Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: MzX5/oboPJbWCKTe3SpRtAaqUsdUCYF7/6CJBF9y49Y=
Subject key identifier: 07:4C:E9:7B:90:3E:47:15:04:BD:FC:BF:36:F3:93:6E:B5:DF:B2:FE
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 01A0D8048778F1FD22470090E9AAAA954D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 0580
Signing time: Fri 25 Sep 2026 10:02:50 +0000
Manifest this update: Fri 25 Sep 2026 10:02:50 +0000
Manifest next update: Sat 26 Sep 2026 10:02:50 +0000
Files and hashes: 1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: exqk5vVPTtFvs1/5WNt5Cp9xEh10g7T3TljQn4WY3fU=)
3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:87:78:f1:fd:22:47:00:90:e9:aa:aa:95:4d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Sep 25 10:02:50 2026 GMT
Not After : Sep 26 10:02:50 2026 GMT
Subject: CN=074ce97b903e471504bdfcbf36f3936eb5dfb2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:07:f8:dd:30:39:5f:ee:de:85:e0:9c:3e:
c3:44:1a:60:8e:93:78:ca:93:2b:4e:0f:8f:86:47:
88:94:50:ca:32:d2:cd:92:b6:16:a1:6a:e3:b6:04:
80:19:aa:6e:cf:4a:43:e4:50:13:8e:06:df:75:8a:
de:9b:63:48:20:91:39:6f:d4:2c:93:ea:fd:48:86:
07:1e:d7:75:3f:7e:bb:5f:c3:0f:8e:cf:4c:f6:47:
82:9a:29:02:74:b9:fb:34:88:fb:fd:ed:87:0a:ac:
73:85:6c:d5:92:55:da:ca:fa:e4:b2:28:60:04:63:
84:d9:1a:36:59:2c:9f:54:7c:fe:ce:35:11:ad:e8:
ff:f9:43:9b:6a:f1:79:2f:26:d3:c4:98:2a:fd:fc:
80:c4:c9:9c:6a:3f:da:9d:a7:21:4b:a2:30:5e:d5:
92:95:af:c6:40:6c:94:75:f2:48:19:d3:e5:b6:5a:
b1:1f:d1:97:1f:8b:60:c5:4b:78:2f:99:b8:f1:fd:
2f:61:68:65:2d:31:9a:bf:be:a6:82:4f:17:b1:6a:
09:50:99:12:76:c5:e8:74:1d:0a:26:65:32:7a:68:
77:a5:17:54:e5:57:ae:f1:83:86:2c:70:67:07:fb:
fe:4a:23:c3:61:16:67:90:f9:6c:ea:ab:57:30:1e:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:E9:7B:90:3E:47:15:04:BD:FC:BF:36:F3:93:6E:B5:DF:B2:FE
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f0:d7:13:67:dd:b9:8e:7e:50:ec:6a:91:ad:69:0c:3f:4b:
d9:b2:0f:81:be:b5:68:aa:88:7d:6b:59:e3:38:a6:0c:1c:27:
b5:1a:52:c3:70:bb:b3:86:06:b8:05:22:85:96:d1:a9:d9:37:
a1:ad:77:8e:76:75:d2:53:e4:4c:38:50:cc:88:bb:c4:31:a5:
2b:df:94:9e:b4:96:43:8d:24:7e:c8:dd:b1:d4:e3:da:0d:57:
03:33:b4:b9:69:32:ae:31:23:eb:41:e4:f3:cc:5d:ba:b9:f7:
53:17:b6:e8:d9:f6:e8:de:65:9f:db:1e:e6:2b:f5:2e:60:4f:
0e:27:48:97:0d:8f:35:2e:9a:8d:ac:4a:2b:01:4e:c9:5b:01:
65:a9:7c:e2:39:0f:8b:d3:2f:1e:3a:0d:84:19:1e:f6:84:ed:
2a:41:91:cd:fb:28:ac:ef:0f:ad:03:b6:f6:c2:f1:37:f8:c1:
a7:58:00:27:36:db:9b:a2:bf:bd:4e:85:9c:4d:9a:40:cb:1f:
77:7d:51:0f:fa:bf:c4:e0:d4:b0:3d:76:f5:80:98:72:68:a9:
49:18:59:72:4e:65:64:2c:9f:0f:fb:9c:2f:77:96:38:21:19:
1b:f3:da:34:f2:88:59:56:3f:f3:48:cb:a9:3b:92:bd:3b:dc:
75:41:1e:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBId48f0iRwCQ6aqqlU08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTRiMjJjNTU0MDUwOGQ5NjI5YTMxMWVmMWU4MzU0MzY1
N2M0ZWUwHhcNMjYwOTI1MTAwMjUwWhcNMjYwOTI2MTAwMjUwWjAzMTEwLwYDVQQD
EygwNzRjZTk3YjkwM2U0NzE1MDRiZGZjYmYzNmYzOTM2ZWI1ZGZiMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XEH+N0wOV/u3oXgnD7DRBpgjpN4
ypMrTg+PhkeIlFDKMtLNkrYWoWrjtgSAGapuz0pD5FATjgbfdYrem2NIIJE5b9Qs
k+r9SIYHHtd1P367X8MPjs9M9keCmikCdLn7NIj7/e2HCqxzhWzVklXayvrksihg
BGOE2Ro2WSyfVHz+zjURrej/+UObavF5LybTxJgq/fyAxMmcaj/anachS6IwXtWS
la/GQGyUdfJIGdPltlqxH9GXH4tgxUt4L5m48f0vYWhlLTGav76mgk8XsWoJUJkS
dsXodB0KJmUyemh3pRdU5Veu8YOGLHBnB/v+SiPDYRZnkPls6qtXMB44WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdM6XuQPkcVBL38vzbzk26137L+MB8GA1UdIwQY
MBaAFLdUsixVQFCNlimjEe8eg1Q2V8TuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUt
NTZlYzEzMjY5YTFjLzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUtNTZlYzEzMjY5YTFj
LzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfDXE2fd
uY5+UOxqka1pDD9L2bIPgb61aKqIfWtZ4zimDBwntRpSw3C7s4YGuAUihZbRqdk3
oa13jnZ10lPkTDhQzIi7xDGlK9+UnrSWQ40kfsjdsdTj2g1XAzO0uWkyrjEj60Hk
88xdurn3Uxe26Nn26N5ln9se5iv1LmBPDidIlw2PNS6ajaxKKwFOyVsBZal84jkP
i9MvHjoNhBke9oTtKkGRzfsorO8PrQO29sLxN/jBp1gAJzbbm6K/vU6FnE2aQMsf
d31RD/q/xODUsD129YCYcmipSRhZck5lZCyfD/ucL3eWOCEZG/PaNPKIWVY/80jL
qTuSvTvcdUEepw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:51:07 2026 by rpki-client