Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
File: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft (raw, json)
Hash identifier: 6qzzN2miWZCKK+pdyyol5ETTCRzBCqCBhzu5/7klauY=
Subject key identifier: DF:A6:60:01:70:89:01:30:69:ED:5C:ED:16:43:9B:A9:A9:E3:96:E8
Authority key identifier: F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
Certificate issuer: /CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Certificate serial: 01A0CF36428A43640ACC0B0F75E39A1611BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
Manifest number: 026D
Signing time: Wed 23 Sep 2026 17:00:34 +0000
Manifest this update: Wed 23 Sep 2026 17:00:34 +0000
Manifest next update: Thu 24 Sep 2026 17:00:34 +0000
Files and hashes: 1: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl (hash: VKLXk3iYx+wP9oCuCJ5G+wpF63FKJVrbun4n/Snbmb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:42:8a:43:64:0a:cc:0b:0f:75:e3:9a:16:11:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Validity
Not Before: Sep 23 17:00:34 2026 GMT
Not After : Sep 24 17:00:34 2026 GMT
Subject: CN=dfa660017089013069ed5ced16439ba9a9e396e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:28:db:9f:32:a6:7b:68:31:ee:09:c2:45:
01:23:fb:ba:34:e0:a9:0a:4a:1e:75:51:7f:87:79:
bd:3f:bc:53:5a:7b:e6:13:64:69:d1:6c:19:48:0b:
40:0f:fc:da:ee:a6:3f:30:6b:46:56:e6:05:15:51:
5e:d9:1e:bd:aa:c0:3a:1a:06:01:ba:00:6f:ee:91:
aa:d3:c5:04:72:7c:71:6e:f1:8a:d0:f0:11:47:fc:
45:4a:20:09:15:e0:40:4e:01:22:fa:cb:ff:23:3e:
65:07:52:cf:e5:50:df:47:6f:4a:83:3b:0c:7f:d7:
95:21:da:7b:cb:c9:3f:64:34:95:b2:7b:e5:eb:e5:
0d:fa:9c:1d:a1:b8:c5:ca:19:fa:83:15:87:aa:b9:
64:27:f7:a3:4c:b0:7f:9e:8e:6b:cf:2f:49:4f:d5:
5f:8e:9b:b5:f4:de:c6:5b:47:9c:80:a4:86:3d:27:
e6:6f:bf:7a:44:a8:56:33:83:33:70:bc:7b:50:75:
5d:bb:23:54:1c:e5:5d:1b:1b:ff:47:62:35:81:69:
57:0a:c1:5f:f1:2e:c5:76:3f:6c:10:d6:5a:f8:f3:
5e:fa:42:bd:d0:28:d1:bf:22:1e:b7:7e:e9:e0:c9:
73:3c:40:3b:99:ba:a4:59:67:7a:90:25:86:2c:53:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:60:01:70:89:01:30:69:ED:5C:ED:16:43:9B:A9:A9:E3:96:E8
X509v3 Authority Key Identifier:
keyid:F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:73:a3:d9:d8:be:4d:e7:21:3d:15:87:21:67:1b:d2:c7:3e:
3f:a2:9c:ae:c2:45:d2:f0:0f:42:9e:ef:98:b9:67:14:ff:b0:
16:22:b5:c9:61:a0:5f:92:6a:48:77:9f:20:e4:0a:23:c9:3c:
a6:2d:bd:f9:20:61:d5:06:18:b1:ae:37:d6:b0:e8:5b:5c:ca:
c3:76:c9:bc:0a:8c:b9:00:9a:e5:df:aa:2b:37:eb:0a:5c:29:
29:b7:79:be:6c:6f:92:9e:6c:27:ab:6c:e5:0b:91:64:20:6d:
9b:7b:d5:62:b2:60:3c:0e:2b:f4:53:90:2d:0c:8f:7c:6e:b6:
01:29:2b:93:97:bc:03:04:9e:26:87:35:8f:50:8f:2b:a5:91:
ea:73:30:0f:7a:1c:65:8c:8a:64:13:e9:01:7d:64:09:1a:18:
be:61:54:9c:98:4e:83:b0:7f:49:34:47:56:29:1f:6f:13:b1:
6f:a7:ac:f6:a5:9e:e8:be:64:13:20:53:d1:53:6e:93:40:93:
bf:e2:6e:01:23:b2:29:67:c7:75:e1:98:e1:37:c6:b8:1f:ed:
a2:26:23:0f:a8:4e:35:9e:0d:cc:8c:a0:3f:c5:0b:72:c0:5d:
ab:21:a1:65:14:81:b7:8b:89:d8:7a:f3:4b:70:e8:1d:3a:9e:
aa:46:73:31
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDPNkKKQ2QKzAsPdeOaFhG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MGRlZGQ4ZDQwZGJmMjNlMTEwNTQwYzQzMGQ5NGVjMzg3
ODk2M2EwHhcNMjYwOTIzMTcwMDM0WhcNMjYwOTI0MTcwMDM0WjAzMTEwLwYDVQQD
EyhkZmE2NjAwMTcwODkwMTMwNjllZDVjZWQxNjQzOWJhOWE5ZTM5NmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLso258ypntoMe4JwkUBI/u6NOCp
CkoedVF/h3m9P7xTWnvmE2Rp0WwZSAtAD/za7qY/MGtGVuYFFVFe2R69qsA6GgYB
ugBv7pGq08UEcnxxbvGK0PARR/xFSiAJFeBATgEi+sv/Iz5lB1LP5VDfR29KgzsM
f9eVIdp7y8k/ZDSVsnvl6+UN+pwdobjFyhn6gxWHqrlkJ/ejTLB/no5rzy9JT9Vf
jpu19N7GW0ecgKSGPSfmb796RKhWM4MzcLx7UHVduyNUHOVdGxv/R2I1gWlXCsFf
8S7Fdj9sENZa+PNe+kK90CjRvyIet37p4MlzPEA7mbqkWWd6kCWGLFNbtQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN+mYAFwiQEwae1c7RZDm6mp45boMB8GA1UdIwQY
MBaAFPgN7djUDb8j4RBUDEMNlOw4eJY6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BM3QyTlFOdnlQaEVGUU1RdzJVN0RoNGxqby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMTJiNDllLTJmMmItNDVmNC1iNGU4
LTNhOGNlOWViMmFlYS8xLzEtQTN0Mk5RTnZ5UGhFRlFNUXcyVTdEaDRsam8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzUwLzEyYjQ5ZS0yZjJiLTQ1ZjQtYjRlOC0zYThjZTllYjJh
ZWEvMS8xLUEzdDJOUU52eVBoRUZRTVF3MlU3RGg0bGpvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHOj
2di+TechPRWHIWcb0sc+P6KcrsJF0vAPQp7vmLlnFP+wFiK1yWGgX5JqSHefIOQK
I8k8pi29+SBh1QYYsa431rDoW1zKw3bJvAqMuQCa5d+qKzfrClwpKbd5vmxvkp5s
J6ts5QuRZCBtm3vVYrJgPA4r9FOQLQyPfG62ASkrk5e8AwSeJoc1j1CPK6WR6nMw
D3ocZYyKZBPpAX1kCRoYvmFUnJhOg7B/STRHVikfbxOxb6es9qWe6L5kEyBT0VNu
k0CTv+JuASOyKWfHdeGY4TfGuB/toiYjD6hONZ4NzIygP8ULcsBdqyGhZRSBt4uJ
2HrzS3DoHTqeqkZzMQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:18:02 2026 by rpki-client