Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File: 1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier: gsGBojmlZoThGGAYveH5/QLqQWST9uVnnIjvBP4JNos=
Subject key identifier: 5F:D3:3F:DE:9E:38:80:8B:04:E6:83:EF:73:34:03:26:D2:F1:E1:5E
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer: /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial: 01A0CDB5E5777AF6C45D7BF3C1D180C9DB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number: 0F76
Signing time: Wed 23 Sep 2026 10:00:45 +0000
Manifest this update: Wed 23 Sep 2026 10:00:45 +0000
Manifest next update: Thu 24 Sep 2026 10:00:45 +0000
Files and hashes: 1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: qCwxIoTD8KekKTcOInz6vaIz0gRVEKfcKPVL9qASL0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:e5:77:7a:f6:c4:5d:7b:f3:c1:d1:80:c9:db:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
Validity
Not Before: Sep 23 10:00:45 2026 GMT
Not After : Sep 24 10:00:45 2026 GMT
Subject: CN=5fd33fde9e38808b04e683ef73340326d2f1e15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:58:9a:90:e4:a3:16:e4:6b:0a:9c:ea:1a:
ab:74:47:5f:1a:cf:28:52:a0:e5:0c:76:fc:99:5c:
89:47:21:e5:66:2f:60:82:d6:3b:00:e3:0f:ea:85:
88:b1:54:5b:de:5b:eb:1b:be:98:a7:50:55:b2:03:
48:b9:9d:15:88:7f:e6:87:a9:9e:79:79:68:dd:da:
5f:52:fc:c5:6d:62:39:e3:91:a0:9e:4f:f0:1c:1c:
d0:1d:0f:e1:34:2f:d5:a2:bf:7b:54:63:0c:de:24:
30:6d:7c:64:01:0f:12:02:74:f4:d5:0e:dd:71:8f:
c5:78:cb:6a:81:19:43:b2:c7:4f:4b:2a:65:25:ee:
db:e8:02:c0:67:86:02:22:f4:39:b2:52:94:d5:74:
b1:58:10:0a:62:74:4d:64:27:4e:24:04:09:93:ea:
a7:a6:36:9d:e2:ba:02:b8:64:b0:e6:46:79:1a:23:
fb:e5:cf:35:60:67:40:ac:56:a6:4a:01:84:8e:3f:
cb:bf:b0:5b:7a:2d:b7:a4:a8:b4:4b:8e:5e:24:f8:
1a:3c:82:0e:15:a6:5b:b3:86:2d:f6:38:68:76:d8:
6d:71:81:2c:4a:b9:54:5a:46:40:28:69:d3:cf:8d:
42:57:38:6d:f3:24:3d:f1:7e:05:c6:a4:f1:04:2d:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:3F:DE:9E:38:80:8B:04:E6:83:EF:73:34:03:26:D2:F1:E1:5E
X509v3 Authority Key Identifier:
keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a0:52:da:23:a7:aa:0a:41:5c:1d:b5:a2:49:03:53:57:2b:
e0:20:18:18:1c:09:9b:5a:0f:44:c7:ab:2b:77:05:0e:3f:5e:
60:95:25:6f:a5:0b:cc:47:2f:15:c5:9b:53:48:23:dd:b9:79:
57:45:75:46:4f:3e:58:34:67:7d:ef:55:c6:4b:6d:bc:38:e2:
53:05:21:dd:8e:c5:35:0f:b8:88:40:89:ce:c3:39:af:35:1b:
5d:f2:b4:cb:56:e2:b5:cb:01:fb:7e:a8:df:c5:7b:19:82:8c:
a8:b7:70:98:c0:3a:32:4a:44:16:f7:9e:e2:f7:24:60:6f:da:
b9:e3:4b:8c:9f:48:53:05:a3:ea:79:cf:0a:5f:99:bc:06:b5:
31:16:dc:d3:2e:46:91:a4:d9:ea:f8:c6:cf:82:e8:e1:52:2d:
ce:1a:4a:3b:b7:b7:01:7c:28:2d:a8:96:40:f1:ad:d9:ff:30:
f0:32:27:11:12:5a:f8:ab:6b:71:99:0c:23:1c:f0:be:bb:bd:
a5:54:d2:05:43:f5:a0:2b:f8:a4:42:f8:d0:47:b4:bb:10:49:
c8:be:70:86:52:f5:3e:ae:59:1e:a9:b3:23:6f:89:d8:9e:d9:
88:17:83:f8:43:38:fb:89:a8:16:6c:57:32:c0:f1:25:d6:a0:
80:1c:ad:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNteV3evbEXXvzwdGAydszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yzg4OGViOTYwYTAwMTkwMGMyNzk1ZThhYWZhMjY4ZjYw
MmQ4NDIwHhcNMjYwOTIzMTAwMDQ1WhcNMjYwOTI0MTAwMDQ1WjAzMTEwLwYDVQQD
Eyg1ZmQzM2ZkZTllMzg4MDhiMDRlNjgzZWY3MzM0MDMyNmQyZjFlMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsxYmpDkoxbkawqc6hqrdEdfGs8o
UqDlDHb8mVyJRyHlZi9ggtY7AOMP6oWIsVRb3lvrG76Yp1BVsgNIuZ0ViH/mh6me
eXlo3dpfUvzFbWI545Ggnk/wHBzQHQ/hNC/Vor97VGMM3iQwbXxkAQ8SAnT01Q7d
cY/FeMtqgRlDssdPSyplJe7b6ALAZ4YCIvQ5slKU1XSxWBAKYnRNZCdOJAQJk+qn
pjad4roCuGSw5kZ5GiP75c81YGdArFamSgGEjj/Lv7Bbei23pKi0S45eJPgaPIIO
FaZbs4Yt9jhodthtcYEsSrlUWkZAKGnTz41CVzht8yQ98X4FxqTxBC3MBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/TP96eOICLBOaD73M0AybS8eFeMB8GA1UdIwQY
MBaAFNTIiOuWCgAZAMJ5Xoqvomj2AthCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1pSTY1WUtBQmtBd25sZWlxLWlhUFlDMkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yZDczNGYtYWE4Yy00NzM1LWFjNzEt
MTVkNzY5MWY0YTJhLzEvMU1pSTY1WUtBQmtBd25sZWlxLWlhUFlDMkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yZDczNGYtYWE4Yy00NzM1LWFjNzEtMTVkNzY5MWY0YTJh
LzEvMU1pSTY1WUtBQmtBd25sZWlxLWlhUFlDMkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqBS2iOn
qgpBXB21okkDU1cr4CAYGBwJm1oPRMerK3cFDj9eYJUlb6ULzEcvFcWbU0gj3bl5
V0V1Rk8+WDRnfe9VxkttvDjiUwUh3Y7FNQ+4iECJzsM5rzUbXfK0y1bitcsB+36o
38V7GYKMqLdwmMA6MkpEFvee4vckYG/aueNLjJ9IUwWj6nnPCl+ZvAa1MRbc0y5G
kaTZ6vjGz4Lo4VItzhpKO7e3AXwoLaiWQPGt2f8w8DInERJa+KtrcZkMIxzwvru9
pVTSBUP1oCv4pEL40Ee0uxBJyL5whlL1Pq5ZHqmzI2+J2J7ZiBeD+EM4+4moFmxX
MsDxJdaggBytFw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:28:37 2026 by rpki-client