Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: 0HPT5SFfNQfiraz6UxVeDv8PmO5g2I3rR+nxpAf7L80=
Subject key identifier: 46:FC:EB:6F:41:CA:11:B5:B7:94:0B:E4:8E:4B:51:08:D3:00:52:91
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 01A0EBC0B7ED26D80C3B8808540AD700B22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1A7F
Signing time: Tue 29 Sep 2026 06:01:10 +0000
Manifest this update: Tue 29 Sep 2026 06:01:10 +0000
Manifest next update: Wed 30 Sep 2026 06:01:10 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: /K5Pfj4TlGsP09gSGPzp9lqgrwKBgaVOgUi6av9MU1g=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:b7:ed:26:d8:0c:3b:88:08:54:0a:d7:00:b2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Sep 29 06:01:10 2026 GMT
Not After : Sep 30 06:01:10 2026 GMT
Subject: CN=46fceb6f41ca11b5b7940be48e4b5108d3005291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:83:8c:14:25:51:71:39:ce:90:64:76:d1:
66:71:90:42:0e:0a:03:8b:c7:ab:df:b0:58:17:c4:
57:15:14:c0:aa:b4:46:6d:64:15:37:0c:b6:89:02:
2e:d5:32:8b:7c:c4:df:64:18:1c:4e:86:83:33:03:
54:47:97:a6:cc:68:30:76:5f:1e:a0:61:34:3f:66:
92:7d:de:85:99:7b:70:c8:ac:16:af:ef:0a:3a:b5:
73:a7:5e:ba:90:fb:b2:05:96:3e:6e:6c:8b:40:83:
b9:d7:77:bf:15:a4:aa:6e:dc:7e:f9:43:b4:d5:ea:
de:c2:8d:ec:af:1c:a0:22:39:1e:99:1c:a9:45:b1:
ad:11:2f:45:44:f6:1b:81:19:be:77:19:bb:b4:9b:
fb:de:5a:40:1c:46:b5:9d:ff:fa:43:42:64:c3:84:
82:81:b3:98:97:41:d0:e5:ba:82:12:dc:eb:26:9a:
cd:17:26:6f:56:c8:8a:08:1e:bd:90:f5:c8:b4:ab:
34:c6:cc:1b:ac:07:33:94:6b:7f:0c:3e:f5:b1:5a:
ac:60:84:b4:f1:19:05:71:6b:a4:ac:a4:e0:06:cf:
e3:69:de:77:1a:b9:10:48:38:cb:ec:15:08:77:10:
9c:88:28:c4:be:7b:ba:f9:0a:80:8e:5c:a1:59:03:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FC:EB:6F:41:CA:11:B5:B7:94:0B:E4:8E:4B:51:08:D3:00:52:91
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ff:54:5f:69:38:94:32:34:2a:20:b7:0b:55:22:7a:8f:fa:
ee:ef:07:ac:f7:60:e5:81:0f:ee:32:00:99:e4:bc:54:bf:0a:
50:f3:4c:cf:53:9e:9d:3b:8d:79:b5:0f:8e:e5:bb:b1:c8:ac:
7e:91:6c:de:ea:d1:08:5e:b3:7b:df:58:fd:2f:ff:f9:bc:c6:
d7:15:fc:f3:ea:97:05:e6:0a:2d:f7:61:61:b0:b8:78:f8:17:
cc:22:7e:c9:6b:53:9d:50:ca:2d:9c:8f:d4:54:e3:5b:4a:99:
f5:a3:8e:3c:b4:ce:5e:2d:e6:b7:50:da:e5:77:6f:eb:69:ad:
a4:d1:dd:13:46:60:fe:28:ef:c8:fc:86:a7:22:aa:d5:bb:2f:
a3:92:83:7b:99:d1:f1:3b:da:ca:29:81:87:8e:00:3c:6e:4b:
3f:35:53:f5:bc:cc:5f:a0:ab:19:22:58:0c:0c:88:b2:19:e0:
25:44:59:9f:cd:ec:5c:1a:4c:a5:c3:1c:29:8f:51:15:71:3e:
80:4a:c3:03:86:51:33:be:2f:5d:16:e2:9b:7c:ea:cd:39:d0:
d9:70:ad:b3:af:99:cb:89:f2:5f:a5:03:47:8d:f7:1b:db:92:
bc:c2:85:ba:b2:4b:44:31:27:0c:d5:c2:db:b8:9a:f8:42:e3:
85:4c:c3:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrwLftJtgMO4gIVArXALIrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTQ0MzZlZDMyNDJiZGRiOTZmZGYxMzlhMTI1M2RlYjk4
NmRmZDAwHhcNMjYwOTI5MDYwMTEwWhcNMjYwOTMwMDYwMTEwWjAzMTEwLwYDVQQD
Eyg0NmZjZWI2ZjQxY2ExMWI1Yjc5NDBiZTQ4ZTRiNTEwOGQzMDA1MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDyDjBQlUXE5zpBkdtFmcZBCDgoD
i8er37BYF8RXFRTAqrRGbWQVNwy2iQIu1TKLfMTfZBgcToaDMwNUR5emzGgwdl8e
oGE0P2aSfd6FmXtwyKwWr+8KOrVzp166kPuyBZY+bmyLQIO513e/FaSqbtx++UO0
1erewo3srxygIjkemRypRbGtES9FRPYbgRm+dxm7tJv73lpAHEa1nf/6Q0Jkw4SC
gbOYl0HQ5bqCEtzrJprNFyZvVsiKCB69kPXItKs0xswbrAczlGt/DD71sVqsYIS0
8RkFcWukrKTgBs/jad53GrkQSDjL7BUIdxCciCjEvnu6+QqAjlyhWQPR0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEb8629ByhG1t5QL5I5LUQjTAFKRMB8GA1UdIwQY
MBaAFNZUQ27TJCvduW/fE5oSU965ht/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUt
YTE0MjA4N2NlODkwLzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUtYTE0MjA4N2NlODkw
LzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/9UX2k4
lDI0KiC3C1Uieo/67u8HrPdg5YEP7jIAmeS8VL8KUPNMz1OenTuNebUPjuW7scis
fpFs3urRCF6ze99Y/S//+bzG1xX88+qXBeYKLfdhYbC4ePgXzCJ+yWtTnVDKLZyP
1FTjW0qZ9aOOPLTOXi3mt1Da5Xdv62mtpNHdE0Zg/ijvyPyGpyKq1bsvo5KDe5nR
8TvayimBh44APG5LPzVT9bzMX6CrGSJYDAyIshngJURZn83sXBpMpcMcKY9RFXE+
gErDA4ZRM74vXRbim3zqzTnQ2XCts6+Zy4nyX6UDR433G9uSvMKFurJLRDEnDNXC
27ia+ELjhUzDSQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:22:50 2026 by rpki-client