Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: AtEMcAwrezUhD3RIwDlKi5Q9l0hOVr/ZwslniAUHeDo=
Subject key identifier: F1:A9:CC:40:A6:8E:B5:46:11:32:5A:B6:C9:8E:7D:3C:0D:D2:8F:A2
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 01A0D538CE19DB9B8141F7BC1C116CCD55F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 1A45
Signing time: Thu 24 Sep 2026 21:01:04 +0000
Manifest this update: Thu 24 Sep 2026 21:01:04 +0000
Manifest next update: Fri 25 Sep 2026 21:01:04 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: FMl0B7dKMdkSR2nSQv4rAEEpSOd/CgWPofCIF5KemOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:ce:19:db:9b:81:41:f7:bc:1c:11:6c:cd:55:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Sep 24 21:01:04 2026 GMT
Not After : Sep 25 21:01:04 2026 GMT
Subject: CN=f1a9cc40a68eb54611325ab6c98e7d3c0dd28fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:1f:f2:f6:a3:e2:e5:7e:e1:c8:29:08:7a:
b5:e0:2a:49:e8:24:35:cd:ac:e8:2e:0c:9b:43:ce:
87:74:b1:12:8d:2a:04:6c:12:84:b3:0f:ff:95:f4:
8e:aa:96:26:f0:e3:c7:d7:0d:ed:80:63:1e:74:92:
a1:c6:be:29:1e:a3:9e:a2:fd:cd:aa:40:e9:cd:da:
40:83:62:b3:a7:ad:86:e2:4a:6f:85:b3:cb:a6:2c:
79:0c:31:12:bb:85:d5:5c:81:4c:d1:6e:39:14:4a:
71:00:82:e7:f4:63:05:e6:07:52:2c:8b:e1:56:35:
05:fd:ef:39:52:68:b5:b7:6c:14:31:24:12:c9:3d:
0d:2c:8b:f9:6b:c1:5c:f9:64:b1:79:df:ed:63:10:
4f:49:5b:f5:c2:3e:40:53:a7:35:0c:94:7a:30:7f:
a2:1d:58:a9:c9:14:d7:e1:25:77:4e:cb:e7:4c:e1:
0c:55:a6:96:ea:41:9a:60:14:5c:f6:80:2b:56:48:
d7:60:44:78:ba:ad:d1:be:4d:81:d8:17:a0:1b:97:
40:46:18:38:74:60:f9:a9:2b:4a:3f:05:06:c7:b6:
d5:6a:98:5c:31:2b:6d:43:7a:df:54:09:90:57:76:
e2:8d:bf:ff:95:ae:ab:0e:81:37:4f:f5:04:32:26:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:CC:40:A6:8E:B5:46:11:32:5A:B6:C9:8E:7D:3C:0D:D2:8F:A2
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:12:03:bd:65:c4:0b:90:d7:33:1e:c8:0f:af:fd:99:ed:
13:5f:d0:a0:12:74:8c:8f:03:0c:28:8c:1f:16:7f:1b:dc:a7:
d0:86:c4:e9:8f:08:3e:d0:73:8d:c1:ef:50:4b:ed:d8:ec:4f:
b7:d5:f7:38:22:e3:a9:31:60:8d:2e:ec:e2:b5:dc:3b:35:84:
ac:4e:23:93:8d:01:26:0d:bf:9d:55:f4:4a:ed:eb:32:55:45:
fd:de:b5:37:cf:f7:ae:24:09:22:18:44:00:a2:b8:24:86:8e:
a2:65:85:8d:3a:b3:ec:fd:96:3b:bf:7f:62:57:68:32:19:88:
22:52:d1:71:6d:87:09:e3:c5:d5:21:c8:6c:a5:e6:94:c8:8a:
d1:f6:3e:3c:79:9f:f4:a6:49:ef:cf:dd:7e:7d:33:e3:4e:3a:
af:d4:e0:97:ab:e9:f4:2b:06:39:83:2d:af:ba:63:a1:c6:89:
26:3d:15:b6:dd:99:22:ae:c2:b7:9b:a2:18:5e:3a:f4:51:01:
41:59:d3:a0:00:70:b3:95:9a:75:a8:db:1a:b2:21:f1:52:b5:
bb:71:37:ed:aa:da:4d:a5:09:57:3c:50:da:46:c5:de:2d:6d:
55:9c:1a:b9:46:aa:0a:97:42:a2:fd:0b:a1:5d:29:d2:39:1b:
cc:1a:45:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVOM4Z25uBQfe8HBFszVX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTM5ZmYxMjkzYjdlMjI3NzlmYzU1YjRjODNmMTNlNTJl
OTQ0MjgwHhcNMjYwOTI0MjEwMTA0WhcNMjYwOTI1MjEwMTA0WjAzMTEwLwYDVQQD
EyhmMWE5Y2M0MGE2OGViNTQ2MTEzMjVhYjZjOThlN2QzYzBkZDI4ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSkf8vaj4uV+4cgpCHq14CpJ6CQ1
zazoLgybQ86HdLESjSoEbBKEsw//lfSOqpYm8OPH1w3tgGMedJKhxr4pHqOeov3N
qkDpzdpAg2Kzp62G4kpvhbPLpix5DDESu4XVXIFM0W45FEpxAILn9GMF5gdSLIvh
VjUF/e85Umi1t2wUMSQSyT0NLIv5a8Fc+WSxed/tYxBPSVv1wj5AU6c1DJR6MH+i
HVipyRTX4SV3TsvnTOEMVaaW6kGaYBRc9oArVkjXYER4uq3Rvk2B2BegG5dARhg4
dGD5qStKPwUGx7bVaphcMSttQ3rfVAmQV3bijb//la6rDoE3T/UEMiaMQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGpzECmjrVGETJatsmOfTwN0o+iMB8GA1UdIwQY
MBaAFImTn/EpO34id5/FW0yD8T5S6UQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYt
MGU2ODAwMGIzNTM3LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYtMGU2ODAwMGIzNTM3
LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblgSA71l
xAuQ1zMeyA+v/ZntE1/QoBJ0jI8DDCiMHxZ/G9yn0IbE6Y8IPtBzjcHvUEvt2OxP
t9X3OCLjqTFgjS7s4rXcOzWErE4jk40BJg2/nVX0Su3rMlVF/d61N8/3riQJIhhE
AKK4JIaOomWFjTqz7P2WO79/YldoMhmIIlLRcW2HCePF1SHIbKXmlMiK0fY+PHmf
9KZJ78/dfn0z4046r9Tgl6vp9CsGOYMtr7pjocaJJj0Vtt2ZIq7Ct5uiGF469FEB
QVnToABws5WadajbGrIh8VK1u3E37araTaUJVzxQ2kbF3i1tVZwauUaqCpdCov0L
oV0p0jkbzBpFpw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:26:39 2026 by rpki-client