Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: YFBN6484SjEI6gm6ztKrCfzqW/DZkNJa1XOxb2Ulfv4=
Subject key identifier: 1B:CA:E0:2C:AA:6F:8A:22:62:09:91:54:39:9C:56:F8:14:A8:EC:9B
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 01A0DD2947FCF0E68139C3586CF3966EBB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 0A09
Signing time: Sat 26 Sep 2026 10:01:05 +0000
Manifest this update: Sat 26 Sep 2026 10:01:05 +0000
Manifest next update: Sun 27 Sep 2026 10:01:05 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: Ok8EhHBInFZa3X0xTK/fZMJI3+NHTIGFqzVF8V5XPSk=)
2: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (hash: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc=)
3: iTaV7elHXW3QykhmVM8s9S75IWo.roa (hash: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:47:fc:f0:e6:81:39:c3:58:6c:f3:96:6e:bb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Sep 26 10:01:05 2026 GMT
Not After : Sep 27 10:01:05 2026 GMT
Subject: CN=1bcae02caa6f8a2262099154399c56f814a8ec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:c0:e6:58:93:2f:2e:e6:d8:5e:ab:d9:ee:
d9:7e:19:9e:c2:fc:a8:96:b8:10:9d:07:69:2d:5c:
90:0b:83:7d:5d:bd:dc:dc:a3:9a:05:1c:1a:b4:cc:
3a:43:73:fb:d5:60:f7:c4:3c:b2:6b:ce:32:80:21:
a5:d1:ee:5c:10:e4:8d:f9:cf:07:f7:fc:45:0d:58:
18:82:05:f0:7a:4d:eb:54:e4:9b:61:51:66:ee:00:
07:1d:5f:71:69:96:49:39:14:6e:82:2c:81:0e:c0:
94:9b:25:3d:54:59:68:7f:8a:66:7a:31:e7:71:ee:
6a:fd:3f:70:79:de:bc:46:d9:33:5c:8e:34:c7:e1:
b5:ff:91:21:c1:7d:e7:00:72:d6:95:77:6a:19:8d:
90:4b:64:f2:83:62:5e:0c:70:8e:ab:11:07:09:3e:
53:ad:80:61:32:c7:79:6c:a4:a6:74:7e:18:05:3f:
4c:d7:4e:b0:8c:7e:93:b6:24:58:93:47:4c:a7:0f:
ce:f2:3c:c2:66:ab:47:f9:83:b6:41:bb:dc:d2:f6:
6d:68:73:48:3f:7f:a2:dd:70:1e:c9:7e:c1:06:57:
20:92:e5:45:c2:b2:fd:ec:1b:e9:c0:26:69:1c:7c:
f3:eb:a2:bd:be:84:16:4c:72:96:44:00:6d:a3:24:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CA:E0:2C:AA:6F:8A:22:62:09:91:54:39:9C:56:F8:14:A8:EC:9B
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:20:be:5a:23:35:35:5a:10:37:5e:4b:fe:8a:ed:1e:a9:8f:
80:c1:44:80:81:c6:42:3e:93:5a:4f:b7:00:45:83:cb:b3:01:
20:8e:8b:52:75:08:66:a5:d8:09:53:18:33:20:b9:f6:3d:23:
0a:2b:bf:b1:3a:d2:9d:22:5a:87:fe:f4:03:3e:05:d0:fe:44:
15:62:fd:a3:1f:e5:c7:53:55:54:29:c2:06:6d:51:81:fb:1e:
4e:0f:4c:d5:1e:47:4c:c9:0a:27:cd:80:01:3b:c0:21:42:26:
f9:fc:75:fb:8d:2b:ce:8b:eb:af:72:10:e9:59:a7:13:06:b1:
1d:8f:dc:27:86:f2:22:62:4f:c7:17:c4:eb:84:d0:68:31:35:
da:9c:6d:c3:4f:34:2b:b3:97:ae:85:62:e3:41:fb:ec:68:37:
34:c8:17:93:7a:ba:0d:bd:e1:b6:94:34:81:c1:4c:ea:c4:fb:
c8:7b:8a:5a:8c:af:86:27:cc:65:90:c8:51:cc:33:21:0b:aa:
ba:45:5b:e8:00:ff:63:60:d4:70:ae:ea:9c:4a:89:8c:6d:8c:
95:e8:24:db:58:00:48:a7:ac:06:7d:e2:27:97:80:87:37:cb:
d6:49:12:e2:e5:f9:16:11:89:21:6c:ac:24:b4:86:60:b6:27:
c5:be:0d:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdKUf88OaBOcNYbPOWbrstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk
NDE2MTUwHhcNMjYwOTI2MTAwMTA1WhcNMjYwOTI3MTAwMTA1WjAzMTEwLwYDVQQD
EygxYmNhZTAyY2FhNmY4YTIyNjIwOTkxNTQzOTljNTZmODE0YThlYzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU7A5liTLy7m2F6r2e7Zfhmewvyo
lrgQnQdpLVyQC4N9Xb3c3KOaBRwatMw6Q3P71WD3xDyya84ygCGl0e5cEOSN+c8H
9/xFDVgYggXwek3rVOSbYVFm7gAHHV9xaZZJORRugiyBDsCUmyU9VFlof4pmejHn
ce5q/T9wed68RtkzXI40x+G1/5EhwX3nAHLWlXdqGY2QS2Tyg2JeDHCOqxEHCT5T
rYBhMsd5bKSmdH4YBT9M106wjH6TtiRYk0dMpw/O8jzCZqtH+YO2Qbvc0vZtaHNI
P3+i3XAeyX7BBlcgkuVFwrL97BvpwCZpHHzz66K9voQWTHKWRABtoyTkkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvK4Cyqb4oiYgmRVDmcVvgUqOybMB8GA1UdIwQY
MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt
MTgxZTY0MDU5ZDMxLzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx
LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCC+WiM1
NVoQN15L/ortHqmPgMFEgIHGQj6TWk+3AEWDy7MBII6LUnUIZqXYCVMYMyC59j0j
Ciu/sTrSnSJah/70Az4F0P5EFWL9ox/lx1NVVCnCBm1RgfseTg9M1R5HTMkKJ82A
ATvAIUIm+fx1+40rzovrr3IQ6VmnEwaxHY/cJ4byImJPxxfE64TQaDE12pxtw080
K7OXroVi40H77Gg3NMgXk3q6Db3htpQ0gcFM6sT7yHuKWoyvhifMZZDIUcwzIQuq
ukVb6AD/Y2DUcK7qnEqJjG2Mlegk21gASKesBn3iJ5eAhzfL1kkS4uX5FhGJIWys
JLSGYLYnxb4N7g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:32:27 2026 by rpki-client