Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: bjazsgbwwEMCdF8kdT+O+U+CutQ2NjJWT7ZovW12QMk=
Subject key identifier: B8:67:7E:04:DC:AE:C3:DE:F9:36:66:8A:20:F4:E3:6D:56:1E:F3:B6
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 01A1CA7B8FB3351855E826CCD58B75073AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 1386
Signing time: Wed 11 Nov 2026 12:00:57 +0000
Manifest this update: Wed 11 Nov 2026 12:00:57 +0000
Manifest next update: Thu 12 Nov 2026 12:00:57 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: gnl9OzGlUB6e8kcOFDdqMS84YS2FSRHVE/8uWsbTE5w=)
2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:7b:8f:b3:35:18:55:e8:26:cc:d5:8b:75:07:3a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Nov 11 12:00:57 2026 GMT
Not After : Nov 12 12:00:57 2026 GMT
Subject: CN=b8677e04dcaec3def936668a20f4e36d561ef3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:6f:26:c8:b6:62:91:c5:60:95:6c:d4:25:
a6:d2:e8:a1:52:1d:35:de:22:1d:bf:25:21:41:a1:
d1:55:cc:8b:9f:b7:8f:51:68:ed:cf:a9:04:91:68:
e7:02:8e:5d:a1:03:3b:e9:e8:27:c3:8e:d1:49:ed:
79:2b:8a:53:6f:0c:a2:6d:9a:cd:36:40:16:64:d3:
9b:f1:07:79:aa:7f:29:21:ca:53:c5:a7:59:ea:d3:
5f:5b:83:1a:fb:38:e1:95:2c:4d:d0:7f:97:a4:a5:
12:d4:39:fc:c4:ac:d0:a9:ce:b9:35:f8:1d:4e:68:
e2:a3:f0:ea:55:93:b4:31:47:a8:b3:f9:68:83:8f:
75:e5:82:76:1e:85:be:3e:f4:68:c7:6f:ac:09:41:
cd:6e:3b:c1:02:f1:d5:48:03:c7:8b:1b:e4:dc:bd:
d4:f8:cb:e8:38:0e:64:aa:3f:bc:d3:d3:6f:de:7e:
04:90:0e:a3:17:de:15:1d:69:d7:23:1f:b4:a5:7a:
d9:1b:bf:9b:83:69:e2:93:94:46:88:ad:2b:25:39:
e0:fa:61:c0:7a:37:c5:02:e3:24:3f:18:35:6a:99:
c4:10:90:c6:2d:80:74:70:5b:55:b3:8d:b5:4e:ca:
5d:38:c2:94:cc:8b:25:23:5a:14:c9:2f:82:43:1c:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:7E:04:DC:AE:C3:DE:F9:36:66:8A:20:F4:E3:6D:56:1E:F3:B6
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:79:16:4c:cf:bd:d6:a4:bf:d3:47:06:b8:c5:cf:7d:c2:96:
a7:9a:ab:25:39:2b:86:72:c5:af:a0:c8:5a:b7:a7:a4:b0:01:
40:6d:0b:e3:4b:cf:6a:79:7b:83:5d:64:2a:af:9d:82:d6:02:
26:54:6b:e4:1a:9a:b3:dd:78:eb:49:66:6a:4f:07:d0:59:1c:
6a:f7:73:e2:39:c1:8d:94:1c:9f:3e:08:b6:2b:4f:73:5b:98:
95:5b:c4:9f:60:8e:9a:bc:45:18:ce:2d:d5:6c:d6:44:db:46:
df:51:be:41:97:cf:f6:c9:ac:c6:c2:92:0a:5a:c1:ba:d6:e0:
09:68:81:c9:aa:15:58:51:12:fe:a0:5d:0a:26:5a:b1:4f:5c:
e2:3e:0d:6a:45:49:f3:bf:0a:f6:92:f1:62:26:b0:08:c9:b3:
d9:77:7b:12:99:41:f6:eb:f5:92:f6:a9:aa:16:bb:3a:0c:06:
ff:ef:b6:92:cc:f7:77:f7:e7:9d:5d:fd:2d:77:08:7f:3c:ad:
89:54:53:66:88:30:46:66:c5:a8:3c:c7:52:6d:02:15:19:9e:
39:9f:2e:3b:36:77:38:84:ae:59:4b:9f:dd:2a:70:cd:65:19:
05:e9:6f:7c:76:3d:74:ec:cd:56:3a:79:4f:db:55:ad:bf:b3:
d2:73:fa:48
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHKe4+zNRhV6CbM1Yt1BzqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTI0Y2U3Yjk5MTI0ZGVmYjU1YjgyNDczNThkZmRkYTM1
ZjZjZTAwHhcNMjYxMTExMTIwMDU3WhcNMjYxMTEyMTIwMDU3WjAzMTEwLwYDVQQD
EyhiODY3N2UwNGRjYWVjM2RlZjkzNjY2OGEyMGY0ZTM2ZDU2MWVmM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK5vJsi2YpHFYJVs1CWm0uihUh01
3iIdvyUhQaHRVcyLn7ePUWjtz6kEkWjnAo5doQM76egnw47RSe15K4pTbwyibZrN
NkAWZNOb8Qd5qn8pIcpTxadZ6tNfW4Ma+zjhlSxN0H+XpKUS1Dn8xKzQqc65Nfgd
Tmjio/DqVZO0MUeos/log4915YJ2HoW+PvRox2+sCUHNbjvBAvHVSAPHixvk3L3U
+MvoOA5kqj+809Nv3n4EkA6jF94VHWnXIx+0pXrZG7+bg2nik5RGiK0rJTng+mHA
ejfFAuMkPxg1apnEEJDGLYB0cFtVs421TspdOMKUzIslI1oUyS+CQxx3OQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLhnfgTcrsPe+TZmiiD0421WHvO2MB8GA1UdIwQY
MBaAFPkSTOe5kSTe+1W4JHNY392jX2zgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SSk01N21SSk43N1ZiZ2tjMWpmM2FOZmJPQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmM2ZWRjLWZiMTctNGRlMC05YWE3
LWRkMjIyZTJmYjVjNy8xLzEtUkpNNTdtUkpONzdWYmdrYzFqZjNhTmZiT0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIwL2JjNmVkYy1mYjE3LTRkZTAtOWFhNy1kZDIyMmUyZmI1
YzcvMS8xLVJKTTU3bVJKTjc3VmJna2MxamYzYU5mYk9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0nkW
TM+91qS/00cGuMXPfcKWp5qrJTkrhnLFr6DIWrenpLABQG0L40vPanl7g11kKq+d
gtYCJlRr5Bqas91460lmak8H0Fkcavdz4jnBjZQcnz4ItitPc1uYlVvEn2COmrxF
GM4t1WzWRNtG31G+QZfP9smsxsKSClrButbgCWiByaoVWFES/qBdCiZasU9c4j4N
akVJ878K9pLxYiawCMmz2Xd7EplB9uv1kvapqha7OgwG/++2ksz3d/fnnV39LXcI
fzytiVRTZogwRmbFqDzHUm0CFRmeOZ8uOzZ3OISuWUuf3SpwzWUZBelvfHY9dOzN
Vjp5T9tVrb+z0nP6SA==
-----END CERTIFICATE-----
Generated at Wed Nov 11 21:05:44 2026 by rpki-client