Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: QF9ZTra9e4ZN5k43j8Cy6c5SvSnCO74IVo8k8iQaVPw=
Subject key identifier: 49:D6:CA:6E:BA:75:B7:B5:66:E2:52:26:F4:87:BB:73:BE:2F:3A:C5
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 01A0D3F0A31F980D5E687348F9922F46CF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 1111
Signing time: Thu 24 Sep 2026 15:02:37 +0000
Manifest this update: Thu 24 Sep 2026 15:02:37 +0000
Manifest next update: Fri 25 Sep 2026 15:02:37 +0000
Files and hashes: 1: 2gtdnmtxdp159yoykWR7atnRXug.roa (hash: QojryZo1S1FIxC+Q/WaC+2xdtTehaO8dflArcrZGQ6E=)
2: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: NLdhBpjUG/iTI/IC2EKCYLVUba1/iHLhHsr7iji1syE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:a3:1f:98:0d:5e:68:73:48:f9:92:2f:46:cf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Sep 24 15:02:37 2026 GMT
Not After : Sep 25 15:02:37 2026 GMT
Subject: CN=49d6ca6eba75b7b566e25226f487bb73be2f3ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:74:4b:c5:02:31:22:14:a7:a8:1c:8d:44:
22:ca:5c:f8:a6:f9:0c:83:4a:37:64:f4:30:ab:ca:
a7:71:30:3a:b2:9b:7b:0a:cc:ea:bf:14:17:23:7f:
6b:90:d2:03:ef:0e:2a:e3:9a:f7:7d:86:38:e5:fb:
5a:5e:2f:3a:e6:d2:f7:9f:ff:71:c4:19:83:07:d9:
64:3e:fb:ab:89:0f:e6:09:32:91:45:c3:8a:03:ca:
60:dc:e7:ea:2a:3c:df:e4:e3:16:0a:94:0f:0b:ff:
e7:bf:6e:3d:cf:1b:41:d8:9f:9a:f6:af:c7:8c:af:
25:79:49:f8:cc:c4:eb:8e:60:bb:27:86:58:a2:04:
73:34:54:49:d8:5a:d4:19:19:69:c8:14:58:dd:1e:
97:de:0c:ca:5f:43:fe:54:1d:b9:30:7b:80:91:37:
df:4d:e0:da:ab:e8:dc:c0:99:26:9c:84:4f:1e:d3:
58:1e:fe:a0:24:75:fd:4b:c4:35:31:2b:2d:2e:98:
83:cc:ef:a0:38:ad:30:b7:82:d2:9f:b7:ff:10:9e:
08:39:33:5a:73:9d:2f:24:77:73:0b:9e:3a:1e:44:
b4:ad:1c:c0:d2:bd:a8:a7:1e:ad:ae:0a:c7:89:94:
c8:d1:45:ee:75:b5:6e:13:7c:88:85:93:4a:36:94:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D6:CA:6E:BA:75:B7:B5:66:E2:52:26:F4:87:BB:73:BE:2F:3A:C5
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:8f:e9:0f:c2:34:7f:14:66:6e:22:74:aa:07:d9:5e:60:
e8:4c:56:9d:47:cb:38:64:67:13:01:2e:bb:14:cf:ad:81:4e:
96:80:be:f4:a3:88:d0:a1:1c:f0:06:7a:29:73:ea:36:ed:18:
72:ba:95:d1:cb:9e:cf:36:8f:8a:08:3a:e9:c5:ce:42:ca:b3:
8d:6c:2f:d0:47:aa:bc:55:a1:3b:b0:a9:c4:69:4c:20:5a:d9:
81:7c:06:17:9a:23:a4:90:91:e3:32:cf:6b:43:0d:29:29:05:
57:0c:8f:ba:bf:7d:f1:ff:60:bb:8a:51:f8:7b:91:d0:49:f1:
6f:ae:2c:6b:7f:3b:eb:de:48:40:35:98:5a:bf:b6:0a:02:08:
a0:5a:ba:0d:a1:9e:dd:20:9e:6d:83:15:33:5f:0e:d0:c0:c9:
a4:ec:42:77:38:94:bf:06:01:bd:c4:80:38:16:76:d3:dc:d8:
9d:ea:4d:2f:84:bf:0d:ee:fd:b0:1b:a0:42:d9:6b:7e:bf:9e:
40:c7:1c:c2:aa:37:ec:86:0c:88:42:50:11:c8:72:e8:49:7b:
3c:c9:31:53:df:29:c6:a5:c5:e8:d4:4b:9f:2d:7c:bd:1f:c7:
85:ae:2f:26:29:b1:ae:0c:d5:88:b6:05:81:a1:6f:82:cb:c9:
ce:86:c9:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8KMfmA1eaHNI+ZIvRs9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTZjZGQ1YTQ5Y2U2YzQyYTlhMzVmYTc3Yjk3Mjc4MTk2
ODg4OTYwHhcNMjYwOTI0MTUwMjM3WhcNMjYwOTI1MTUwMjM3WjAzMTEwLwYDVQQD
Eyg0OWQ2Y2E2ZWJhNzViN2I1NjZlMjUyMjZmNDg3YmI3M2JlMmYzYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyh0S8UCMSIUp6gcjUQiylz4pvkM
g0o3ZPQwq8qncTA6spt7CszqvxQXI39rkNID7w4q45r3fYY45ftaXi865tL3n/9x
xBmDB9lkPvuriQ/mCTKRRcOKA8pg3OfqKjzf5OMWCpQPC//nv249zxtB2J+a9q/H
jK8leUn4zMTrjmC7J4ZYogRzNFRJ2FrUGRlpyBRY3R6X3gzKX0P+VB25MHuAkTff
TeDaq+jcwJkmnIRPHtNYHv6gJHX9S8Q1MSstLpiDzO+gOK0wt4LSn7f/EJ4IOTNa
c50vJHdzC546HkS0rRzA0r2opx6trgrHiZTI0UXudbVuE3yIhZNKNpTGAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnWym66dbe1ZuJSJvSHu3O+LzrFMB8GA1UdIwQY
MBaAFPNWzdWknObEKpo1+ne5cngZaIiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMt
NTc2OGQzN2Y3YmI1LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMtNTc2OGQzN2Y3YmI1
LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk2P6Q/C
NH8UZm4idKoH2V5g6ExWnUfLOGRnEwEuuxTPrYFOloC+9KOI0KEc8AZ6KXPqNu0Y
crqV0cuezzaPigg66cXOQsqzjWwv0EeqvFWhO7CpxGlMIFrZgXwGF5ojpJCR4zLP
a0MNKSkFVwyPur998f9gu4pR+HuR0Enxb64sa387695IQDWYWr+2CgIIoFq6DaGe
3SCebYMVM18O0MDJpOxCdziUvwYBvcSAOBZ209zYnepNL4S/De79sBugQtlrfr+e
QMccwqo37IYMiEJQEchy6El7PMkxU98pxqXF6NRLny18vR/Hha4vJimxrgzViLYF
gaFvgsvJzobJ8g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:43:33 2026 by rpki-client