Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: 7J1KjnpUI28/6XGGe5cArXyxdvD5QTADFQ+GBaK0qhQ=
Subject key identifier: 19:94:D9:1A:63:D1:C8:51:04:41:65:47:4D:13:B1:A7:F6:4F:FC:BA
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 01A0D2A5AC478688CC6E06E0D6FA20C318C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 09:01:07 +0000
Manifest this update: Thu 24 Sep 2026 09:01:07 +0000
Manifest next update: Fri 25 Sep 2026 09:01:07 +0000
Files and hashes: 1: ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa (hash: iQJDM30z8fYynMrfjXIbza+TCD7vD5Lcd4NjgJS6pYQ=)
2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: umrb2ONjTxsxpSkvFqdUgXnLHSlWW4BX6y35yb3JTdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:ac:47:86:88:cc:6e:06:e0:d6:fa:20:c3:18:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Sep 24 09:01:07 2026 GMT
Not After : Sep 25 09:01:07 2026 GMT
Subject: CN=1994d91a63d1c851044165474d13b1a7f64ffcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:26:3d:c9:d7:f4:9d:8c:eb:10:23:cc:41:
46:83:d7:5d:ef:1a:3c:93:ca:a5:cc:7e:a9:9b:15:
7a:e4:c9:f3:b2:0c:34:70:d3:75:a4:f2:fc:a0:c4:
bb:00:26:7a:49:62:0b:ef:1b:84:d0:97:07:64:53:
9f:c2:fc:ff:21:0e:3c:5d:2c:55:5e:d5:16:d3:fe:
a7:71:81:43:22:68:19:24:ba:6a:11:fd:f2:cf:ae:
83:39:21:7b:23:76:e6:6d:b6:8a:9f:ae:76:b2:2f:
6c:6f:72:8d:8a:29:16:7c:c3:7b:a2:c3:02:91:78:
d0:53:bc:55:29:aa:5b:8c:b9:c9:88:28:7d:4a:2c:
ff:fb:c7:9a:fd:5a:3a:f9:c7:7e:2b:74:9a:8b:d4:
39:80:71:e0:f7:ea:46:8b:52:53:98:8c:9d:47:fd:
02:90:d6:e8:f5:87:6d:d7:61:e1:71:a2:7b:c9:97:
e1:fc:c5:ff:7b:6c:e9:8a:48:4b:8b:58:36:77:4f:
aa:33:13:d3:a2:09:fa:d3:2c:48:31:e2:2d:84:af:
c4:57:8f:0d:2b:53:41:9c:38:ad:b1:b5:d7:5e:06:
f3:f2:93:5c:43:bd:02:5a:fd:fe:e4:a7:ca:5f:a9:
57:fa:14:a9:28:50:6b:0a:f0:38:38:6b:db:ac:e3:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:94:D9:1A:63:D1:C8:51:04:41:65:47:4D:13:B1:A7:F6:4F:FC:BA
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:12:3d:33:6f:57:0e:a4:16:da:cb:d5:1a:e2:84:06:ce:45:
70:f6:86:99:20:00:55:58:b0:6f:11:ea:79:30:79:94:b5:d0:
a4:d5:ee:c9:4c:3a:9b:c0:7e:7c:50:2b:08:32:83:5f:4a:88:
03:08:a9:a6:bc:02:53:01:73:68:6b:54:76:16:d6:a4:3f:6c:
ab:5d:bc:5b:72:79:13:02:c2:a5:6f:a1:77:eb:4b:e6:04:f9:
ec:a3:4e:7a:c6:36:65:df:78:62:70:4f:d7:9b:fb:d2:db:c2:
aa:b3:af:12:0c:7e:6c:ad:04:72:a1:db:45:ec:a2:7f:40:d0:
1d:7c:33:c3:1a:f7:fe:09:28:58:a6:7a:9d:b9:6b:2a:d8:16:
e4:e8:21:02:89:d9:62:a9:75:6c:d9:a4:75:2c:f7:4b:f5:01:
8d:8d:bf:ed:29:10:a8:b0:38:e1:aa:95:5e:18:d2:57:19:bd:
18:af:27:b7:5a:be:3e:4c:a1:83:20:a4:02:45:10:43:ff:68:
79:71:e6:69:93:ec:8a:cf:63:0c:5c:c9:3f:7e:07:65:1c:3c:
1a:db:ea:bd:55:9f:89:d4:22:fc:ae:34:81:68:cc:89:57:a4:
71:b4:65:55:05:50:fa:cf:44:08:35:66:7e:84:18:24:12:00:
72:ae:55:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpaxHhojMbgbg1vogwxjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk
ZDRlZTYwHhcNMjYwOTI0MDkwMTA3WhcNMjYwOTI1MDkwMTA3WjAzMTEwLwYDVQQD
EygxOTk0ZDkxYTYzZDFjODUxMDQ0MTY1NDc0ZDEzYjFhN2Y2NGZmY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8YmPcnX9J2M6xAjzEFGg9dd7xo8
k8qlzH6pmxV65Mnzsgw0cNN1pPL8oMS7ACZ6SWIL7xuE0JcHZFOfwvz/IQ48XSxV
XtUW0/6ncYFDImgZJLpqEf3yz66DOSF7I3bmbbaKn652si9sb3KNiikWfMN7osMC
kXjQU7xVKapbjLnJiCh9Siz/+8ea/Vo6+cd+K3Sai9Q5gHHg9+pGi1JTmIydR/0C
kNbo9Ydt12HhcaJ7yZfh/MX/e2zpikhLi1g2d0+qMxPTogn60yxIMeIthK/EV48N
K1NBnDitsbXXXgbz8pNcQ70CWv3+5KfKX6lX+hSpKFBrCvA4OGvbrOPbhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmU2Rpj0chRBEFlR00Tsaf2T/y6MB8GA1UdIwQY
MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt
NDJkYWZiNGI1MWQyLzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy
LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBI9M29X
DqQW2svVGuKEBs5FcPaGmSAAVViwbxHqeTB5lLXQpNXuyUw6m8B+fFArCDKDX0qI
AwipprwCUwFzaGtUdhbWpD9sq128W3J5EwLCpW+hd+tL5gT57KNOesY2Zd94YnBP
15v70tvCqrOvEgx+bK0EcqHbReyif0DQHXwzwxr3/gkoWKZ6nblrKtgW5OghAonZ
Yql1bNmkdSz3S/UBjY2/7SkQqLA44aqVXhjSVxm9GK8nt1q+PkyhgyCkAkUQQ/9o
eXHmaZPsis9jDFzJP34HZRw8GtvqvVWfidQi/K40gWjMiVekcbRlVQVQ+s9ECDVm
foQYJBIAcq5VWw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:40:00 2026 by rpki-client