Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: iellVq8J2YIl4BAXAX4U5JGp73urVvmwHhRm7EERfHk=
Subject key identifier: D9:9A:5F:40:F1:26:42:CB:7A:67:5E:B0:4F:C4:F9:03:00:9C:38:C0
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01A0D3151367B9D802B758ECCC8E3A67747E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0D79
Signing time: Thu 24 Sep 2026 11:02:48 +0000
Manifest this update: Thu 24 Sep 2026 11:02:48 +0000
Manifest next update: Fri 25 Sep 2026 11:02:48 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: VfnVOQ5SPKZ0YNZ98aAUJxmBbM9UFhR2RzyA9Db4XJc=)
2: CUYWUXKlSDi-O6o1gqKr212xkbo.roa (hash: k1HnAnqag66dRZXeetGjJ31nbQ8oEhTYZdulQnQBvHI=)
3: ahwJWMDOiYbBjC-dMcBFm-YzxIE.roa (hash: JIus5+okp5b0RxpPylDp38lXYKbWSyMZRf8EJzgBKIc=)
4: t-bE_B73TZI8Uz45szkrBPUfW0U.roa (hash: bLaAjOBStycFvJPWVLG9k9JQVtpgKc6yKcaCHAaF3WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:13:67:b9:d8:02:b7:58:ec:cc:8e:3a:67:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Sep 24 11:02:48 2026 GMT
Not After : Sep 25 11:02:48 2026 GMT
Subject: CN=d99a5f40f12642cb7a675eb04fc4f903009c38c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:3c:ef:03:53:73:d6:ab:02:c3:fd:2f:1f:
0a:a1:be:d9:f2:37:ae:aa:4d:60:91:77:a7:ea:91:
b4:56:dc:0e:5e:89:84:f6:c7:a6:35:e4:5f:1f:3f:
0a:4e:16:8c:87:91:54:48:23:4b:91:b4:99:63:f9:
7a:d3:e8:d5:12:32:b7:b6:62:d5:f0:29:fe:dc:64:
82:a0:28:8a:a5:a6:aa:da:25:35:68:ee:a2:14:a4:
f4:13:76:14:c8:d0:de:fb:84:55:9e:fb:c9:2e:4e:
2a:d4:a4:59:f7:d6:ce:a8:17:f7:fd:e1:7f:f5:8e:
ee:dc:54:8e:b7:bd:82:ae:0d:0b:96:cd:65:e5:d1:
34:c6:2c:6b:2e:6c:d2:28:da:26:a1:d9:41:0a:1f:
3c:fc:bf:ff:e2:8c:50:9c:ce:36:69:68:bf:7f:86:
37:7c:cd:2a:dc:2f:8a:db:8b:0c:a8:45:1b:ba:d5:
9e:6c:a9:bb:75:ef:f4:f0:1d:ac:4e:e1:06:07:b4:
24:3a:4c:41:8c:4e:2e:84:d2:e2:91:18:8d:65:33:
90:fc:c8:88:af:50:88:03:90:ed:72:df:03:30:0f:
68:04:95:79:60:2e:86:ba:c9:2a:45:ae:f2:fb:af:
4e:0f:33:09:b3:a6:ff:a9:63:e2:4a:6d:4d:40:b1:
9a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:5F:40:F1:26:42:CB:7A:67:5E:B0:4F:C4:F9:03:00:9C:38:C0
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e7:a8:31:d5:3a:2f:7f:c4:e4:7f:d2:7f:39:08:9d:49:3e:
20:4c:41:e1:25:40:b7:7c:30:c4:11:ec:86:61:e4:3c:a5:be:
1a:3d:6b:54:a8:fe:de:bb:43:fd:28:0c:d1:96:eb:e8:c5:f7:
04:e6:09:7c:30:12:89:29:c4:fa:90:2a:38:d1:14:4f:67:10:
f1:0a:59:e1:13:8f:aa:3d:a0:aa:54:5e:8d:a6:31:7f:b4:0b:
72:cb:2f:dc:24:c7:13:8a:9d:a3:44:0e:8f:a7:1b:71:f0:f8:
93:35:7c:60:fb:5b:f1:8e:99:04:71:7a:dc:c2:a2:69:b0:d4:
6f:94:07:48:d0:09:dc:10:40:d6:73:63:54:4b:5d:4a:5c:fe:
dc:ae:bb:6d:8d:64:27:22:35:0e:8a:ca:f3:df:be:4f:b3:08:
a7:2e:5a:7b:2e:a1:a3:b9:6c:62:1f:be:d3:f7:c8:83:a3:af:
2b:0a:b9:af:95:6c:1f:94:d2:57:d6:41:f8:ae:98:a0:a8:db:
bb:73:fc:ac:d0:bd:56:96:d8:30:b4:c4:b3:f1:f5:ee:29:09:
82:91:83:3c:d5:30:b0:79:09:10:88:6c:86:e8:de:f7:ec:4d:
c6:0b:62:4f:28:29:81:89:1b:70:ab:c3:3d:a3:39:21:37:67:
3e:ed:d7:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFRNnudgCt1jszI46Z3R+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTA4YTQ4NWRmYWYwNmE5MzFmNTQzYzA4NWEwMDljNmFl
YTJkOWMwHhcNMjYwOTI0MTEwMjQ4WhcNMjYwOTI1MTEwMjQ4WjAzMTEwLwYDVQQD
EyhkOTlhNWY0MGYxMjY0MmNiN2E2NzVlYjA0ZmM0ZjkwMzAwOWMzOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPo87wNTc9arAsP9Lx8Kob7Z8jeu
qk1gkXen6pG0VtwOXomE9semNeRfHz8KThaMh5FUSCNLkbSZY/l60+jVEjK3tmLV
8Cn+3GSCoCiKpaaq2iU1aO6iFKT0E3YUyNDe+4RVnvvJLk4q1KRZ99bOqBf3/eF/
9Y7u3FSOt72Crg0Lls1l5dE0xixrLmzSKNomodlBCh88/L//4oxQnM42aWi/f4Y3
fM0q3C+K24sMqEUbutWebKm7de/08B2sTuEGB7QkOkxBjE4uhNLikRiNZTOQ/MiI
r1CIA5Dtct8DMA9oBJV5YC6GuskqRa7y+69ODzMJs6b/qWPiSm1NQLGanQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmaX0DxJkLLemdesE/E+QMAnDjAMB8GA1UdIwQY
MBaAFNYQikhd+vBqkx9UPAhaAJxq6i2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEt
YjZmOWRmNDU1MjQ5LzEvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83NTg4Y2EtNTY3Ny00Nzk1LThhODEtYjZmOWRmNDU1MjQ5
LzEvMWhDS1NGMzY4R3FUSDFROENGb0FuR3JxTFp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOeoMdU6
L3/E5H/SfzkInUk+IExB4SVAt3wwxBHshmHkPKW+Gj1rVKj+3rtD/SgM0Zbr6MX3
BOYJfDASiSnE+pAqONEUT2cQ8QpZ4ROPqj2gqlRejaYxf7QLcssv3CTHE4qdo0QO
j6cbcfD4kzV8YPtb8Y6ZBHF63MKiabDUb5QHSNAJ3BBA1nNjVEtdSlz+3K67bY1k
JyI1DorK89++T7MIpy5aey6ho7lsYh++0/fIg6OvKwq5r5VsH5TSV9ZB+K6YoKjb
u3P8rNC9VpbYMLTEs/H17ikJgpGDPNUwsHkJEIhshuje9+xNxgtiTygpgYkbcKvD
PaM5ITdnPu3XMQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:40:35 2026 by rpki-client