Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: kVH2dS+nssVcnTqPtBPYNUxSTjaYF/lmDG1zmQXuV4A=
Subject key identifier: FF:4E:04:97:3B:BE:BA:40:DB:C5:85:F2:1E:52:28:03:BB:7B:5D:CA
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 01A0DC1713BB7152E6A688C93FB5C61F1FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 05:01:34 +0000
Manifest this update: Sat 26 Sep 2026 05:01:34 +0000
Manifest next update: Sun 27 Sep 2026 05:01:34 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: E6uTKSeR76yLIj0T6NpZMYDj9Sl/6vAiQwMiRZbVgAY=)
2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:13:bb:71:52:e6:a6:88:c9:3f:b5:c6:1f:1f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Sep 26 05:01:34 2026 GMT
Not After : Sep 27 05:01:34 2026 GMT
Subject: CN=ff4e04973bbeba40dbc585f21e522803bb7b5dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:1d:94:ac:34:8f:2a:67:8c:e3:5e:34:b5:
2b:d1:60:fa:c8:26:3b:e0:e4:99:c0:8e:65:3e:a8:
45:e3:22:df:62:a0:d4:b3:92:59:66:1c:d0:93:31:
70:3c:d6:ac:2c:a2:f0:b7:9e:71:0d:46:e2:47:17:
cb:ef:09:1d:8d:ca:a4:1e:22:e6:30:77:37:40:26:
0c:fb:ed:7b:b1:f0:07:e8:7e:60:11:e0:78:7f:80:
38:57:68:9b:b7:94:18:0b:cc:d5:ef:c1:8c:88:f6:
5d:7e:b3:e5:ea:bb:e3:bd:63:5c:56:7d:d0:a3:2e:
4c:a3:ee:31:f5:27:25:9e:db:6b:3c:5f:6d:be:8b:
8d:42:fa:c0:e9:ae:71:e0:95:75:ff:2a:6c:b4:75:
63:1e:16:d7:5c:af:77:93:dc:44:54:6d:bc:ad:a9:
f2:aa:34:87:23:f1:18:f2:ee:a9:8d:44:6b:f3:89:
a1:a6:90:af:62:f2:95:d2:44:69:a8:bd:63:63:6c:
a1:19:7b:ed:24:76:d8:7f:e4:cc:c9:5c:a8:5b:ae:
2f:24:34:19:11:28:16:8f:9b:e4:b1:8c:40:7f:ab:
50:d6:ae:05:ac:e3:be:ef:ae:89:55:46:56:e8:41:
cb:68:81:b8:39:a7:f3:ca:8a:bf:68:46:7e:52:02:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4E:04:97:3B:BE:BA:40:DB:C5:85:F2:1E:52:28:03:BB:7B:5D:CA
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:05:04:99:4e:54:20:fa:bd:4b:d6:db:32:46:36:65:b3:b9:
d3:81:35:30:c1:af:54:4e:16:d7:10:31:37:56:81:0d:0f:cb:
ef:e4:1d:e7:69:65:58:d2:ae:05:c0:3c:a2:eb:90:6d:86:7f:
69:47:b3:5f:33:26:69:f4:70:60:76:df:f7:3b:d0:e6:0d:df:
ae:f6:5a:2f:56:1e:7f:ef:72:96:74:6d:f5:0c:5f:9e:1a:98:
3a:d3:45:96:5e:97:5f:1d:dd:2d:cb:f9:d5:b1:0f:db:7a:1a:
c7:bc:3f:87:a6:25:9f:87:49:4c:d7:4f:8b:9d:dc:ba:51:5d:
15:ae:b6:b8:44:bb:91:0a:ca:f3:86:2d:0e:e9:c5:a4:d4:55:
a2:73:c9:79:51:c7:2f:30:cf:52:44:2f:ed:7d:ac:9a:c7:13:
1f:2e:85:74:da:0b:16:6f:25:bc:05:0a:2a:8f:cc:27:92:f7:
07:d7:f8:b2:c6:41:de:83:a8:bc:53:8b:98:80:d8:e9:60:23:
2f:25:f4:0c:33:11:e0:e0:d4:bf:eb:98:bc:2a:3c:2e:0f:09:
8f:16:aa:78:04:40:24:e1:bb:92:e2:6b:77:80:11:e7:a5:47:
44:df:ef:f5:5d:34:f2:93:71:ad:0d:47:a5:34:06:91:30:3c:
da:56:11:b4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDcFxO7cVLmpojJP7XGHx/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk
YjU5OGMwHhcNMjYwOTI2MDUwMTM0WhcNMjYwOTI3MDUwMTM0WjAzMTEwLwYDVQQD
EyhmZjRlMDQ5NzNiYmViYTQwZGJjNTg1ZjIxZTUyMjgwM2JiN2I1ZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyMdlKw0jypnjONeNLUr0WD6yCY7
4OSZwI5lPqhF4yLfYqDUs5JZZhzQkzFwPNasLKLwt55xDUbiRxfL7wkdjcqkHiLm
MHc3QCYM++17sfAH6H5gEeB4f4A4V2ibt5QYC8zV78GMiPZdfrPl6rvjvWNcVn3Q
oy5Mo+4x9SclnttrPF9tvouNQvrA6a5x4JV1/ypstHVjHhbXXK93k9xEVG28rany
qjSHI/EY8u6pjURr84mhppCvYvKV0kRpqL1jY2yhGXvtJHbYf+TMyVyoW64vJDQZ
ESgWj5vksYxAf6tQ1q4FrOO+766JVUZW6EHLaIG4Oafzyoq/aEZ+UgImtwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP9OBJc7vrpA28WF8h5SKAO7e13KMB8GA1UdIwQY
MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi
LWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAyLzkyZDIwOC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRl
ZjYvMS8xLWxYU2gzRXlxcTNOOVVCWXJMLWVCLTNiV1l3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAUE
mU5UIPq9S9bbMkY2ZbO504E1MMGvVE4W1xAxN1aBDQ/L7+Qd52llWNKuBcA8ouuQ
bYZ/aUezXzMmafRwYHbf9zvQ5g3frvZaL1Yef+9ylnRt9QxfnhqYOtNFll6XXx3d
Lcv51bEP23oax7w/h6Yln4dJTNdPi53culFdFa62uES7kQrK84YtDunFpNRVonPJ
eVHHLzDPUkQv7X2smscTHy6FdNoLFm8lvAUKKo/MJ5L3B9f4ssZB3oOovFOLmIDY
6WAjLyX0DDMR4ODUv+uYvCo8Lg8JjxaqeARAJOG7kuJrd4AR56VHRN/v9V008pNx
rQ1HpTQGkTA82lYRtA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:53 2026 by rpki-client