Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: MR4Yl8V+d84m8js5Io11M03iC6ra5OyVjJauVYFgLkY=
Subject key identifier: F2:77:09:DB:71:A7:C8:A4:33:45:3A:59:09:AC:9F:3B:10:4B:98:1D
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 01A0D5029EAF167A5790314B2EBB430A5D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0F14
Signing time: Thu 24 Sep 2026 20:01:53 +0000
Manifest this update: Thu 24 Sep 2026 20:01:53 +0000
Manifest next update: Fri 25 Sep 2026 20:01:53 +0000
Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: 1AfeSQMw9k7S1GfspOMaur5UV0Bsc9azvgzqV+ez4SE=)
2: fECGl5m9a298-w16DgtX4n1DH54.roa (hash: TfrAnyAJp/tVFrms+CEKKrdUp5DsxoN8mEoQwJkSNDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:9e:af:16:7a:57:90:31:4b:2e:bb:43:0a:5d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Sep 24 20:01:53 2026 GMT
Not After : Sep 25 20:01:53 2026 GMT
Subject: CN=f27709db71a7c8a433453a5909ac9f3b104b981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:07:64:6f:61:d4:ce:98:f4:bd:dd:37:36:
48:19:bd:e0:65:b0:9b:29:6d:f5:1b:1b:51:25:9f:
d0:99:49:b3:7f:d1:03:70:ac:e3:77:9c:69:b8:75:
ac:fa:a5:9f:ee:11:3e:d3:8d:4b:9c:d3:d1:20:2f:
b0:30:7f:69:23:ac:73:ba:55:e1:ca:7b:83:8e:ae:
fc:93:79:68:8d:0c:ca:b8:c1:3b:3d:df:74:cc:ac:
e0:a9:27:eb:76:5e:ff:5e:12:7d:e6:50:a6:e6:46:
5e:74:75:76:58:61:41:33:3b:39:e8:10:e1:0a:45:
00:27:13:ae:85:22:ce:f9:af:8b:bd:14:47:02:bf:
95:c9:f0:6c:09:df:a3:50:23:48:ff:44:ad:71:f6:
e3:5b:b0:eb:42:c8:75:61:01:55:88:33:fd:c3:16:
9f:7e:ca:8d:4d:f9:d2:e6:5a:fb:a8:94:84:56:7f:
25:e7:60:44:14:f3:95:ac:20:b9:52:d9:3f:9f:4b:
be:05:38:d4:79:f8:d7:d9:e2:eb:fe:ce:ac:2f:9c:
6f:77:30:2d:c3:ab:a3:05:c7:83:f3:de:31:88:c5:
16:d5:b4:18:1a:78:89:a5:01:6e:54:98:9f:e2:e4:
9e:df:73:6c:55:1f:1d:b2:c6:98:be:2b:4c:9a:46:
c1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:09:DB:71:A7:C8:A4:33:45:3A:59:09:AC:9F:3B:10:4B:98:1D
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fe:82:bf:2b:42:c8:aa:d8:33:0e:cb:e2:01:59:46:d7:b7:
f9:d3:95:da:23:00:e1:f0:4e:89:94:0a:69:64:9a:9a:f6:f2:
a1:96:94:75:4f:ee:28:21:90:7a:7b:9b:f9:ac:cc:3d:ca:85:
a7:cc:93:38:50:92:25:a0:d7:86:b8:3e:43:31:1c:fa:52:61:
85:43:3a:d3:f4:02:ea:bc:d7:22:c8:89:6d:bf:c0:fb:7a:e0:
4f:62:b8:5b:a0:9b:da:39:49:aa:22:52:5a:26:39:6c:8e:bc:
89:6c:9b:95:65:12:87:97:ad:fc:aa:e2:1a:f4:e3:1a:f0:b5:
7f:ae:89:bd:c7:30:11:77:48:80:e3:ac:ed:a5:e4:d4:6a:f2:
da:61:0b:d3:38:64:e2:20:34:79:6d:9f:90:e0:b8:30:89:93:
04:7a:f2:8f:d8:e8:91:40:6b:11:f4:8e:bf:2f:f0:b6:d6:21:
f6:19:07:a3:12:a2:37:77:25:0d:43:2e:ac:6a:73:e6:cf:56:
b6:5c:34:15:1f:3e:60:2c:1e:8d:33:93:01:f4:cd:19:c7:62:
b1:b8:08:ad:f7:ab:89:b8:b2:c3:38:3c:3a:6a:67:c8:0c:6b:
f2:f8:91:5c:b3:bf:4a:38:29:fd:01:5c:45:43:db:7f:10:cf:
11:ea:67:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAp6vFnpXkDFLLrtDCl00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTBlOWNjM2I3ZTM2M2Q3MjZiZDcwMjc1MGI1M2YyOWIw
NTBhN2QwHhcNMjYwOTI0MjAwMTUzWhcNMjYwOTI1MjAwMTUzWjAzMTEwLwYDVQQD
EyhmMjc3MDlkYjcxYTdjOGE0MzM0NTNhNTkwOWFjOWYzYjEwNGI5ODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjEHZG9h1M6Y9L3dNzZIGb3gZbCb
KW31GxtRJZ/QmUmzf9EDcKzjd5xpuHWs+qWf7hE+041LnNPRIC+wMH9pI6xzulXh
ynuDjq78k3lojQzKuME7Pd90zKzgqSfrdl7/XhJ95lCm5kZedHV2WGFBMzs56BDh
CkUAJxOuhSLO+a+LvRRHAr+VyfBsCd+jUCNI/0StcfbjW7DrQsh1YQFViDP9wxaf
fsqNTfnS5lr7qJSEVn8l52BEFPOVrCC5Utk/n0u+BTjUefjX2eLr/s6sL5xvdzAt
w6ujBceD894xiMUW1bQYGniJpQFuVJif4uSe33NsVR8dssaYvitMmkbBAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJ3Cdtxp8ikM0U6WQmsnzsQS5gdMB8GA1UdIwQY
MBaAFOKQ6cw7fjY9cmvXAnULU/KbBQp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEt
OTExM2ZkN2FmZDZjLzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81NTM1NGUtYmNlNy00YTVkLWI1NjEtOTExM2ZkN2FmZDZj
LzEvNHBEcHpEdC1OajF5YTljQ2RRdFQ4cHNGQ24wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAif6CvytC
yKrYMw7L4gFZRte3+dOV2iMA4fBOiZQKaWSamvbyoZaUdU/uKCGQenub+azMPcqF
p8yTOFCSJaDXhrg+QzEc+lJhhUM60/QC6rzXIsiJbb/A+3rgT2K4W6Cb2jlJqiJS
WiY5bI68iWyblWUSh5et/KriGvTjGvC1f66JvccwEXdIgOOs7aXk1Gry2mEL0zhk
4iA0eW2fkOC4MImTBHryj9jokUBrEfSOvy/wttYh9hkHoxKiN3clDUMurGpz5s9W
tlw0FR8+YCwejTOTAfTNGcdisbgIrferibiywzg8OmpnyAxr8viRXLO/Sjgp/QFc
RUPbfxDPEepntQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:23:32 2026 by rpki-client