Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: 0doAM9WVVbB8sTMrW8tX8Joijhn2OcMwdD0s/rh4Kyo=
Subject key identifier: 3E:6F:C5:24:47:0B:19:02:13:DB:5A:C4:E2:F1:F1:7F:2F:F5:D1:DF
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 01A0C47BAC9875AD7247EB87BCB3C0FCFF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1A70
Signing time: Mon 21 Sep 2026 15:00:34 +0000
Manifest this update: Mon 21 Sep 2026 15:00:34 +0000
Manifest next update: Tue 22 Sep 2026 15:00:34 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: u2OTPgRw57aRnQ59pcbK5S4wNrwdUlqVtWZNALOtGo4=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:ac:98:75:ad:72:47:eb:87:bc:b3:c0:fc:ff:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Sep 21 15:00:34 2026 GMT
Not After : Sep 22 15:00:34 2026 GMT
Subject: CN=3e6fc524470b190213db5ac4e2f1f17f2ff5d1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:27:29:93:5c:9e:75:3f:a6:bf:9c:f4:9d:
8a:90:05:a5:ed:a1:ff:0b:52:a1:2f:cf:66:4b:72:
91:6a:da:cb:94:ef:2c:96:85:17:3d:f6:40:cc:19:
2f:03:80:74:f8:89:11:c7:ec:a3:79:eb:e2:a4:08:
65:b9:f2:c7:76:c7:6f:b8:8b:98:fb:e4:85:c5:94:
db:7a:52:c8:a7:12:22:8c:25:c4:3c:8a:4d:e5:52:
ea:cb:c6:39:84:a0:65:93:cb:11:a1:47:d2:dd:a0:
3d:db:af:43:5f:1e:1a:c9:92:e2:3d:34:0c:79:46:
ac:4b:92:dc:ca:42:45:dd:c2:8b:60:8e:26:5d:2f:
ca:d3:f6:87:ab:2b:fe:18:1a:8e:7d:d4:dd:c3:22:
4a:48:45:bb:21:9a:ab:ae:29:22:54:e1:91:f1:aa:
cb:01:53:78:16:16:e7:4a:99:ba:c6:64:8e:df:14:
ae:73:34:61:4f:24:6e:d2:30:b5:3e:f7:7b:e5:ae:
2a:9e:dd:2b:37:f7:b2:96:4d:01:e7:58:6d:60:88:
11:0f:9b:db:d0:e0:3f:3f:6a:70:b7:f7:ea:8a:eb:
60:6a:37:7b:de:fe:55:7e:37:58:97:98:9d:e6:6a:
b2:b1:a8:e1:69:5e:52:ef:38:61:fe:b3:6a:5d:3e:
68:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6F:C5:24:47:0B:19:02:13:DB:5A:C4:E2:F1:F1:7F:2F:F5:D1:DF
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:62:35:a9:25:65:2a:74:31:e5:28:79:5d:0c:52:4a:c3:19:
0b:e5:44:f0:a7:6b:eb:85:85:8e:67:98:50:ce:4c:a6:a4:ce:
63:c4:af:96:d8:54:8d:c8:1f:c3:bd:fa:4c:03:c1:c5:cf:bf:
c3:f6:25:c3:9a:b2:db:50:85:49:bb:3e:9f:24:55:b3:c8:d0:
2e:f7:16:f8:13:9d:99:37:37:93:d1:b7:af:fc:f0:0f:e5:38:
63:aa:56:31:6d:bc:f8:14:60:96:0c:dc:38:f0:30:47:38:67:
bd:f9:f3:3a:45:9f:60:c6:c1:08:0e:43:b0:f8:94:72:36:1b:
aa:cf:5b:5e:f2:c3:24:76:21:e2:6a:e8:35:ec:ad:b1:2e:2e:
bc:81:18:9f:89:d8:35:00:48:bf:93:0b:36:3d:7a:52:2e:18:
ab:9b:69:d8:47:51:21:95:98:af:b2:d0:2c:bc:3e:9d:84:b7:
8d:1c:bc:2d:97:9c:f2:fa:14:ed:14:90:2e:09:e9:46:28:2f:
ba:bf:a0:04:ad:68:b4:4c:ca:6d:54:bf:5f:5c:8d:cf:2f:d1:
02:b2:bd:bf:69:aa:4f:c3:8a:fd:cc:38:5a:e4:f0:b3:24:3c:
4e:63:23:b7:b2:27:c7:10:f4:63:91:5b:1e:15:33:e8:a2:62:
0d:69:49:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe6yYda1yR+uHvLPA/P9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1
M2Q5NDAwHhcNMjYwOTIxMTUwMDM0WhcNMjYwOTIyMTUwMDM0WjAzMTEwLwYDVQQD
EygzZTZmYzUyNDQ3MGIxOTAyMTNkYjVhYzRlMmYxZjE3ZjJmZjVkMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJonKZNcnnU/pr+c9J2KkAWl7aH/
C1KhL89mS3KRatrLlO8sloUXPfZAzBkvA4B0+IkRx+yjeevipAhlufLHdsdvuIuY
++SFxZTbelLIpxIijCXEPIpN5VLqy8Y5hKBlk8sRoUfS3aA9269DXx4ayZLiPTQM
eUasS5LcykJF3cKLYI4mXS/K0/aHqyv+GBqOfdTdwyJKSEW7IZqrrikiVOGR8arL
AVN4FhbnSpm6xmSO3xSuczRhTyRu0jC1Pvd75a4qnt0rN/eylk0B51htYIgRD5vb
0OA/P2pwt/fqiutgajd73v5VfjdYl5id5mqysajhaV5S7zhh/rNqXT5oOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5vxSRHCxkCE9taxOLx8X8v9dHfMB8GA1UdIwQY
MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt
MDU1NTY5NTljNDU1LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1
LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2I1qSVl
KnQx5Sh5XQxSSsMZC+VE8Kdr64WFjmeYUM5MpqTOY8SvlthUjcgfw736TAPBxc+/
w/Ylw5qy21CFSbs+nyRVs8jQLvcW+BOdmTc3k9G3r/zwD+U4Y6pWMW28+BRglgzc
OPAwRzhnvfnzOkWfYMbBCA5DsPiUcjYbqs9bXvLDJHYh4mroNeytsS4uvIEYn4nY
NQBIv5MLNj16Ui4Yq5tp2EdRIZWYr7LQLLw+nYS3jRy8LZec8voU7RSQLgnpRigv
ur+gBK1otEzKbVS/X1yNzy/RArK9v2mqT8OK/cw4WuTwsyQ8TmMjt7InxxD0Y5Fb
HhUz6KJiDWlJIw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:18:35 2026 by rpki-client