Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: B1MyK09gK2HpyohrV6E+XaYD40h4HAwged9DXuilOn4=
Subject key identifier: CA:71:EB:A5:17:F1:AE:8D:7B:07:BB:95:2C:4F:38:8A:35:F4:16:7A
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 01A0C28E169556B167A85A2AC927C024B883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0E27
Signing time: Mon 21 Sep 2026 06:01:26 +0000
Manifest this update: Mon 21 Sep 2026 06:01:26 +0000
Manifest next update: Tue 22 Sep 2026 06:01:26 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: XTUjWMYIIcy+DM80BXw5Qu8AaHNfSyiRXA7nOuHyBfg=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:16:95:56:b1:67:a8:5a:2a:c9:27:c0:24:b8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Sep 21 06:01:26 2026 GMT
Not After : Sep 22 06:01:26 2026 GMT
Subject: CN=ca71eba517f1ae8d7b07bb952c4f388a35f4167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:f6:f1:38:d0:bb:6d:48:54:d9:4c:32:6f:
e5:86:8b:ba:27:95:95:b3:bb:9a:02:94:87:26:3d:
9b:3c:7d:81:5e:3a:d6:b9:0d:b1:c9:a1:ab:fb:93:
d1:c7:25:5d:30:66:35:99:a3:c6:a0:a4:63:e7:46:
cb:38:be:a0:84:4e:70:34:f3:28:56:d9:68:d7:ae:
6f:f1:77:b7:5c:10:c7:5b:aa:88:b9:7c:61:b7:1e:
7d:45:45:2d:51:fa:fd:4f:51:f8:28:8b:5e:d9:ed:
70:c4:42:e2:d4:14:4d:75:cf:c0:54:2d:6e:13:9a:
b7:98:c3:d8:56:19:2a:a7:90:1f:9f:86:49:84:0c:
1e:8d:ea:5f:b2:e8:b1:f2:16:61:36:81:e4:82:28:
12:48:7b:ad:8b:cf:10:44:e7:0d:5a:d2:23:6b:ac:
22:da:15:36:fc:3b:9e:8b:61:80:35:f2:bf:6f:dd:
82:36:1d:c1:f7:e0:9f:2d:90:16:c8:af:43:3c:4f:
78:9a:24:43:a2:41:bb:ce:ad:2a:23:13:7d:af:c6:
76:0b:90:7e:4b:17:26:c6:e9:bb:b7:83:dc:dd:d0:
c9:73:6a:f7:c2:79:fd:2d:a2:85:fe:5f:33:ee:31:
bb:08:d8:02:82:f2:22:f0:59:a0:68:e9:7c:8b:56:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:71:EB:A5:17:F1:AE:8D:7B:07:BB:95:2C:4F:38:8A:35:F4:16:7A
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bd:ce:c0:fd:cb:94:6f:a4:bd:84:f5:db:43:db:18:c4:f4:
e1:dd:52:59:e1:ab:ab:de:8c:5d:e5:25:42:0c:64:87:5a:09:
00:0e:73:5f:ab:71:4d:25:77:84:1c:e9:47:c6:59:47:a0:b7:
d3:9d:b2:e4:53:4c:21:54:33:dd:79:62:f4:0f:4a:4b:b3:8c:
be:20:7b:18:da:3d:eb:a5:ff:a4:e5:2d:5c:1e:08:ff:69:3d:
d3:14:0e:74:7c:bb:0b:28:46:94:76:4f:5a:1d:e2:f8:84:b2:
4a:0f:1f:a6:e9:44:d6:6f:72:09:77:1b:9a:9c:2c:40:b2:77:
35:74:05:ce:32:64:a5:a7:dc:cd:06:cf:a8:ab:76:28:7a:ca:
1c:57:e8:6b:29:84:1d:86:ac:c9:41:6d:5a:9f:22:dd:a0:d7:
cf:e3:c3:1d:04:56:35:9c:2a:0d:19:f7:28:cb:be:44:ab:e7:
fc:5f:0f:2f:ee:d5:d1:5e:59:ed:89:2a:f2:b2:95:21:d3:87:
e3:9b:a7:57:08:ca:bb:50:dd:c8:6f:b0:34:90:14:c7:04:03:
2d:a7:9e:d8:5e:9f:af:c5:46:34:6f:df:1c:21:7e:e2:1d:4c:
f9:2a:32:cf:f6:99:27:7c:3a:a9:5e:a7:52:3c:84:31:90:43:
35:6c:0c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjhaVVrFnqFoqySfAJLiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDJjMmI3NGQ3NTc1YTIyOGE3ZTY0ZjA0MDZmM2EzOTdj
N2FlNTYwHhcNMjYwOTIxMDYwMTI2WhcNMjYwOTIyMDYwMTI2WjAzMTEwLwYDVQQD
EyhjYTcxZWJhNTE3ZjFhZThkN2IwN2JiOTUyYzRmMzg4YTM1ZjQxNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui728TjQu21IVNlMMm/lhou6J5WV
s7uaApSHJj2bPH2BXjrWuQ2xyaGr+5PRxyVdMGY1maPGoKRj50bLOL6ghE5wNPMo
Vtlo165v8Xe3XBDHW6qIuXxhtx59RUUtUfr9T1H4KIte2e1wxELi1BRNdc/AVC1u
E5q3mMPYVhkqp5Afn4ZJhAwejepfsuix8hZhNoHkgigSSHuti88QROcNWtIja6wi
2hU2/Duei2GANfK/b92CNh3B9+CfLZAWyK9DPE94miRDokG7zq0qIxN9r8Z2C5B+
Sxcmxum7t4Pc3dDJc2r3wnn9LaKF/l8z7jG7CNgCgvIi8FmgaOl8i1Y6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpx66UX8a6Newe7lSxPOIo19BZ6MB8GA1UdIwQY
MBaAFOJCwrdNdXWiKKfmTwQG86OXx65WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYt
Y2JiOGNmZWU2ZTNjLzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83ZTMwMjUtOGNhZi00MDJjLWI1NGYtY2JiOGNmZWU2ZTNj
LzEvNGtMQ3QwMTFkYUlvcC1aUEJBYnpvNWZIcmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPb3OwP3L
lG+kvYT120PbGMT04d1SWeGrq96MXeUlQgxkh1oJAA5zX6txTSV3hBzpR8ZZR6C3
052y5FNMIVQz3Xli9A9KS7OMviB7GNo966X/pOUtXB4I/2k90xQOdHy7CyhGlHZP
Wh3i+ISySg8fpulE1m9yCXcbmpwsQLJ3NXQFzjJkpafczQbPqKt2KHrKHFfoaymE
HYasyUFtWp8i3aDXz+PDHQRWNZwqDRn3KMu+RKvn/F8PL+7V0V5Z7Ykq8rKVIdOH
45unVwjKu1DdyG+wNJAUxwQDLaee2F6fr8VGNG/fHCF+4h1M+Soyz/aZJ3w6qV6n
UjyEMZBDNWwMbQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:18:28 2026 by rpki-client