Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: U48ZlTCeolfh1QYe0mBo3O4UrTGOKQ0Y09HJtBdJGvw=
Subject key identifier: 3E:84:5A:3C:D9:D5:EC:B0:6F:B4:A3:69:9D:80:E8:A8:64:35:29:E6
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 01A0D53985AC16DAE9EE00F22A985C7EC662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 21:01:51 +0000
Manifest this update: Thu 24 Sep 2026 21:01:51 +0000
Manifest next update: Fri 25 Sep 2026 21:01:51 +0000
Files and hashes: 1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: U3AExUAI2irIc6XXTqc0ynAOgq4IiHOo+O+SGEzMh4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:85:ac:16:da:e9:ee:00:f2:2a:98:5c:7e:c6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Sep 24 21:01:51 2026 GMT
Not After : Sep 25 21:01:51 2026 GMT
Subject: CN=3e845a3cd9d5ecb06fb4a3699d80e8a8643529e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:67:ea:f6:fd:f9:2e:69:23:e7:f1:c4:63:
17:55:fc:d0:ea:a8:48:90:20:69:43:a7:f1:c4:54:
09:a8:b3:39:44:ee:d0:d0:06:8c:36:3a:06:80:09:
6e:a1:90:4b:b5:66:9d:45:e8:4d:4c:58:57:bb:13:
fb:6f:b1:40:7c:cd:6d:d5:7a:bd:6e:59:f2:30:10:
91:c5:5f:b5:45:38:70:09:ab:9d:63:a6:3e:04:a2:
d2:6e:6e:bd:26:e7:06:d0:7a:f2:b2:83:d5:0e:00:
1f:d1:95:89:61:5e:73:07:98:95:89:34:d9:96:81:
5e:b4:f8:60:08:2b:4d:09:d3:31:ad:d5:cd:85:50:
1d:2c:3d:20:9b:32:2d:b5:f9:be:a3:ef:2e:d2:ee:
b8:42:db:2c:fd:32:1e:63:35:81:fe:44:71:bf:4d:
a9:82:fd:50:c0:8a:56:2f:6e:30:cf:80:d2:1b:65:
fd:f9:3e:58:95:5e:8c:91:37:ef:1c:61:49:80:cd:
76:a5:01:50:e2:6b:3f:2e:c8:2d:5c:66:21:e2:d7:
52:fb:1b:90:e5:4b:f0:dd:ce:5f:9a:fc:66:38:f5:
e9:02:91:e9:5c:b2:24:9e:d2:3c:de:cd:d3:74:9c:
2d:21:1a:6a:89:95:9f:b2:a2:78:59:0f:aa:7d:0e:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:5A:3C:D9:D5:EC:B0:6F:B4:A3:69:9D:80:E8:A8:64:35:29:E6
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d0:c6:70:e5:e4:39:38:73:52:76:e7:98:18:f1:0c:ab:c4:
d5:71:fc:17:26:90:99:c1:d6:59:9f:88:ce:71:2c:7f:34:d2:
ef:0c:da:c7:80:f4:7f:3d:8a:68:8b:82:29:2e:f5:76:ee:a8:
32:fb:0b:c1:8e:c2:55:43:33:99:23:13:29:a6:86:ca:00:52:
b2:74:98:93:d0:8e:5b:dd:67:c9:da:7e:69:e7:7b:1e:19:67:
d4:17:e6:39:51:56:ff:84:36:2c:2d:e6:6a:c8:17:b4:cc:3e:
0e:d4:d8:a5:2b:2e:7d:e1:78:52:79:e3:c4:af:be:71:9f:c5:
81:b3:ef:54:d8:29:ad:00:4e:e9:b1:5a:e0:3e:c7:18:ec:78:
f0:79:82:56:32:1e:ff:7f:52:79:18:12:dc:f2:10:f1:0f:da:
e4:fe:0b:1d:98:74:7c:49:42:8f:fb:47:0c:5d:db:2f:ff:a8:
f9:8c:c3:aa:fe:ea:3b:28:0b:b2:85:af:0a:4a:ef:3a:bd:41:
06:79:4d:b5:48:ab:58:01:88:20:0c:0c:ef:76:f6:09:fe:a6:
17:be:cd:96:8b:11:c0:e8:69:da:7b:b7:5b:a0:fa:ab:e4:8e:
74:8c:a1:6f:4f:cf:7c:e1:6b:17:e0:e8:c8:e6:87:7c:17:9d:
0b:09:cd:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOYWsFtrp7gDyKphcfsZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZmZmMWJkNzcxMjg3Y2VkNGM0ZGQ2ZDhhODUxZDJhZDc3
MDY2MWQwHhcNMjYwOTI0MjEwMTUxWhcNMjYwOTI1MjEwMTUxWjAzMTEwLwYDVQQD
EygzZTg0NWEzY2Q5ZDVlY2IwNmZiNGEzNjk5ZDgwZThhODY0MzUyOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyItn6vb9+S5pI+fxxGMXVfzQ6qhI
kCBpQ6fxxFQJqLM5RO7Q0AaMNjoGgAluoZBLtWadRehNTFhXuxP7b7FAfM1t1Xq9
blnyMBCRxV+1RThwCaudY6Y+BKLSbm69JucG0HrysoPVDgAf0ZWJYV5zB5iViTTZ
loFetPhgCCtNCdMxrdXNhVAdLD0gmzIttfm+o+8u0u64Qtss/TIeYzWB/kRxv02p
gv1QwIpWL24wz4DSG2X9+T5YlV6MkTfvHGFJgM12pQFQ4ms/LsgtXGYh4tdS+xuQ
5Uvw3c5fmvxmOPXpApHpXLIkntI83s3TdJwtIRpqiZWfsqJ4WQ+qfQ5k6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6EWjzZ1eywb7SjaZ2A6KhkNSnmMB8GA1UdIwQY
MBaAFK3/8b13EofO1MTdbYqFHSrXcGYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMt
NDk0M2I0YjQyZWJiLzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMtNDk0M2I0YjQyZWJi
LzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9DGcOXk
OThzUnbnmBjxDKvE1XH8FyaQmcHWWZ+IznEsfzTS7wzax4D0fz2KaIuCKS71du6o
MvsLwY7CVUMzmSMTKaaGygBSsnSYk9COW91nydp+aed7Hhln1BfmOVFW/4Q2LC3m
asgXtMw+DtTYpSsufeF4UnnjxK++cZ/FgbPvVNgprQBO6bFa4D7HGOx48HmCVjIe
/39SeRgS3PIQ8Q/a5P4LHZh0fElCj/tHDF3bL/+o+YzDqv7qOygLsoWvCkrvOr1B
BnlNtUirWAGIIAwM73b2Cf6mF77NlosRwOhp2nu3W6D6q+SOdIyhb0/PfOFrF+Do
yOaHfBedCwnNog==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:40:06 2026 by rpki-client