Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File: C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier: 7ZcAnEiZnPGzimOl5yjHouHQUHZoMzSMLn56wBnK3tg=
Subject key identifier: A5:7C:D8:EB:70:6C:6D:3B:75:6C:62:AE:00:B0:A3:BD:58:66:AE:04
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer: /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial: 01A0D12499BD0194E26B939A202444857FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number: 0A9A
Signing time: Thu 24 Sep 2026 02:00:31 +0000
Manifest this update: Thu 24 Sep 2026 02:00:31 +0000
Manifest next update: Fri 25 Sep 2026 02:00:31 +0000
Files and hashes: 1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: IxhQ0MUABekkWNCJR/CphAOQ2mw4gwwMnQI7FlN2zDo=)
2: iswbdq-9V8dK2lt-q7TWOV5NsnA.roa (hash: gjZR/5snwpqcxytGpgCEoK1OzMncCQSVwjv9VDuQVaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:99:bd:01:94:e2:6b:93:9a:20:24:44:85:7f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Validity
Not Before: Sep 24 02:00:31 2026 GMT
Not After : Sep 25 02:00:31 2026 GMT
Subject: CN=a57cd8eb706c6d3b756c62ae00b0a3bd5866ae04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:52:29:7b:bd:a8:de:fc:90:fa:80:02:d8:
c8:f5:e9:84:42:d9:4b:8a:ee:5b:a5:79:0b:a4:b8:
d9:44:fc:06:bc:15:9f:1a:ab:1c:e9:f4:7b:ba:35:
78:69:ee:30:23:3b:92:d3:e4:d9:3e:1b:6e:ae:7d:
d6:c1:b2:c5:8a:e0:c6:97:42:fb:00:2e:47:4b:e6:
c3:04:f9:b4:31:e4:29:b5:3e:98:74:cb:4c:da:47:
8e:bd:ed:93:35:69:5c:82:f9:cf:e7:49:d7:63:5b:
5e:6f:72:cc:63:cb:1c:9f:9b:4a:fb:43:4c:fd:a6:
b5:73:fa:24:4c:6f:fb:04:63:6f:64:e9:83:fe:f8:
64:3f:2f:f2:18:eb:97:d8:d4:93:24:46:ff:af:2d:
9d:7c:b1:91:f7:33:2b:f3:cf:bb:39:33:4a:b2:2f:
ec:00:ff:ed:ef:1c:be:07:76:7a:b7:04:85:53:48:
e9:09:55:b5:00:dd:d4:0f:95:53:fd:34:57:f1:99:
17:14:d8:a3:cf:66:8b:ef:d3:e6:8b:2d:05:b0:10:
85:b6:6a:e4:63:cc:10:3b:a7:55:20:7b:ea:f2:4e:
47:99:0b:eb:90:c5:96:52:71:32:fe:a8:3a:29:6c:
6d:44:e5:a3:7e:dd:b5:f0:f4:90:44:d5:92:02:13:
8f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:D8:EB:70:6C:6D:3B:75:6C:62:AE:00:B0:A3:BD:58:66:AE:04
X509v3 Authority Key Identifier:
keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4e:8d:df:df:5a:47:3d:92:a7:26:32:c0:0e:b1:28:b5:4f:
ea:0f:66:44:5a:a1:a0:68:ac:4f:ac:ec:18:79:7d:bc:99:79:
a3:67:fb:66:49:04:b3:98:c5:e6:08:c0:2a:f2:08:ac:0c:c8:
56:34:82:2b:c1:af:40:98:bd:9f:86:02:d9:1d:63:22:08:30:
a7:a6:c7:5f:3d:71:95:47:9f:8d:9c:35:d8:f9:98:b8:1f:7c:
c4:f5:5e:f0:af:47:3b:35:65:ed:5a:25:2c:de:c4:13:34:41:
5a:27:0c:75:61:5f:42:69:91:dd:3c:41:d2:b9:3b:86:18:41:
0a:53:8e:e4:04:59:9d:80:d8:b7:85:c4:c3:b2:19:4c:8f:21:
6f:92:d4:33:18:ea:3f:cf:db:dc:62:3f:ec:3b:6b:1d:10:53:
d2:56:f6:57:cf:fc:45:f8:ee:7f:cc:e8:32:58:b1:68:d5:ff:
e4:a0:be:91:eb:72:d1:1f:5c:ee:30:76:a0:77:e2:da:d8:ce:
11:d3:7e:f7:13:f4:23:49:75:d4:c7:44:f1:06:3d:99:93:9c:
95:3f:78:70:cf:78:22:a3:d6:2a:88:08:04:88:11:12:06:07:
2f:7b:bb:d7:22:37:0c:13:bc:b4:e6:cf:eb:df:a1:1f:d3:fb:
89:02:69:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJJm9AZTia5OaICREhX+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNThjOTIxY2IzZTljODFkZGMzMTZmZjAzOWNiOWMzNmQy
YTQzOTAwHhcNMjYwOTI0MDIwMDMxWhcNMjYwOTI1MDIwMDMxWjAzMTEwLwYDVQQD
EyhhNTdjZDhlYjcwNmM2ZDNiNzU2YzYyYWUwMGIwYTNiZDU4NjZhZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LNSKXu9qN78kPqAAtjI9emEQtlL
iu5bpXkLpLjZRPwGvBWfGqsc6fR7ujV4ae4wIzuS0+TZPhturn3WwbLFiuDGl0L7
AC5HS+bDBPm0MeQptT6YdMtM2keOve2TNWlcgvnP50nXY1teb3LMY8scn5tK+0NM
/aa1c/okTG/7BGNvZOmD/vhkPy/yGOuX2NSTJEb/ry2dfLGR9zMr88+7OTNKsi/s
AP/t7xy+B3Z6twSFU0jpCVW1AN3UD5VT/TRX8ZkXFNijz2aL79Pmiy0FsBCFtmrk
Y8wQO6dVIHvq8k5HmQvrkMWWUnEy/qg6KWxtROWjft218PSQRNWSAhOPMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV82OtwbG07dWxirgCwo71YZq4EMB8GA1UdIwQY
MBaAFAtYySHLPpyB3cMW/wOcucNtKkOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMt
NDkxNzgyOTZkZTg2LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mNGFiNWYtZTZjMi00OGI4LTk0ZWMtNDkxNzgyOTZkZTg2
LzEvQzFqSkljcy1uSUhkd3hiX0E1eTV3MjBxUTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlU6N399a
Rz2SpyYywA6xKLVP6g9mRFqhoGisT6zsGHl9vJl5o2f7ZkkEs5jF5gjAKvIIrAzI
VjSCK8GvQJi9n4YC2R1jIggwp6bHXz1xlUefjZw12PmYuB98xPVe8K9HOzVl7Vol
LN7EEzRBWicMdWFfQmmR3TxB0rk7hhhBClOO5ARZnYDYt4XEw7IZTI8hb5LUMxjq
P8/b3GI/7DtrHRBT0lb2V8/8Rfjuf8zoMlixaNX/5KC+kety0R9c7jB2oHfi2tjO
EdN+9xP0I0l11MdE8QY9mZOclT94cM94IqPWKogIBIgREgYHL3u71yI3DBO8tObP
69+hH9P7iQJpjQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:21:48 2026 by rpki-client