Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json)
Hash identifier: zsqZqEt/LNRafdxJRVdxztfB2TYBhFmMuVSM0mPST/c=
Subject key identifier: 00:81:43:F3:16:8D:72:D2:EF:98:71:31:4C:E9:C3:79:09:0C:05:8F
Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Certificate serial: 01A0CBFE63F180408B458D8A5B323E1E4EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
Manifest number: 03CB
Signing time: Wed 23 Sep 2026 02:00:41 +0000
Manifest this update: Wed 23 Sep 2026 02:00:41 +0000
Manifest next update: Thu 24 Sep 2026 02:00:41 +0000
Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: fCUV76mDHi2e/S1uKyhYfMYB7j9lo1bXukKyw3pM98I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:63:f1:80:40:8b:45:8d:8a:5b:32:3e:1e:4e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Validity
Not Before: Sep 23 02:00:41 2026 GMT
Not After : Sep 24 02:00:41 2026 GMT
Subject: CN=008143f3168d72d2ef9871314ce9c379090c058f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:8a:fa:e0:16:fc:73:33:3d:27:0b:a1:ef:
00:33:37:b6:4a:7c:23:ab:70:7b:b2:e6:92:f5:37:
f4:6f:8c:d1:16:52:fd:a0:16:b9:b8:b4:ec:5b:21:
10:8f:f2:9b:f6:97:11:10:f4:a2:b9:dc:1a:72:4e:
12:72:d5:60:e2:b6:98:1c:f5:60:83:12:59:60:80:
53:bc:38:65:06:f8:4f:d9:33:c2:66:96:6e:b3:be:
fe:07:42:4c:e2:98:0d:7d:17:54:88:4f:74:d9:cc:
50:9a:38:48:4e:c5:3f:85:02:16:c4:23:e0:17:14:
d0:3b:f9:e5:0c:cd:b1:46:85:9a:7a:db:3b:99:8b:
3d:1c:49:38:af:86:07:36:ea:a0:db:8a:78:2d:69:
55:b1:27:82:02:9b:59:dd:70:33:82:94:fc:35:1b:
d7:32:63:f5:40:00:46:4c:0c:4d:02:0a:83:c5:5b:
4b:9e:bb:0a:1a:f7:49:ff:f9:ae:b6:af:6b:8a:93:
a3:8d:d1:6d:65:d2:16:33:b9:53:18:52:af:3c:45:
04:72:1e:90:2d:e7:73:9c:9d:32:6c:5e:ca:94:b0:
61:d5:ca:5c:a6:17:76:f0:71:ad:6b:3a:94:ee:54:
26:e8:24:ba:6f:59:e0:19:fd:88:02:aa:ad:31:02:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:43:F3:16:8D:72:D2:EF:98:71:31:4C:E9:C3:79:09:0C:05:8F
X509v3 Authority Key Identifier:
keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6f:52:20:52:94:bc:b8:b1:8b:18:05:75:56:42:2d:a6:d3:
43:92:ae:28:c4:3a:05:22:aa:6f:f1:33:9a:39:0f:f0:59:ef:
39:56:46:91:a3:f9:23:4a:d6:cd:f2:02:d5:a4:29:2d:7c:46:
74:8a:4f:83:9d:d3:70:f7:75:66:ad:11:94:e5:0a:f4:6c:a0:
09:43:3b:ed:37:3b:7b:30:73:cc:21:f9:f3:2d:d1:5f:3b:99:
02:40:6c:31:db:e7:b9:ae:59:cb:2f:a2:c6:38:34:32:82:f7:
17:43:90:ad:c7:fe:9c:51:53:e3:f5:18:2d:01:23:af:df:49:
d1:bc:39:18:6c:d6:fb:f4:3d:d2:23:38:73:13:7a:6b:3c:d0:
fd:78:97:ad:a6:07:08:c6:ca:cc:0b:9e:ca:71:69:76:90:9a:
34:68:b5:e0:1c:a5:eb:a2:db:33:6d:5a:ca:24:aa:53:00:ad:
91:01:b1:3a:9d:89:dc:37:36:c8:ca:e8:11:2d:09:c2:df:97:
10:65:39:5a:07:8d:f1:45:73:5b:17:f7:93:91:e8:90:ce:2d:
c9:82:e8:c3:35:0b:7d:e6:fb:16:de:c0:3d:5f:1f:fb:1e:c9:
59:82:85:d4:ea:35:28:33:a9:8a:17:04:41:69:09:83:5e:6c:
f2:9a:a8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/mPxgECLRY2KWzI+Hk7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2VmY2EwYzZjZDk0NzZkMzMwMTU2MDM4NzJkMjYxYmYy
YjM1MzYwHhcNMjYwOTIzMDIwMDQxWhcNMjYwOTI0MDIwMDQxWjAzMTEwLwYDVQQD
EygwMDgxNDNmMzE2OGQ3MmQyZWY5ODcxMzE0Y2U5YzM3OTA5MGMwNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYeK+uAW/HMzPScLoe8AMze2Snwj
q3B7suaS9Tf0b4zRFlL9oBa5uLTsWyEQj/Kb9pcREPSiudwack4SctVg4raYHPVg
gxJZYIBTvDhlBvhP2TPCZpZus77+B0JM4pgNfRdUiE902cxQmjhITsU/hQIWxCPg
FxTQO/nlDM2xRoWaets7mYs9HEk4r4YHNuqg24p4LWlVsSeCAptZ3XAzgpT8NRvX
MmP1QABGTAxNAgqDxVtLnrsKGvdJ//mutq9ripOjjdFtZdIWM7lTGFKvPEUEch6Q
LedznJ0ybF7KlLBh1cpcphd28HGtazqU7lQm6CS6b1ngGf2IAqqtMQL+1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACBQ/MWjXLS75hxMUzpw3kJDAWPMB8GA1UdIwQY
MBaAFNbO/KDGzZR20zAVYDhy0mG/KzU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjIt
NjYwOGI2MWE5YWFhLzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xOTQyYmItYjMxNC00ZTExLTk4YjItNjYwOGI2MWE5YWFh
LzEvMXM3OG9NYk5sSGJUTUJWZ09ITFNZYjhyTlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMG9SIFKU
vLixixgFdVZCLabTQ5KuKMQ6BSKqb/EzmjkP8FnvOVZGkaP5I0rWzfIC1aQpLXxG
dIpPg53TcPd1Zq0RlOUK9GygCUM77Tc7ezBzzCH58y3RXzuZAkBsMdvnua5Zyy+i
xjg0MoL3F0OQrcf+nFFT4/UYLQEjr99J0bw5GGzW+/Q90iM4cxN6azzQ/XiXraYH
CMbKzAueynFpdpCaNGi14Byl66LbM21ayiSqUwCtkQGxOp2J3Dc2yMroES0Jwt+X
EGU5WgeN8UVzWxf3k5HokM4tyYLowzULfeb7Ft7APV8f+x7JWYKF1Oo1KDOpihcE
QWkJg15s8pqoOA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:42:47 2026 by rpki-client