Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: bfim4L3xDiWU3xgT1sFZgRaqydTdBaHd4ZbOOFzOMX4=
Subject key identifier: 29:11:ED:45:E3:6F:59:68:55:3E:83:B4:3A:24:80:4D:0C:95:07:28
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 01A0D3154A581FC699B63D07516341D6893A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 07AC
Signing time: Thu 24 Sep 2026 11:03:02 +0000
Manifest this update: Thu 24 Sep 2026 11:03:02 +0000
Manifest next update: Fri 25 Sep 2026 11:03:02 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: U29zKhU35jHtHZuRNdTAs230fyjQ55XsaqlFxX/7AfQ=)
2: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (hash: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:4a:58:1f:c6:99:b6:3d:07:51:63:41:d6:89:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Sep 24 11:03:02 2026 GMT
Not After : Sep 25 11:03:02 2026 GMT
Subject: CN=2911ed45e36f5968553e83b43a24804d0c950728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:03:b2:29:a3:40:57:ce:37:81:ee:79:f4:
51:60:ad:82:dd:dc:26:a5:c8:c9:96:77:1a:f3:ea:
f4:85:55:51:c2:d8:05:98:e4:24:b0:83:a2:91:44:
9b:de:56:d0:4b:e3:d1:28:c9:77:cb:3d:f8:6d:25:
ef:83:00:fd:75:3a:20:ca:39:f2:f7:3e:59:77:a9:
04:1b:53:92:8f:6b:c8:12:69:d3:08:98:38:2a:be:
06:a9:0f:63:4b:41:2c:d8:62:fb:bb:de:5e:e5:ce:
27:01:7f:26:76:9f:ad:10:62:63:c0:4a:1f:c4:8c:
d0:75:f5:35:72:78:8f:d1:03:d2:78:34:95:b1:b0:
21:a6:81:46:eb:da:39:10:cd:72:b3:b9:55:a2:d1:
22:3d:29:c3:b5:45:f4:67:30:b1:7e:c8:49:53:94:
cc:cd:20:a1:20:22:d0:d8:d3:77:50:f1:ca:ae:a2:
9e:7f:ec:66:89:aa:8d:c9:2e:d4:8e:ca:55:c6:ed:
b8:b1:0d:9a:ba:bc:db:b7:31:aa:ef:89:14:0b:a6:
18:09:a7:ff:03:1b:03:4f:29:22:7a:17:ff:f3:a1:
31:20:d3:49:ff:f8:9a:ac:3a:bd:2a:66:cd:6c:7f:
c2:02:0b:96:52:47:e9:0d:ca:42:70:67:f8:b6:44:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:ED:45:E3:6F:59:68:55:3E:83:B4:3A:24:80:4D:0C:95:07:28
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:21:d8:8e:e4:02:19:7d:d5:75:98:1c:10:1a:1f:d2:14:7a:
a6:57:6e:03:39:33:f8:fa:56:0a:d5:de:0a:74:6b:57:6f:92:
72:c7:09:c3:b3:43:23:89:f8:6a:48:07:b4:59:cf:4e:f1:97:
f9:e4:10:65:28:b2:05:46:8f:0a:70:c8:e0:31:04:90:df:fe:
40:db:a9:ab:42:14:00:ed:98:fc:36:30:ca:3c:e7:cd:32:30:
c4:22:85:ab:ef:08:f9:ec:23:12:51:81:f8:aa:fd:a2:6e:91:
7b:b1:32:ce:2f:8b:86:ee:1b:85:5c:77:18:02:4c:d9:98:2b:
6c:50:66:f4:bd:02:94:a7:e1:a6:fe:0a:30:31:30:52:f1:10:
ec:37:a8:ea:6a:5b:c1:7b:13:3c:4a:18:bb:8b:82:fa:54:81:
2f:c5:1f:81:3d:44:97:61:5f:a1:6a:7b:6e:e0:9b:f3:a5:99:
48:bc:ff:59:29:af:73:e2:c2:e1:bb:39:6b:52:5e:95:4a:ee:
2a:4d:49:c4:51:2d:eb:f8:70:54:8a:c6:7c:67:e3:0c:3c:0e:
86:1f:f0:ff:d0:99:2f:a0:97:c4:e2:2f:b1:c8:c0:98:0a:70:
d6:42:75:41:e6:b4:c2:b2:31:62:26:1a:3b:48:58:92:b2:e0:
b5:c0:6d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFUpYH8aZtj0HUWNB1ok6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTQ0ZTkyM2Q4ODNiYWNlNGFhM2Y3ZWY3MDA3MmFmZTM1
MTFmMjgwHhcNMjYwOTI0MTEwMzAyWhcNMjYwOTI1MTEwMzAyWjAzMTEwLwYDVQQD
EygyOTExZWQ0NWUzNmY1OTY4NTUzZTgzYjQzYTI0ODA0ZDBjOTUwNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BwDsimjQFfON4HuefRRYK2C3dwm
pcjJlnca8+r0hVVRwtgFmOQksIOikUSb3lbQS+PRKMl3yz34bSXvgwD9dTogyjny
9z5Zd6kEG1OSj2vIEmnTCJg4Kr4GqQ9jS0Es2GL7u95e5c4nAX8mdp+tEGJjwEof
xIzQdfU1cniP0QPSeDSVsbAhpoFG69o5EM1ys7lVotEiPSnDtUX0ZzCxfshJU5TM
zSChICLQ2NN3UPHKrqKef+xmiaqNyS7UjspVxu24sQ2aurzbtzGq74kUC6YYCaf/
AxsDTykiehf/86ExINNJ//iarDq9KmbNbH/CAguWUkfpDcpCcGf4tkQ6HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkR7UXjb1loVT6DtDokgE0MlQcoMB8GA1UdIwQY
MBaAFPNUTpI9iDus5Ko/fvcAcq/jUR8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEt
MzhjNzU2YWE0YjUwLzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEtMzhjNzU2YWE0YjUw
LzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICHYjuQC
GX3VdZgcEBof0hR6plduAzkz+PpWCtXeCnRrV2+ScscJw7NDI4n4akgHtFnPTvGX
+eQQZSiyBUaPCnDI4DEEkN/+QNupq0IUAO2Y/DYwyjznzTIwxCKFq+8I+ewjElGB
+Kr9om6Re7Eyzi+Lhu4bhVx3GAJM2ZgrbFBm9L0ClKfhpv4KMDEwUvEQ7Deo6mpb
wXsTPEoYu4uC+lSBL8UfgT1El2FfoWp7buCb86WZSLz/WSmvc+LC4bs5a1JelUru
Kk1JxFEt6/hwVIrGfGfjDDwOhh/w/9CZL6CXxOIvscjAmApw1kJ1Qea0wrIxYiYa
O0hYkrLgtcBtIw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:56:29 2026 by rpki-client