Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: /wJ/g2GrVk0XozPYTrnNuZbHji0sQPk1CclzWGtSiME=
Subject key identifier: 73:B3:7F:24:B9:CF:15:2A:C6:25:E8:DE:15:1C:F7:CD:CE:9A:CA:EB
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 01A0CD7F2BAF53E380A4D33A7512C3D8A805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 09:00:58 +0000
Manifest this update: Wed 23 Sep 2026 09:00:58 +0000
Manifest next update: Thu 24 Sep 2026 09:00:58 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: +yf125ujKutZKndeluH7ZBpDDCSukKcfkpSWScV3lOg=)
2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:2b:af:53:e3:80:a4:d3:3a:75:12:c3:d8:a8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Sep 23 09:00:58 2026 GMT
Not After : Sep 24 09:00:58 2026 GMT
Subject: CN=73b37f24b9cf152ac625e8de151cf7cdce9acaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:dd:27:72:04:c8:4a:bc:62:e4:1f:6d:b0:
fa:f6:dd:66:6c:63:40:4d:4b:07:08:ca:ec:d1:7e:
20:dc:a7:85:25:43:d0:3b:9e:1e:56:5b:c5:a4:cb:
59:b0:0f:6e:d7:ca:71:50:75:cf:0f:60:a9:f6:06:
3a:f9:c0:40:7b:6b:3e:ee:b8:ab:eb:f2:17:e1:9a:
2f:64:22:5c:60:0d:90:bb:6e:11:29:8e:9a:3d:04:
d8:18:4b:dc:1c:12:f3:57:eb:98:a2:fe:31:b2:4d:
b7:08:18:33:32:71:6e:0e:56:cb:db:d5:06:20:65:
cf:49:7a:b3:bd:40:54:70:60:fd:e5:c9:36:13:80:
ae:34:ae:09:a3:ca:b5:de:09:4b:18:ca:86:11:f3:
87:f8:63:bf:f0:05:bc:b1:28:f8:00:38:4e:6d:94:
fe:7b:9c:fb:e9:7c:3f:52:21:5b:db:fd:3e:bb:dd:
43:13:d0:70:fa:b9:37:5e:2b:af:54:c3:85:25:0a:
cb:4a:fc:de:e9:a0:d2:15:c4:74:cf:12:57:bb:b2:
43:74:7e:f7:15:d3:98:19:9b:e4:fa:6a:c6:70:b5:
20:70:87:d5:58:d3:17:4c:52:f1:49:cd:e5:c0:81:
d2:b8:e5:71:bc:18:28:a5:aa:f4:9d:93:79:4c:6a:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:7F:24:B9:CF:15:2A:C6:25:E8:DE:15:1C:F7:CD:CE:9A:CA:EB
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e8:3a:9f:5a:78:95:5b:d5:7c:81:4e:c1:f1:4f:b5:6a:bb:
4d:6d:1e:62:8b:dd:ef:1a:b4:40:e8:f6:6b:b8:7d:6c:31:1f:
42:ef:5c:d9:9d:68:27:83:c0:e1:a8:08:30:4f:93:fd:60:f9:
98:68:e3:22:e4:d2:71:17:52:50:65:49:3d:bb:47:4d:b6:e8:
3a:38:c6:fe:ee:43:66:50:cf:31:c9:44:de:83:eb:fa:e1:b0:
d0:59:87:59:98:24:3b:aa:26:7c:f9:79:7e:2c:c7:e5:5a:92:
7e:aa:cc:c3:d2:a3:cf:17:83:06:d1:cc:e0:80:04:3b:ed:01:
a5:d5:20:58:b7:57:96:b5:72:bc:0b:91:ec:6a:12:42:a7:8d:
1b:4b:04:c1:56:73:03:c0:01:c0:a3:5d:25:c7:1d:16:af:ba:
05:db:98:48:eb:51:bf:d2:05:0c:70:aa:d6:ab:ca:b1:64:8b:
92:92:cf:11:a6:0a:01:04:60:9f:f3:32:10:61:68:70:c9:5f:
d4:1a:e5:08:ad:43:f1:ce:28:44:47:c8:62:d3:4f:7f:6b:68:
d6:f1:ef:55:50:cb:91:c7:ae:c3:b1:93:fc:75:71:e4:b9:17:
76:24:78:c2:0c:45:c1:b0:d5:40:67:be:3c:b8:cd:a8:42:e6:
34:eb:7f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfyuvU+OApNM6dRLD2KgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTQwYjUxOGQ3NWZiZWZkNjE2YmZkOTRjZjA1ZmQyNWJh
NDg4YjYwHhcNMjYwOTIzMDkwMDU4WhcNMjYwOTI0MDkwMDU4WjAzMTEwLwYDVQQD
Eyg3M2IzN2YyNGI5Y2YxNTJhYzYyNWU4ZGUxNTFjZjdjZGNlOWFjYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU7dJ3IEyEq8YuQfbbD69t1mbGNA
TUsHCMrs0X4g3KeFJUPQO54eVlvFpMtZsA9u18pxUHXPD2Cp9gY6+cBAe2s+7rir
6/IX4ZovZCJcYA2Qu24RKY6aPQTYGEvcHBLzV+uYov4xsk23CBgzMnFuDlbL29UG
IGXPSXqzvUBUcGD95ck2E4CuNK4Jo8q13glLGMqGEfOH+GO/8AW8sSj4ADhObZT+
e5z76Xw/UiFb2/0+u91DE9Bw+rk3XiuvVMOFJQrLSvze6aDSFcR0zxJXu7JDdH73
FdOYGZvk+mrGcLUgcIfVWNMXTFLxSc3lwIHSuOVxvBgopar0nZN5TGpiSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOzfyS5zxUqxiXo3hUc983OmsrrMB8GA1UdIwQY
MBaAFNNUC1GNdfvv1ha/2UzwX9JbpIi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMt
YjMwMTYyZTNjY2MwLzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMtYjMwMTYyZTNjY2Mw
LzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkug6n1p4
lVvVfIFOwfFPtWq7TW0eYovd7xq0QOj2a7h9bDEfQu9c2Z1oJ4PA4agIME+T/WD5
mGjjIuTScRdSUGVJPbtHTbboOjjG/u5DZlDPMclE3oPr+uGw0FmHWZgkO6omfPl5
fizH5VqSfqrMw9KjzxeDBtHM4IAEO+0BpdUgWLdXlrVyvAuR7GoSQqeNG0sEwVZz
A8ABwKNdJccdFq+6BduYSOtRv9IFDHCq1qvKsWSLkpLPEaYKAQRgn/MyEGFocMlf
1BrlCK1D8c4oREfIYtNPf2to1vHvVVDLkceuw7GT/HVx5LkXdiR4wgxFwbDVQGe+
PLjNqELmNOt/9w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:22:53 2026 by rpki-client