Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File: 1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier: N6oq9BBP01h9uBSZkt91M0klfJeuyLoso/1ApNHYNmk=
Subject key identifier: A8:C4:BD:DA:56:42:55:A6:79:68:D8:DC:13:79:85:99:9C:82:A2:D2
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer: /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial: 01A1DB0182EFEAB5759DB9B1B4AAD4CC8E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number: 1AFF
Signing time: Sat 14 Nov 2026 17:01:11 +0000
Manifest this update: Sat 14 Nov 2026 17:01:11 +0000
Manifest next update: Sun 15 Nov 2026 17:01:11 +0000
Files and hashes: 1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: 7g8aWGcjaCjeeikA36DqkquE1la3w3gC9CJ8/+rtri8=)
2: otcWIKtbjTrCyo_84vs3wowbaF4.roa (hash: 9VlMOAnXc/ATSpTaKuPtGHL4kHOHZKRnHkwF61ZvPSY=)
3: v_SLn6w6l2mgjrQ3LaZ3RbLwH3w.roa (hash: iLCA29fFNiihWmOcKz9zvu1/0ED29J1vmWFbLXrkxSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:82:ef:ea:b5:75:9d:b9:b1:b4:aa:d4:cc:8e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
Validity
Not Before: Nov 14 17:01:11 2026 GMT
Not After : Nov 15 17:01:11 2026 GMT
Subject: CN=a8c4bdda564255a67968d8dc137985999c82a2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:3f:db:06:34:9b:02:6e:78:a3:2d:04:0d:
ca:e9:97:aa:55:a4:c1:4e:ce:c7:61:32:58:65:02:
20:11:fd:bd:57:73:ba:6e:02:a8:a1:aa:3c:2d:e9:
3e:51:ea:6c:34:60:fe:de:8e:3b:b8:ca:ca:6e:ed:
ee:fb:6d:03:c1:d5:a6:69:e5:14:86:f9:3c:47:c4:
97:9e:7b:d5:13:ac:6c:fa:0a:f7:7b:23:4e:1a:f0:
33:90:f8:a6:94:f1:93:e3:dd:85:28:66:dc:81:5d:
df:3f:8d:58:83:c6:95:b7:f7:4c:56:80:02:ff:b5:
19:9d:35:87:13:0b:77:32:03:91:fc:c2:2d:ce:d3:
68:11:28:ef:8b:99:3f:db:90:48:95:6a:fa:7e:9f:
d5:7b:63:96:31:ae:9b:01:fe:0a:85:07:7e:88:0e:
28:aa:6e:af:8b:af:42:be:2e:a8:09:4e:f1:79:c0:
cf:c0:61:1e:97:cb:22:5b:59:3d:53:82:e2:f5:6e:
34:68:34:4c:9b:a7:a2:a1:9c:81:b6:4e:b9:6a:24:
06:46:6d:4f:01:fc:84:d2:b8:93:64:1e:82:f3:30:
0a:de:fc:0f:e0:53:b8:84:22:06:d8:54:39:89:cf:
fc:29:e0:d8:53:e8:8c:b3:0c:49:f5:cc:e6:19:00:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C4:BD:DA:56:42:55:A6:79:68:D8:DC:13:79:85:99:9C:82:A2:D2
X509v3 Authority Key Identifier:
keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:57:cf:4e:b6:e8:3f:d0:b1:d3:92:f2:d3:fd:94:2e:14:0e:
2b:db:a0:84:ac:54:f6:29:d7:90:86:66:84:e2:b1:80:5e:73:
