Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: M4Mpum36Ewf7UP3Lxl7DoWcruD9JbQYu//bQ9tDSdy8=
Subject key identifier: 1C:3D:26:36:99:F9:8E:56:44:B0:C4:6E:73:A0:6B:8A:B5:52:77:F1
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 01A0DFF4026CC8FAFEC363B89F7B5366CFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 194B
Signing time: Sat 26 Sep 2026 23:01:45 +0000
Manifest this update: Sat 26 Sep 2026 23:01:45 +0000
Manifest next update: Sun 27 Sep 2026 23:01:45 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: TUAUsWO1TTtgbRsNW127ZML6jmrmRD7OwxsY+ecvtJ8=)
2: tVllXtsvNqnnGT4ghCbeFVO4eK8.roa (hash: m5YFGULB9rnteTPaC4KcDVufk0CwF1ak5Ttvba2UEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f4:02:6c:c8:fa:fe:c3:63:b8:9f:7b:53:66:cf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Sep 26 23:01:45 2026 GMT
Not After : Sep 27 23:01:45 2026 GMT
Subject: CN=1c3d263699f98e5644b0c46e73a06b8ab55277f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:5f:bd:8e:25:85:86:f8:03:95:2a:72:e7:
18:c2:f3:8d:ea:44:58:de:35:38:4a:53:2d:84:fa:
79:e3:17:6d:9a:f3:d0:93:de:fe:cd:87:69:dd:c4:
5d:13:92:0b:39:21:69:1c:6a:1e:ce:cb:d9:0d:73:
82:12:1e:6a:e1:04:35:00:ad:3a:56:29:3f:3d:19:
bb:c9:59:80:e4:d8:7d:f0:4d:d6:ac:9b:8f:64:1e:
5b:35:a3:eb:88:7e:bb:92:f0:a9:f5:16:33:63:96:
ae:70:1a:14:49:75:22:53:e3:7e:2c:26:bb:8f:2b:
55:a2:ed:98:37:ef:1a:78:e8:5a:38:a5:67:4c:09:
6e:b5:9f:c6:ab:8b:ce:b5:66:43:db:14:8a:ab:30:
f2:6c:0a:5b:47:4d:cb:97:a1:9c:98:30:97:94:0a:
ff:1c:71:c4:2a:ac:6c:2d:8d:fc:34:63:cf:7e:84:
70:37:c9:ef:a2:68:28:bb:bc:00:18:a7:8f:44:14:
7c:1c:45:29:b0:38:89:75:e5:e9:a6:af:80:6a:e4:
c1:4c:4b:89:84:32:79:e0:9a:d1:c4:c9:e5:4e:6a:
59:44:ce:e5:98:18:bc:10:af:e2:c7:65:46:2e:77:
2d:be:14:38:c1:78:f1:a9:78:bb:41:c0:37:a3:df:
4b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:26:36:99:F9:8E:56:44:B0:C4:6E:73:A0:6B:8A:B5:52:77:F1
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6e:ce:9d:28:c4:c1:b1:40:b7:c8:46:6d:a3:59:2a:20:2e:
de:01:94:2f:d8:f3:3c:d2:43:8a:73:24:11:98:b5:f3:94:a6:
14:28:be:d9:a3:2c:a1:b9:c2:5b:50:c1:72:0e:f4:29:b2:66:
d7:96:60:82:aa:8d:11:e5:b5:ae:90:af:5a:2c:ca:78:30:11:
36:ae:b2:9b:a0:39:98:97:76:e1:7a:54:d2:80:a1:67:f7:cc:
48:4f:d4:56:bf:e3:b8:b9:2f:d9:49:20:da:79:4e:85:6f:b6:
86:8e:1c:3c:aa:53:22:ba:bc:36:42:9f:4e:32:ea:e3:f5:8d:
00:14:1e:6e:92:42:ff:5b:d4:99:32:1f:c6:ea:6a:56:c3:fb:
7e:06:1c:66:98:17:28:10:93:16:0c:f4:d7:10:1a:32:df:dd:
2b:ad:98:85:ff:70:87:48:39:f9:a8:b7:4e:34:eb:80:9b:aa:
fc:5d:c3:08:e2:eb:c5:dc:13:50:63:fc:f9:6f:7a:c4:52:ac:
57:24:7f:89:70:e0:ed:fc:4a:e2:a3:75:f3:d3:d8:88:5f:88:
a1:22:41:a2:6f:33:b7:17:08:78:60:00:03:64:90:11:0c:b9:
66:3c:0e:a1:49:82:03:dc:fb:bb:af:5f:16:cc:4c:59:64:93:
ec:e0:13:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDf9AJsyPr+w2O4n3tTZs/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3M2I0MGFlYmY4OGMxN2IxYjU2MjEyOGE1NmY0MjQ1ZjJm
MTU0MzgwHhcNMjYwOTI2MjMwMTQ1WhcNMjYwOTI3MjMwMTQ1WjAzMTEwLwYDVQQD
EygxYzNkMjYzNjk5Zjk4ZTU2NDRiMGM0NmU3M2EwNmI4YWI1NTI3N2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzxfvY4lhYb4A5UqcucYwvON6kRY
3jU4SlMthPp54xdtmvPQk97+zYdp3cRdE5ILOSFpHGoezsvZDXOCEh5q4QQ1AK06
Vik/PRm7yVmA5Nh98E3WrJuPZB5bNaPriH67kvCp9RYzY5aucBoUSXUiU+N+LCa7
jytVou2YN+8aeOhaOKVnTAlutZ/Gq4vOtWZD2xSKqzDybApbR03Ll6GcmDCXlAr/
HHHEKqxsLY38NGPPfoRwN8nvomgou7wAGKePRBR8HEUpsDiJdeXppq+AauTBTEuJ
hDJ54JrRxMnlTmpZRM7lmBi8EK/ix2VGLnctvhQ4wXjxqXi7QcA3o99LrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw9JjaZ+Y5WRLDEbnOga4q1UnfxMB8GA1UdIwQY
MBaAFNc7QK6/iMF7G1YhKKVvQkXy8VQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZmUyYjktZjlhNS00YzZiLWFiNWUt
YjlkN2Y0MWZjMTg5LzEvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hZmUyYjktZjlhNS00YzZiLWFiNWUtYjlkN2Y0MWZjMTg5
LzEvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArm7OnSjE
wbFAt8hGbaNZKiAu3gGUL9jzPNJDinMkEZi185SmFCi+2aMsobnCW1DBcg70KbJm
15ZggqqNEeW1rpCvWizKeDARNq6ym6A5mJd24XpU0oChZ/fMSE/UVr/juLkv2Ukg
2nlOhW+2ho4cPKpTIrq8NkKfTjLq4/WNABQebpJC/1vUmTIfxupqVsP7fgYcZpgX
KBCTFgz01xAaMt/dK62Yhf9wh0g5+ai3TjTrgJuq/F3DCOLrxdwTUGP8+W96xFKs
VyR/iXDg7fxK4qN189PYiF+IoSJBom8ztxcIeGAAA2SQEQy5ZjwOoUmCA9z7u69f
FsxMWWST7OATCw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:59:46 2026 by rpki-client