Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier: ppGygNVMKkDq1g23QtQGPVsVED1+AH8QVs65pDWVkYk=
Subject key identifier: D3:85:43:D7:56:F9:43:82:79:77:55:6A:09:F1:D8:50:FB:68:E5:8A
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 01A0EBC0ED8A7FE48B61433BA576830A94BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number: 169E
Signing time: Tue 29 Sep 2026 06:01:24 +0000
Manifest this update: Tue 29 Sep 2026 06:01:24 +0000
Manifest next update: Wed 30 Sep 2026 06:01:24 +0000
Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: WKxHOgZagfqt4I4HyTo+Ga3ky97DR1KJ0Eco2TR8Wko=)
2: QpTGyhEqHx6901xnQ91Zzt7qUHE.roa (hash: YchmT807E93vtUCwowps9RxjRDg1qTobGuNKmeL1H4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:ed:8a:7f:e4:8b:61:43:3b:a5:76:83:0a:94:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Sep 29 06:01:24 2026 GMT
Not After : Sep 30 06:01:24 2026 GMT
Subject: CN=d38543d756f943827977556a09f1d850fb68e58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:b3:b9:b7:23:f6:14:34:89:d0:aa:54:cd:
d7:73:4c:8c:75:6f:9d:d8:3f:6b:06:34:93:6f:62:
bb:94:47:bb:a2:c5:80:91:f3:f0:66:97:73:c6:0a:
01:5b:3c:28:d8:fe:d7:7b:9f:98:37:a3:5e:0d:3a:
fa:4e:37:7a:4c:48:60:56:f2:97:ca:f2:04:b1:74:
d8:1b:ab:15:b7:46:83:ed:ab:bd:30:b1:98:74:01:
38:70:58:60:a3:56:0d:f7:c7:48:28:f4:e2:4a:2a:
22:f7:1e:8e:7f:21:eb:d4:55:c7:4a:69:46:98:29:
75:46:fe:ae:75:dd:54:0a:bf:a4:b8:ff:c2:16:d5:
12:56:74:7c:1f:83:ed:85:46:c6:cf:7d:3e:34:72:
6b:8b:6f:bb:dc:c0:9a:e5:a3:64:3c:69:15:f0:b6:
aa:7f:8c:2e:bd:e8:90:5a:12:0e:38:e7:28:c1:bc:
21:12:70:f2:f4:0f:9c:67:a5:1a:ce:dc:f2:f2:93:
98:14:aa:c6:d9:6f:66:49:ad:1f:70:79:d4:74:ca:
12:35:b0:4e:d8:d5:d9:8c:73:c4:65:b0:a5:ca:85:
cf:fc:7d:e8:30:8b:4c:89:92:bc:f0:7d:36:70:dc:
d4:54:62:b7:73:64:58:e0:77:fe:0e:86:9d:f1:2c:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:43:D7:56:F9:43:82:79:77:55:6A:09:F1:D8:50:FB:68:E5:8A
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b7:f0:5b:05:99:dd:1a:61:c2:19:99:7a:67:82:e9:d6:c2:
11:28:2f:6d:89:9e:4d:14:f7:40:2e:75:25:c8:b4:15:5f:2b:
b7:39:80:45:2a:70:76:16:97:26:08:50:6b:a6:78:2f:5d:72:
e4:41:5e:df:3a:60:36:31:77:a9:a3:be:96:4d:b3:b1:c1:22:
2c:1a:60:3f:92:d2:19:77:3b:16:7a:3d:13:ae:a9:31:fa:60:
f7:28:51:5a:6c:02:20:65:ce:6d:5e:c5:de:97:2e:b9:12:c7:
a1:4a:84:f7:be:35:84:bf:dd:01:b3:5f:50:b7:bc:16:01:e0:
fe:cb:11:2f:54:e7:3f:6b:99:b3:f0:23:3c:20:71:f5:02:70:
46:bb:78:18:82:9d:b3:01:12:47:ca:4b:fe:75:fb:b9:76:9b:
6a:ea:70:68:41:6a:3f:49:5c:7e:f6:e0:4e:7b:6b:b5:18:6f:
82:b4:98:4e:9a:0e:5b:bf:df:5b:0f:2f:67:fc:3c:5c:ed:2e:
72:4c:e0:8e:e7:3f:dd:81:3a:8f:4e:cd:1c:60:3f:45:e9:06:
6c:ec:87:69:99:f7:27:8a:2e:93:de:61:14:b6:94:2a:d9:56:
e7:c2:8f:04:2d:af:8b:03:35:f2:f9:eb:05:89:4b:2d:e3:34:
2e:a5:68:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrwO2Kf+SLYUM7pXaDCpS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg3ZTJmMGRmMjk2ZmUxMWU3NmVlNGMxMDE3YmNmMTIw
NWIyZjAwHhcNMjYwOTI5MDYwMTI0WhcNMjYwOTMwMDYwMTI0WjAzMTEwLwYDVQQD
EyhkMzg1NDNkNzU2Zjk0MzgyNzk3NzU1NmEwOWYxZDg1MGZiNjhlNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCazubcj9hQ0idCqVM3Xc0yMdW+d
2D9rBjSTb2K7lEe7osWAkfPwZpdzxgoBWzwo2P7Xe5+YN6NeDTr6Tjd6TEhgVvKX
yvIEsXTYG6sVt0aD7au9MLGYdAE4cFhgo1YN98dIKPTiSioi9x6OfyHr1FXHSmlG
mCl1Rv6udd1UCr+kuP/CFtUSVnR8H4PthUbGz30+NHJri2+73MCa5aNkPGkV8Laq
f4wuveiQWhIOOOcowbwhEnDy9A+cZ6Uaztzy8pOYFKrG2W9mSa0fcHnUdMoSNbBO
2NXZjHPEZbClyoXP/H3oMItMiZK88H02cNzUVGK3c2RY4Hf+Doad8Sz2wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOFQ9dW+UOCeXdVagnx2FD7aOWKMB8GA1UdIwQY
MBaAFOEIfi8N8pb+Eedu5MEBe88SBbLwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQt
YTUwYTg4MGFhN2ZjLzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZmMzOTctYWI4My00ZmVjLWI2YzQtYTUwYTg4MGFhN2Zj
LzEvNFFoLUx3M3lsdjRSNTI3a3dRRjd6eElGc3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrfwWwWZ
3RphwhmZemeC6dbCESgvbYmeTRT3QC51Jci0FV8rtzmARSpwdhaXJghQa6Z4L11y
5EFe3zpgNjF3qaO+lk2zscEiLBpgP5LSGXc7Fno9E66pMfpg9yhRWmwCIGXObV7F
3pcuuRLHoUqE9741hL/dAbNfULe8FgHg/ssRL1TnP2uZs/AjPCBx9QJwRrt4GIKd
swESR8pL/nX7uXabaupwaEFqP0lcfvbgTntrtRhvgrSYTpoOW7/fWw8vZ/w8XO0u
ckzgjuc/3YE6j07NHGA/RekGbOyHaZn3J4ouk95hFLaUKtlW58KPBC2viwM18vnr
BYlLLeM0LqVobg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:13:13 2026 by rpki-client