Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: klkbX2+XHJj8QFHMkjRlxwaWDyMclh3DSjc8I2ekHXY=
Subject key identifier: D4:2F:10:FC:99:BC:AB:C4:DA:1D:C8:EC:D5:77:F2:08:D6:3D:F0:CD
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 01A0BCC1BF5F34867D417589376C852ABCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 0285
Signing time: Sun 20 Sep 2026 03:00:08 +0000
Manifest this update: Sun 20 Sep 2026 03:00:08 +0000
Manifest next update: Mon 21 Sep 2026 03:00:08 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: 1a0hdx0T6ZhglUoafTecKeqtsSrzZvJe7TEB7T3iWfc=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c1:bf:5f:34:86:7d:41:75:89:37:6c:85:2a:bc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Sep 20 03:00:08 2026 GMT
Not After : Sep 21 03:00:08 2026 GMT
Subject: CN=d42f10fc99bcabc4da1dc8ecd577f208d63df0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:4c:d6:8c:a2:1a:ed:cb:f7:23:40:6a:fb:
73:9c:3d:c1:4d:b5:5f:75:96:cf:40:8c:ea:91:b9:
9e:fa:29:76:a3:0e:0d:70:58:dd:0d:6e:2b:c4:9f:
47:46:cc:f0:64:a6:c8:4c:d9:18:9e:7f:44:09:e8:
65:8d:fb:1e:2a:60:f3:ac:63:43:19:94:be:a7:33:
75:e2:4e:39:96:5b:e6:e0:4a:36:4a:f1:5f:1a:50:
03:4b:4c:8b:57:59:3f:ca:69:49:99:44:26:e4:0d:
7c:15:b0:ee:ce:85:80:a2:dc:ab:0e:77:49:5a:3f:
77:b6:50:3c:aa:5b:1f:7e:59:04:3e:2d:31:d6:e7:
e3:a1:90:00:5a:e2:46:cd:52:f9:01:e4:62:02:a8:
4b:37:aa:8f:db:ac:a7:51:bc:04:e2:23:2f:03:70:
43:08:c4:8b:67:97:56:f8:80:1b:1b:67:d4:32:f4:
e4:89:c3:c2:79:e9:d9:27:71:b0:d1:78:33:e3:9e:
b1:ae:b8:a7:5c:79:1a:5d:49:e8:7e:e1:07:5e:f3:
fd:86:33:b8:fc:8b:71:44:56:47:41:10:fa:b3:01:
8d:40:fe:25:6a:7d:d8:70:d0:0d:28:e2:2f:2c:9a:
73:d0:1a:3d:63:4d:a9:e1:19:f1:49:57:f4:71:05:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2F:10:FC:99:BC:AB:C4:DA:1D:C8:EC:D5:77:F2:08:D6:3D:F0:CD
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:11:3a:cd:bc:e7:a8:ee:db:c4:8c:d4:cb:75:af:5b:7e:c4:
bc:b1:55:af:1f:4c:09:3e:2c:f6:5d:3f:ff:47:88:71:6b:81:
4d:dd:dc:80:f0:f0:58:3f:72:79:b7:5b:b5:5b:69:cd:8c:81:
fa:64:18:e4:4a:ad:78:79:16:4e:0c:f7:50:dd:45:21:10:ca:
58:e3:34:b3:f3:0c:1f:a4:3a:12:23:89:64:10:cd:a7:36:ec:
51:c7:86:58:81:a1:d4:81:16:2e:72:99:7b:fe:6e:ef:63:ce:
87:04:fd:87:c3:0b:66:b0:f3:92:02:60:e8:09:3d:25:51:68:
a5:21:4f:df:43:cb:ce:cc:ef:6e:95:2a:05:89:de:a2:a2:0a:
dd:27:17:2d:8d:48:fd:dd:ff:91:a0:f1:cc:05:4c:ca:4e:0e:
2e:49:51:d3:53:bb:ec:07:de:56:ae:6f:94:33:4f:63:4b:52:
79:29:a6:03:62:6a:8e:ef:0d:2b:8a:9f:fb:d0:55:57:ba:df:
b6:0d:30:9f:dc:fe:61:ea:35:12:5c:a8:d7:49:7f:a7:7e:21:
7b:81:a3:aa:da:4f:33:2d:2c:e2:d3:b7:99:48:96:d1:6c:11:
8e:20:57:7f:c9:55:98:31:c0:d0:be:ec:50:e0:06:32:5c:ec:
5a:46:c2:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8wb9fNIZ9QXWJN2yFKrz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTcxNzQ5ZjgwMjkyNTM5MDFmNzFkNDY0MTAzOWU5MGYx
YTk3ZmEwHhcNMjYwOTIwMDMwMDA4WhcNMjYwOTIxMDMwMDA4WjAzMTEwLwYDVQQD
EyhkNDJmMTBmYzk5YmNhYmM0ZGExZGM4ZWNkNTc3ZjIwOGQ2M2RmMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rRM1oyiGu3L9yNAavtznD3BTbVf
dZbPQIzqkbme+il2ow4NcFjdDW4rxJ9HRszwZKbITNkYnn9ECehljfseKmDzrGND
GZS+pzN14k45llvm4Eo2SvFfGlADS0yLV1k/ymlJmUQm5A18FbDuzoWAotyrDndJ
Wj93tlA8qlsfflkEPi0x1ufjoZAAWuJGzVL5AeRiAqhLN6qP26ynUbwE4iMvA3BD
CMSLZ5dW+IAbG2fUMvTkicPCeenZJ3Gw0Xgz456xrrinXHkaXUnofuEHXvP9hjO4
/ItxRFZHQRD6swGNQP4lan3YcNANKOIvLJpz0Bo9Y02p4RnxSVf0cQUWsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQvEPyZvKvE2h3I7NV38gjWPfDNMB8GA1UdIwQY
MBaAFOLnF0n4ApJTkB9x1GQQOekPGpf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAt
OGFkMjMwMThhNWFkLzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8zMzEwNGEtYTkwMy00Mjc4LWJjNjAtOGFkMjMwMThhNWFk
LzEvNHVjWFNmZ0NrbE9RSDNIVVpCQTU2UThhbF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhE6zbzn
qO7bxIzUy3WvW37EvLFVrx9MCT4s9l0//0eIcWuBTd3cgPDwWD9yebdbtVtpzYyB
+mQY5EqteHkWTgz3UN1FIRDKWOM0s/MMH6Q6EiOJZBDNpzbsUceGWIGh1IEWLnKZ
e/5u72POhwT9h8MLZrDzkgJg6Ak9JVFopSFP30PLzszvbpUqBYneoqIK3ScXLY1I
/d3/kaDxzAVMyk4OLklR01O77AfeVq5vlDNPY0tSeSmmA2Jqju8NK4qf+9BVV7rf
tg0wn9z+Yeo1Elyo10l/p34he4GjqtpPMy0s4tO3mUiW0WwRjiBXf8lVmDHA0L7s
UOAGMlzsWkbCDQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:59:40 2026 by rpki-client