMmMz
LzEvQTJidUdjeUxRMEEtNDJxVW91Z3VRQm5qVWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXQvnpzx
+kM2XdRBnW2UArV3GP6Vf0CshDn1AKAtszcguppuCeUvMEpnVL7DZmTlLBGSOMWq
0V/DKWRUAnJv0zUwwrR/lfBkuONU5yCCMUploV8DFCWDt0BKLON+aGqXOOWyMMIJ
QVqB7+MVXnjia0oYD5Jk7I7kRe9y8AEmMes+yykTv7hXAteC2vMbKYlxGYQ0SCGI
utNidZDFRFdN8IIyWdeNqnoDEMUPcO+iX/CtU24UytCdYSssmEIzKjup4F+GTVAe
PGlKt4yN8bx4WzNO+f9lSz3c468jfAu1tmX4B3yiO4Q6C9/UW61/myv2xKKwyyvP
S4motWQqvO7QEw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:57 2026 by rpki-client