Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: rpwdKN0K9RTnwKkdah5eoTdk5bKWi0EwKWvLFZFBTjo=
Subject key identifier: 6D:5A:08:12:4D:2B:47:E1:5D:B2:C4:CD:71:D5:C1:66:D4:E9:1D:62
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 01A0C40E71B528F670611725D01AB561A609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 14DF
Signing time: Mon 21 Sep 2026 13:01:15 +0000
Manifest this update: Mon 21 Sep 2026 13:01:15 +0000
Manifest next update: Tue 22 Sep 2026 13:01:15 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: cM3W9mrPcD7yAand44XnwrmwNHDig9W03mTqU8qcLi8=)
2: maEv5ArPl0MhVYV7tQz9rkyTAIo.roa (hash: dBiLGOeBpvZw0H7gef9rbExfaEt6iLiJPLCEXhR/0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:71:b5:28:f6:70:61:17:25:d0:1a:b5:61:a6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Sep 21 13:01:15 2026 GMT
Not After : Sep 22 13:01:15 2026 GMT
Subject: CN=6d5a08124d2b47e15db2c4cd71d5c166d4e91d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:cb:5e:fe:ca:34:8f:c5:f6:69:f9:7e:c7:
0f:4a:b2:08:7d:9b:7d:7a:6d:00:c4:16:86:4a:dd:
30:f8:8c:61:d0:58:29:2b:7d:c1:8e:32:68:22:73:
57:b7:cd:fa:71:77:a2:e4:0b:50:eb:4d:ab:9f:e8:
42:81:5e:5b:0a:12:e5:09:24:2c:c0:23:55:31:76:
d5:31:dd:63:8d:a8:6b:b1:ec:41:85:88:7d:c4:01:
de:20:49:87:a3:fa:80:fd:91:4a:f4:f2:7e:ef:27:
39:e9:6f:4c:1f:66:8f:ee:c8:52:f3:6c:c4:3f:32:
e0:05:e0:a5:6e:42:87:68:1a:5e:ad:95:ad:17:b6:
50:a9:85:3f:ac:b0:f2:2b:12:6d:f1:2b:b1:ea:cf:
b7:2b:d8:f0:a1:2d:4e:09:9b:de:96:cb:95:7f:1c:
83:46:2c:c2:48:d7:ab:70:35:96:fc:2f:2f:c5:c4:
19:5a:3e:00:78:87:65:ec:31:ad:74:2f:d4:53:cb:
9c:98:5c:cf:ed:ba:f8:71:b3:74:5d:25:23:8b:49:
86:0b:c8:f2:1a:66:c1:47:40:97:99:38:fd:d2:9e:
96:09:a3:d1:8f:c7:9a:80:d1:39:ce:de:74:b9:f8:
5c:4d:c0:bb:80:cd:2c:e3:bd:6a:7e:b5:fa:b4:1c:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5A:08:12:4D:2B:47:E1:5D:B2:C4:CD:71:D5:C1:66:D4:E9:1D:62
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e9:49:c3:83:81:59:6a:03:97:65:06:6f:24:7b:f5:ad:24:
5e:cb:51:d2:1a:c5:ff:d6:80:e9:3e:1d:61:2e:63:e2:5e:98:
db:e5:a3:22:48:bf:a8:91:a4:0c:99:e7:4c:49:6a:88:a2:b8:
40:1e:58:42:62:d3:05:d8:bd:f1:af:aa:c4:16:b2:03:4d:bd:
7d:59:9c:09:ca:38:30:ac:25:52:fa:6c:d2:2e:99:70:ad:36:
03:25:06:49:75:ef:1a:c0:85:85:e5:85:03:99:13:f2:42:fb:
fa:fd:4e:33:48:d8:4f:65:57:22:94:fc:bd:13:51:ac:5d:e8:
85:37:d4:2d:01:83:3c:15:f3:9f:80:44:02:92:52:28:bf:e9:
31:8e:ef:a3:4c:cd:07:fd:7a:40:3e:20:e1:a1:d6:16:a0:3c:
b4:e3:11:17:60:ff:4e:62:d0:8a:13:13:b6:2e:19:d7:a3:b3:
c1:5b:93:34:2f:bb:d7:55:56:5e:82:22:08:76:7f:31:2f:a3:
5c:6e:18:d8:99:be:fb:9c:67:11:35:3a:ad:85:d6:c7:aa:11:
76:9b:fb:05:ca:4a:5c:03:c7:0d:3c:a5:5d:d9:0c:03:94:62:
06:b2:5d:e4:fe:4a:d1:3e:df:0a:17:09:19:98:36:ea:7a:02:
b4:29:4b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDnG1KPZwYRcl0Bq1YaYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDNjOWFmNmNmNTJiOGEzOTBiNThmMDBiMTRhODg3MTAz
MzY5NDQwHhcNMjYwOTIxMTMwMTE1WhcNMjYwOTIyMTMwMTE1WjAzMTEwLwYDVQQD
Eyg2ZDVhMDgxMjRkMmI0N2UxNWRiMmM0Y2Q3MWQ1YzE2NmQ0ZTkxZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7fLXv7KNI/F9mn5fscPSrIIfZt9
em0AxBaGSt0w+Ixh0FgpK33BjjJoInNXt836cXei5AtQ602rn+hCgV5bChLlCSQs
wCNVMXbVMd1jjahrsexBhYh9xAHeIEmHo/qA/ZFK9PJ+7yc56W9MH2aP7shS82zE
PzLgBeClbkKHaBperZWtF7ZQqYU/rLDyKxJt8Sux6s+3K9jwoS1OCZvelsuVfxyD
RizCSNercDWW/C8vxcQZWj4AeIdl7DGtdC/UU8ucmFzP7br4cbN0XSUji0mGC8jy
GmbBR0CXmTj90p6WCaPRj8eagNE5zt50ufhcTcC7gM0s471qfrX6tBxMRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1aCBJNK0fhXbLEzXHVwWbU6R1iMB8GA1UdIwQY
MBaAFOHTya9s9SuKOQtY8AsUqIcQM2lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQt
Y2M3Njc5ZjE4MDJmLzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYzBkY2QtOGU0Ny00NDJjLWIwZjQtY2M3Njc5ZjE4MDJm
LzEvNGRQSnIyejFLNG81QzFqd0N4U29oeEF6YVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOlJw4OB
WWoDl2UGbyR79a0kXstR0hrF/9aA6T4dYS5j4l6Y2+WjIki/qJGkDJnnTElqiKK4
QB5YQmLTBdi98a+qxBayA029fVmcCco4MKwlUvps0i6ZcK02AyUGSXXvGsCFheWF
A5kT8kL7+v1OM0jYT2VXIpT8vRNRrF3ohTfULQGDPBXzn4BEApJSKL/pMY7vo0zN
B/16QD4g4aHWFqA8tOMRF2D/TmLQihMTti4Z16OzwVuTNC+711VWXoIiCHZ/MS+j
XG4Y2Jm++5xnETU6rYXWx6oRdpv7BcpKXAPHDTylXdkMA5RiBrJd5P5K0T7fChcJ
GZg26noCtClL1Q==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:42:22 2026 by rpki-client