Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: gcaFP4yOvuhksFGaqwnAg8Ih/2VJr0/FZNFGxCIIKmE=
Subject key identifier: C9:7A:9F:0F:A1:42:2D:EB:7E:2D:43:7B:EF:DA:50:F8:CD:C3:1D:8A
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 01A0E7AE8102278C56F6EA78E63FD155C433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 11:02:48 +0000
Manifest this update: Mon 28 Sep 2026 11:02:48 +0000
Manifest next update: Tue 29 Sep 2026 11:02:48 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: hrfknAtE29a+rBBWVrwQp6ZYWWv+gqrKXm4DFYqypx4=)
2: 5P2AqR4dtygfqcMyJGY9YwMXZmo.roa (hash: plYfXtpKsLLxZP4A30RARMsnKevfGvWHOU+I9QD0I+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ae:81:02:27:8c:56:f6:ea:78:e6:3f:d1:55:c4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Sep 28 11:02:48 2026 GMT
Not After : Sep 29 11:02:48 2026 GMT
Subject: CN=c97a9f0fa1422deb7e2d437befda50f8cdc31d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e4:d6:34:39:e6:23:bd:5f:d0:f8:e4:f4:59:
50:ea:2c:0b:62:16:8a:66:1b:43:13:aa:72:80:95:
22:a0:a0:7d:98:2c:85:dc:44:87:87:2a:bc:e1:34:
88:40:50:f1:55:16:1f:49:85:59:99:6d:af:27:7d:
8f:a0:50:8e:04:7a:38:a4:05:25:b1:fa:c0:81:dc:
5e:19:d0:60:5f:ce:94:fd:d0:d5:8e:18:51:fc:2a:
b0:a6:88:5e:64:01:a6:39:98:57:65:c2:3d:4e:44:
ae:49:b3:27:1e:dc:43:7e:47:40:b3:da:a6:c4:be:
98:57:e3:26:70:ae:b8:0e:1f:8e:9d:ed:37:ce:e4:
9a:65:ad:5b:cb:94:b3:08:63:0a:26:df:7d:7d:37:
3f:fb:0a:19:f7:47:b0:60:08:f0:e7:c4:86:65:7c:
17:36:18:07:8f:a7:43:5f:ee:fe:65:79:d2:27:ed:
75:fd:db:0f:fa:fe:bb:40:86:9d:d7:5c:04:bc:ca:
05:a0:10:f0:c3:79:61:11:38:1b:2c:7a:3b:21:eb:
22:71:54:80:75:69:e1:5d:43:5d:3a:99:2c:e1:83:
60:09:22:a3:b8:6b:10:6e:94:e4:30:2d:4e:45:ce:
31:a2:83:38:07:a4:58:44:a3:d8:aa:ec:6c:51:67:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7A:9F:0F:A1:42:2D:EB:7E:2D:43:7B:EF:DA:50:F8:CD:C3:1D:8A
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c1:53:90:33:c7:af:2d:8c:7f:a4:ff:5e:61:f2:32:57:d1:
c4:65:08:2c:48:c1:2b:49:5e:25:e8:f7:e8:69:e4:03:62:6a:
d2:01:d6:04:dd:b2:09:3c:c6:5c:87:38:2e:73:4a:8e:72:5a:
fe:8f:cc:27:f0:7e:06:12:d3:f1:e9:63:0f:b7:ab:57:4e:ff:
c9:4b:c2:bc:f5:6f:a5:87:53:7b:dc:36:e9:19:03:db:aa:f8:
fc:f8:4c:e6:4e:65:4a:43:c1:a5:f7:1d:10:f2:7a:c8:b0:67:
ab:fb:2e:3f:9e:5c:ec:17:0a:20:5d:5a:4c:7b:8d:2b:d7:db:
6c:e2:c3:a9:61:c0:25:bc:da:c7:a1:a4:70:ef:46:93:cf:b2:
27:12:5d:4d:2b:9f:b0:da:42:b9:8d:2e:d0:27:56:d5:e8:48:
4b:61:7c:a8:69:e0:81:42:3e:7c:73:a0:8b:0b:5e:f2:17:22:
f2:21:de:a6:aa:24:93:4f:e2:80:61:39:51:94:c3:1e:8e:59:
fb:75:dc:38:ad:76:c2:9a:ec:c1:8d:0f:96:08:94:a3:9b:26:
51:01:8c:ac:c8:53:c1:2c:23:9e:0a:1d:a5:00:93:4b:56:4b:
38:ac:f8:94:80:77:c5:c6:bd:18:1d:c9:ed:66:cd:02:bc:6c:
9e:5a:54:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnroECJ4xW9up45j/RVcQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NDNhZWMyMmY4MTljZjAxZjJjNjM2MzAzNWQ5N2Y4ZTBl
MzgyMzMwHhcNMjYwOTI4MTEwMjQ4WhcNMjYwOTI5MTEwMjQ4WjAzMTEwLwYDVQQD
EyhjOTdhOWYwZmExNDIyZGViN2UyZDQzN2JlZmRhNTBmOGNkYzMxZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+TWNDnmI71f0Pjk9FlQ6iwLYhaK
ZhtDE6pygJUioKB9mCyF3ESHhyq84TSIQFDxVRYfSYVZmW2vJ32PoFCOBHo4pAUl
sfrAgdxeGdBgX86U/dDVjhhR/CqwpoheZAGmOZhXZcI9TkSuSbMnHtxDfkdAs9qm
xL6YV+MmcK64Dh+One03zuSaZa1by5SzCGMKJt99fTc/+woZ90ewYAjw58SGZXwX
NhgHj6dDX+7+ZXnSJ+11/dsP+v67QIad11wEvMoFoBDww3lhETgbLHo7IesicVSA
dWnhXUNdOpks4YNgCSKjuGsQbpTkMC1ORc4xooM4B6RYRKPYquxsUWfnsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl6nw+hQi3rfi1De+/aUPjNwx2KMB8GA1UdIwQY
MBaAFNZDrsIvgZzwHyxjYwNdl/jg44IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYt
ZjZmMzIzZmQ5NmUwLzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lMjlhNTctNmI3Ni00YTA2LWExMTYtZjZmMzIzZmQ5NmUw
LzEvMWtPdXdpLUJuUEFmTEdOakExMlgtT0RqZ2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMFTkDPH
ry2Mf6T/XmHyMlfRxGUILEjBK0leJej36GnkA2Jq0gHWBN2yCTzGXIc4LnNKjnJa
/o/MJ/B+BhLT8eljD7erV07/yUvCvPVvpYdTe9w26RkD26r4/PhM5k5lSkPBpfcd
EPJ6yLBnq/suP55c7BcKIF1aTHuNK9fbbOLDqWHAJbzax6GkcO9Gk8+yJxJdTSuf
sNpCuY0u0CdW1ehIS2F8qGnggUI+fHOgiwte8hci8iHepqokk0/igGE5UZTDHo5Z
+3XcOK12wprswY0PlgiUo5smUQGMrMhTwSwjngodpQCTS1ZLOKz4lIB3xca9GB3J
7WbNArxsnlpUFA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:17:04 2026 by rpki-client