Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: lTdi8tMKmOjrTC5yFYtirqz4qKrS9KRmsWK73smxeX0=
Subject key identifier: 7F:9C:37:42:86:93:5E:1B:BE:55:05:BF:3F:7A:CF:F4:AD:87:1F:8D
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 01A0CEC88897EA4D52708FB3D835BC1F6F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0A2C
Signing time: Wed 23 Sep 2026 15:00:43 +0000
Manifest this update: Wed 23 Sep 2026 15:00:43 +0000
Manifest next update: Thu 24 Sep 2026 15:00:43 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: OcFNq7a9BveO4TLcbfYEHKObdn1ciY+vLJUJjwmJXa0=)
2: KY98OK9jKpqbO2GmZe7Es_X3AuY.roa (hash: cBxNonBZQsdFtI0G+UJX4+MOa5fw7YrWs9H/ZAWUf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:88:97:ea:4d:52:70:8f:b3:d8:35:bc:1f:6f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Sep 23 15:00:43 2026 GMT
Not After : Sep 24 15:00:43 2026 GMT
Subject: CN=7f9c374286935e1bbe5505bf3f7acff4ad871f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:c7:cc:b9:2f:49:57:da:ad:16:aa:22:e0:
4e:c3:6e:fb:ea:66:72:b6:4a:34:9f:84:5c:ec:5a:
be:f0:54:99:0f:88:1f:51:0d:c5:3d:1e:56:4c:4a:
76:10:ce:cc:99:9f:ab:01:29:a1:95:22:04:5c:60:
e4:42:e9:29:5b:93:db:a7:f3:e7:38:b5:9b:ec:f3:
25:ed:cd:f6:77:55:9a:1e:30:c0:d1:25:18:42:91:
6f:9d:9e:71:e5:bc:84:e3:9f:b3:fe:55:05:4a:5b:
2f:d8:0d:fe:e7:de:d2:03:bb:22:2b:f8:91:7c:de:
be:b9:db:cb:94:1a:88:99:ba:03:e7:65:96:ba:ba:
b0:b2:cc:aa:76:60:dc:29:81:ed:fc:47:e9:69:36:
c7:38:75:71:d8:cd:68:6c:ae:6e:d5:9e:da:6c:b4:
a7:22:ba:83:4f:29:11:25:c9:0f:4c:d4:6c:a3:06:
b0:7f:87:e1:0a:e6:3c:4e:6f:65:b6:8c:83:a5:75:
38:72:23:2d:79:89:5e:c6:3f:2a:32:c5:6c:0e:a6:
92:72:64:fe:81:3c:48:82:4f:c0:1c:80:8b:6a:a9:
90:79:21:49:07:68:eb:42:36:0e:54:de:ec:cd:3b:
7f:5c:bc:ac:8b:3c:7f:fa:04:3e:ec:45:20:14:89:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9C:37:42:86:93:5E:1B:BE:55:05:BF:3F:7A:CF:F4:AD:87:1F:8D
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a1:eb:6e:08:4a:0e:c9:af:42:8a:e8:0a:41:1f:05:f4:e1:
20:ae:02:f9:6d:89:d0:f0:08:2c:ab:c4:1d:ed:f3:41:7a:51:
f6:bf:2c:ed:f1:d0:40:a9:68:df:13:ba:98:ea:eb:72:00:28:
5d:24:29:ea:b9:25:6e:f3:11:b1:81:87:a2:43:3d:39:0d:2e:
2d:38:3f:47:04:12:5c:73:f0:49:76:2c:3b:b4:b0:bb:94:df:
2f:04:ac:63:b9:50:d8:64:6d:fc:df:fe:f1:6a:4d:b8:7b:26:
74:7c:9b:4a:a3:45:21:cf:2c:81:4b:ce:a2:92:45:0a:b5:ee:
9b:8a:d9:4f:b4:d6:42:5e:e0:b7:eb:b5:f0:e0:9f:ea:1b:27:
1e:9f:9b:d8:81:63:af:3d:60:10:1a:8b:b2:9d:fc:5f:1d:86:
ed:32:26:5d:01:98:96:38:22:62:cb:45:97:e8:f5:0b:57:50:
3f:8b:b8:cd:ea:11:29:80:62:de:38:5d:e5:ac:12:f1:98:67:
6e:2f:83:2c:bb:d0:f5:a7:98:b7:22:81:8d:85:2c:b3:04:bc:
86:3f:53:29:b1:49:50:ef:57:46:67:eb:a7:19:f2:16:46:c5:
f3:68:04:67:e3:ea:70:a3:2c:47:a9:44:f1:9c:dc:f8:b3:2c:
a6:1d:5c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyIiX6k1ScI+z2DW8H28CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy
ZjMyMWIwHhcNMjYwOTIzMTUwMDQzWhcNMjYwOTI0MTUwMDQzWjAzMTEwLwYDVQQD
Eyg3ZjljMzc0Mjg2OTM1ZTFiYmU1NTA1YmYzZjdhY2ZmNGFkODcxZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEzHzLkvSVfarRaqIuBOw2776mZy
tko0n4Rc7Fq+8FSZD4gfUQ3FPR5WTEp2EM7MmZ+rASmhlSIEXGDkQukpW5Pbp/Pn
OLWb7PMl7c32d1WaHjDA0SUYQpFvnZ5x5byE45+z/lUFSlsv2A3+597SA7siK/iR
fN6+udvLlBqImboD52WWurqwssyqdmDcKYHt/EfpaTbHOHVx2M1obK5u1Z7abLSn
IrqDTykRJckPTNRsowawf4fhCuY8Tm9ltoyDpXU4ciMteYlexj8qMsVsDqaScmT+
gTxIgk/AHICLaqmQeSFJB2jrQjYOVN7szTt/XLysizx/+gQ+7EUgFIlFSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+cN0KGk14bvlUFvz96z/Sthx+NMB8GA1UdIwQY
MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt
ZWZkMjg5MmI2ZWJmLzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm
LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaHrbghK
DsmvQoroCkEfBfThIK4C+W2J0PAILKvEHe3zQXpR9r8s7fHQQKlo3xO6mOrrcgAo
XSQp6rklbvMRsYGHokM9OQ0uLTg/RwQSXHPwSXYsO7Swu5TfLwSsY7lQ2GRt/N/+
8WpNuHsmdHybSqNFIc8sgUvOopJFCrXum4rZT7TWQl7gt+u18OCf6hsnHp+b2IFj
rz1gEBqLsp38Xx2G7TImXQGYljgiYstFl+j1C1dQP4u4zeoRKYBi3jhd5awS8Zhn
bi+DLLvQ9aeYtyKBjYUsswS8hj9TKbFJUO9XRmfrpxnyFkbF82gEZ+PqcKMsR6lE
8Zzc+LMsph1cjQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:54:28 2026 by rpki-client