Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: eT0Tajd+YTnLCcauoAmDTM8FVLkZcd8Jjzxpqy0mRVI=
Subject key identifier: A4:75:15:07:0D:97:C4:5D:7C:23:81:BF:6E:19:0E:F0:03:C1:0F:46
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01A0D45D148931861CA71D65EAD155122301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1A00
Signing time: Thu 24 Sep 2026 17:01:04 +0000
Manifest this update: Thu 24 Sep 2026 17:01:04 +0000
Manifest next update: Fri 25 Sep 2026 17:01:04 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: awBdjSZ3V1xkROMYL7XYUoVzBRqEtFal9QQ7NczWimo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:14:89:31:86:1c:a7:1d:65:ea:d1:55:12:23:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Sep 24 17:01:04 2026 GMT
Not After : Sep 25 17:01:04 2026 GMT
Subject: CN=a47515070d97c45d7c2381bf6e190ef003c10f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:62:e7:7a:f7:34:82:15:ad:fd:a9:45:db:
32:9b:7d:e4:df:db:21:37:c9:b6:50:69:17:c4:a4:
3d:a4:85:6b:d5:85:6c:69:d1:79:81:ed:39:83:bb:
fc:34:61:c3:ae:b3:87:ae:3a:a0:e5:8a:fe:22:62:
a5:a2:db:3f:9e:77:d4:ef:fa:68:5e:f9:46:f1:37:
60:70:15:9c:a7:8d:be:fe:75:14:60:10:cd:bc:5d:
56:ba:70:3d:bb:cb:45:fe:e6:0f:fe:bd:ac:a8:06:
10:18:2a:e1:93:ac:a7:37:29:97:00:0e:2c:a7:4d:
48:7f:e0:c8:61:d9:39:bb:ee:bf:a5:c3:65:d4:77:
3f:a0:cb:66:38:94:03:b8:e1:74:ae:7e:0b:53:c5:
b7:dc:82:b3:cc:86:a7:a1:d9:82:e3:ce:4d:3f:5b:
12:27:16:18:2d:23:46:72:d1:11:cb:ae:74:40:8b:
e6:d9:26:c5:a5:c6:0e:79:67:68:f6:50:54:f5:a4:
b1:ec:d4:d7:ef:62:fe:8f:d9:aa:7a:f6:e3:d7:46:
3f:f3:b7:5c:d8:8e:6a:a4:6e:90:96:3d:19:aa:48:
34:cd:05:54:fa:0e:ec:48:74:7c:d8:90:51:81:a2:
6c:f4:ec:5c:ce:47:29:c2:98:cc:ed:96:a5:78:75:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:75:15:07:0D:97:C4:5D:7C:23:81:BF:6E:19:0E:F0:03:C1:0F:46
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:97:fb:0b:e9:3b:25:05:e8:28:07:7f:e3:36:42:7f:b9:52:
f9:5c:d7:3e:e9:c2:63:9d:82:58:de:60:46:d6:51:17:de:be:
43:be:a8:e2:11:5f:61:96:c4:06:31:1e:c4:9e:2e:72:c8:6e:
b2:0a:1c:4d:9a:65:8e:04:cf:8c:bd:e5:be:37:72:41:39:0e:
3c:35:3d:8e:c5:dd:86:97:1f:86:71:89:27:24:9f:f9:b8:43:
f2:4b:50:4a:c0:55:7e:20:89:d6:55:36:dd:40:05:6f:f4:da:
0b:a6:c7:7e:27:1c:23:b0:1f:f4:a5:66:63:1d:42:0c:cd:9f:
39:f6:ab:24:a0:27:b4:c4:6a:af:e8:72:ec:e2:88:8e:75:83:
3f:08:49:26:e4:c5:26:45:37:fd:d1:6c:7f:97:6c:d5:94:4b:
44:30:0f:e8:dc:a4:e4:42:2d:55:d0:d9:b2:2b:3a:d8:ce:eb:
53:fe:78:56:b7:12:b4:69:ac:1b:71:0a:59:22:64:8c:83:1d:
15:65:b9:3e:b2:ea:06:2d:52:58:7a:08:fa:6d:84:ab:c8:a4:
58:6f:11:58:a7:83:d3:4e:68:31:50:65:68:81:16:44:71:54:
ba:06:9f:cf:ec:79:eb:38:2d:45:73:4e:dd:f9:74:6c:4a:8e:
3d:e0:f0:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXRSJMYYcpx1l6tFVEiMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl
YjEzNDEwHhcNMjYwOTI0MTcwMTA0WhcNMjYwOTI1MTcwMTA0WjAzMTEwLwYDVQQD
EyhhNDc1MTUwNzBkOTdjNDVkN2MyMzgxYmY2ZTE5MGVmMDAzYzEwZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod1i53r3NIIVrf2pRdsym33k39sh
N8m2UGkXxKQ9pIVr1YVsadF5ge05g7v8NGHDrrOHrjqg5Yr+ImKlots/nnfU7/po
XvlG8TdgcBWcp42+/nUUYBDNvF1WunA9u8tF/uYP/r2sqAYQGCrhk6ynNymXAA4s
p01If+DIYdk5u+6/pcNl1Hc/oMtmOJQDuOF0rn4LU8W33IKzzIanodmC485NP1sS
JxYYLSNGctERy650QIvm2SbFpcYOeWdo9lBU9aSx7NTX72L+j9mqevbj10Y/87dc
2I5qpG6Qlj0Zqkg0zQVU+g7sSHR82JBRgaJs9OxczkcpwpjM7ZaleHUb+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKR1FQcNl8RdfCOBv24ZDvADwQ9GMB8GA1UdIwQY
MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt
NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi
LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppf7C+k7
JQXoKAd/4zZCf7lS+VzXPunCY52CWN5gRtZRF96+Q76o4hFfYZbEBjEexJ4ucshu
sgocTZpljgTPjL3lvjdyQTkOPDU9jsXdhpcfhnGJJySf+bhD8ktQSsBVfiCJ1lU2
3UAFb/TaC6bHficcI7Af9KVmYx1CDM2fOfarJKAntMRqr+hy7OKIjnWDPwhJJuTF
JkU3/dFsf5ds1ZRLRDAP6Nyk5EItVdDZsis62M7rU/54VrcStGmsG3EKWSJkjIMd
FWW5PrLqBi1SWHoI+m2Eq8ikWG8RWKeD005oMVBlaIEWRHFUugafz+x56zgtRXNO
3fl0bEqOPeDwCQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:36:07 2026 by rpki-client