f7:db:52:0a:d8:a2:20:58:9c:d7:2f:ff:88:92:9e:c4:db:4d:
9a:b8:ef:10:62:7e:fc:42:22:1f:fa:40:dc:fc:29:b9:14:77:
a8:c6:45:2b:37:ab:4d:ae:97:34:3b:f0:ec:6d:c2:5c:63:41:
c1:c7:17:8a:d6:a6:5b:f0:65:cd:fb:b5:0c:b0:83:76:cf:0c:
5e:4a:e2:45:42:8d:87:34:b2:da:60:75:3b:fe:3b:07:bc:08:
48:2c:7d:07:52:8a:d2:1c:a3:c0:bc:00:cc:1c:26:40:f1:87:
66:50:fa:7b:0a:60:36:41:06:33:56:8c:6b:5a:a1:d7:26:0c:
d8:98:18:66:f1:f4:a4:ec:57:18:87:69:b8:49:cb:38:7d:d4:
cf:ac:1f:6c:c5:1f:21:a3:53:3f:2e:03:62:f6:4c:ba:4d:2c:
ee:83:c4:05:c1:76:a3:34:5d:7e:8b:8e:aa:b4:ea:ec:c7:4f:
b5:64:aa:be:bf:ca:4a:f3:a1:ba:67:e5:ed:e0:b1:26:5b:9f:
0e:fc:79:f3:f1:9f:f5:de:3b:77:80:e3:7a:d7:df:35:9d:14:
f7:02:22:12
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHbAYLv6rV1nbmxtKrUzI4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTAzYzA3NWE2OTA1NTZiZDQ2MjEyMmIyNDY5OWUxYjZi
MTkyNzgwHhcNMjYxMTE0MTcwMTExWhcNMjYxMTE1MTcwMTExWjAzMTEwLwYDVQQD
EyhhOGM0YmRkYTU2NDI1NWE2Nzk2OGQ4ZGMxMzc5ODU5OTljODJhMmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkU/2wY0mwJueKMtBA3K6ZeqVaTB
Ts7HYTJYZQIgEf29V3O6bgKooao8Lek+UepsNGD+3o47uMrKbu3u+20DwdWmaeUU
hvk8R8SXnnvVE6xs+gr3eyNOGvAzkPimlPGT492FKGbcgV3fP41Yg8aVt/dMVoAC
/7UZnTWHEwt3MgOR/MItztNoESjvi5k/25BIlWr6fp/Ve2OWMa6bAf4KhQd+iA4o
qm6vi69Cvi6oCU7xecDPwGEel8siW1k9U4Li9W40aDRMm6eioZyBtk65aiQGRm1P
AfyE0riTZB6C8zAK3vwP4FO4hCIG2FQ5ic/8KeDYU+iMswxJ9czmGQDPQwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKjEvdpWQlWmeWjY3BN5hZmcgqLSMB8GA1UdIwQY
MBaAFPlQPAdaaQVWvUYhIrJGmeG2sZJ4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WQThCMXBwQlZhOVJpRWlza2FaNGJheGtuZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNGZhNGI0LTdjOTYtNGViNy05OTQw
LTNmMjMxNmI1NTNmNS8xLzEtVkE4QjFwcEJWYTlSaUVpc2thWjRiYXhrbmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc1LzRmYTRiNC03Yzk2LTRlYjctOTk0MC0zZjIzMTZiNTUz
ZjUvMS8xLVZBOEIxcHBCVmE5UmlFaXNrYVo0YmF4a25nLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVfP
TrboP9Cx05Ly0/2ULhQOK9ughKxU9inXkIZmhOKxgF5z99tSCtiiIFic1y//iJKe
xNtNmrjvEGJ+/EIiH/pA3PwpuRR3qMZFKzerTa6XNDvw7G3CXGNBwccXitamW/Bl
zfu1DLCDds8MXkriRUKNhzSy2mB1O/47B7wISCx9B1KK0hyjwLwAzBwmQPGHZlD6
ewpgNkEGM1aMa1qh1yYM2JgYZvH0pOxXGIdpuEnLOH3Uz6wfbMUfIaNTPy4DYvZM
uk0s7oPEBcF2ozRdfouOqrTq7MdPtWSqvr/KSvOhumfl7eCxJlufDvx58/Gf9d47
d4DjetffNZ0U9wIiEg==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:31 2026 by rpki-client