Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: etvq1aW/9Pk6MJ5Lqu7tm3kg4pqmGvz+1waFuXZ8g9o=
Subject key identifier: 09:6A:D5:09:C4:BE:70:C6:40:C6:D2:D8:06:F8:1C:17:01:6F:A9:F2
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 01A0CF6CD074ED4872A7F219AC61C87C434C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 148B
Signing time: Wed 23 Sep 2026 18:00:09 +0000
Manifest this update: Wed 23 Sep 2026 18:00:09 +0000
Manifest next update: Thu 24 Sep 2026 18:00:09 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: yAwE2G4U7wAtSk008MC42bM2moSVRa12loclcF7ZSTI=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:d0:74:ed:48:72:a7:f2:19:ac:61:c8:7c:43:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Sep 23 18:00:09 2026 GMT
Not After : Sep 24 18:00:09 2026 GMT
Subject: CN=096ad509c4be70c640c6d2d806f81c17016fa9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:9c:16:45:cf:e8:b8:92:24:68:e9:79:64:
b8:ec:f9:49:95:43:ab:80:15:af:9c:47:5d:02:0b:
96:3a:ce:75:44:7d:5c:83:32:7e:76:80:4d:99:c9:
13:87:ac:63:3c:13:35:16:58:2d:0e:4b:85:df:a6:
e4:5a:49:56:65:65:31:10:e1:5f:de:4b:d2:53:4b:
cc:dd:a9:9b:a1:5f:c1:c5:ad:c2:1b:c3:30:93:80:
74:b3:b7:a9:8d:57:9b:36:12:3c:95:62:bd:92:ad:
d0:62:fe:1c:c0:8f:07:8f:35:ba:14:d2:02:ea:8c:
41:7c:71:4c:0d:b3:57:f9:0b:51:ae:e2:8c:59:41:
89:52:41:21:30:3e:71:d5:5c:a4:44:49:08:63:e0:
7a:16:91:9f:f6:44:3f:93:7d:d2:72:7a:63:9f:e2:
5e:86:31:8b:f1:ef:1b:c8:14:ea:52:8b:69:8b:81:
f1:1b:16:ac:74:3e:2e:4a:c7:0b:b8:65:96:cd:b9:
72:ef:3a:84:0e:6f:74:4f:c8:8e:cb:16:8a:94:14:
e9:e8:07:ce:04:6a:a1:88:5d:a6:2e:b3:fc:af:d4:
1f:bf:34:33:80:59:dd:a8:59:f5:b2:57:1e:0b:9d:
28:59:28:82:41:5d:3b:2b:e5:b1:04:cd:43:6a:97:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6A:D5:09:C4:BE:70:C6:40:C6:D2:D8:06:F8:1C:17:01:6F:A9:F2
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2c:e9:24:0e:03:d9:38:45:e2:7e:7a:0a:70:6a:68:fb:27:
19:78:1d:0b:80:ae:7a:4e:d7:ae:a4:67:df:5e:74:59:73:74:
8c:55:26:39:05:f0:4f:67:0a:59:27:c6:e0:64:72:33:f1:42:
f6:21:aa:68:74:c8:cb:dc:9b:13:0d:ed:c4:05:a5:44:6d:62:
24:c7:77:3d:1b:2f:69:2b:b5:0a:ba:9c:6d:04:11:43:1f:0d:
f1:34:6f:d6:dd:f6:16:6f:b3:9b:c1:8e:85:ba:02:ae:a6:fc:
06:ee:89:ee:60:bf:d3:95:4e:72:9a:cb:1d:60:22:c9:de:c9:
58:31:c9:7c:f1:59:0e:82:86:ca:dd:03:26:90:c1:50:b8:ad:
94:70:bc:0a:fd:a5:6e:21:8b:0a:b7:e1:5d:72:4c:1f:86:be:
b4:36:ef:d9:a4:86:cf:46:35:d1:9d:fa:a4:f1:85:7e:69:64:
ab:4e:30:b5:b2:95:81:75:0b:83:ea:3b:d5:74:ad:5d:50:b3:
ef:b9:8f:5e:7d:bd:d1:6d:79:24:93:b9:bb:1c:a8:2c:cd:ec:
67:be:7c:c2:e1:79:ba:ce:e9:9f:d0:0f:83:be:dd:10:a2:57:
3b:b5:8a:af:e9:38:a6:44:f4:47:47:c6:f8:ad:10:cc:e3:2f:
a0:d9:71:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbNB07Uhyp/IZrGHIfENMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjYwOTIzMTgwMDA5WhcNMjYwOTI0MTgwMDA5WjAzMTEwLwYDVQQD
EygwOTZhZDUwOWM0YmU3MGM2NDBjNmQyZDgwNmY4MWMxNzAxNmZhOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc6cFkXP6LiSJGjpeWS47PlJlUOr
gBWvnEddAguWOs51RH1cgzJ+doBNmckTh6xjPBM1FlgtDkuF36bkWklWZWUxEOFf
3kvSU0vM3amboV/Bxa3CG8Mwk4B0s7epjVebNhI8lWK9kq3QYv4cwI8HjzW6FNIC
6oxBfHFMDbNX+QtRruKMWUGJUkEhMD5x1VykREkIY+B6FpGf9kQ/k33Scnpjn+Je
hjGL8e8byBTqUotpi4HxGxasdD4uSscLuGWWzbly7zqEDm90T8iOyxaKlBTp6AfO
BGqhiF2mLrP8r9QfvzQzgFndqFn1slceC50oWSiCQV07K+WxBM1DapeiRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlq1QnEvnDGQMbS2Ab4HBcBb6nyMB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCzpJA4D
2ThF4n56CnBqaPsnGXgdC4Cuek7XrqRn3150WXN0jFUmOQXwT2cKWSfG4GRyM/FC
9iGqaHTIy9ybEw3txAWlRG1iJMd3PRsvaSu1CrqcbQQRQx8N8TRv1t32Fm+zm8GO
hboCrqb8Bu6J7mC/05VOcprLHWAiyd7JWDHJfPFZDoKGyt0DJpDBULitlHC8Cv2l
biGLCrfhXXJMH4a+tDbv2aSGz0Y10Z36pPGFfmlkq04wtbKVgXULg+o71XStXVCz
77mPXn290W15JJO5uxyoLM3sZ758wuF5us7pn9APg77dEKJXO7WKr+k4pkT0R0fG
+K0QzOMvoNlxyQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:05:07 2026 by rpki-client