Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
File: A1mTnOHGqpvru2WA4VbuvYcd87I.mft (raw, json)
Hash identifier: KRnurLO+ivAX0qugXpJ0ZJeK3Eo54YYYSaw8TeZal5s=
Subject key identifier: FF:E3:0F:8E:C4:F5:57:06:5B:87:B6:CA:A4:FA:C2:AD:4E:31:E0:A1
Authority key identifier: 03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
Certificate issuer: /CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Certificate serial: 01A0ED0B61A1B579ACA841181F7FD2AB7E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
Manifest number: 08D1
Signing time: Tue 29 Sep 2026 12:02:21 +0000
Manifest this update: Tue 29 Sep 2026 12:02:21 +0000
Manifest next update: Wed 30 Sep 2026 12:02:21 +0000
Files and hashes: 1: A1mTnOHGqpvru2WA4VbuvYcd87I.crl (hash: QFynCzFMG2yifiR8EikACwarN8t/TYhvjPaNxN3G+04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:61:a1:b5:79:ac:a8:41:18:1f:7f:d2:ab:7e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0359939ce1c6aa9bebbb6580e156eebd871df3b2
Validity
Not Before: Sep 29 12:02:21 2026 GMT
Not After : Sep 30 12:02:21 2026 GMT
Subject: CN=ffe30f8ec4f557065b87b6caa4fac2ad4e31e0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:ad:f8:29:27:af:16:6e:39:d7:2e:a9:96:
28:11:18:2e:ee:e2:b0:d2:b3:93:c6:47:dc:75:46:
15:37:06:c9:74:ea:fd:e4:6c:a2:44:48:89:b2:ae:
22:e9:ec:3b:a5:06:17:0b:3b:1b:07:ec:19:77:65:
b2:e9:70:50:96:7b:1c:81:40:72:a8:98:d6:1d:df:
74:90:07:b1:ff:53:93:a9:e1:93:6e:c3:f1:e9:fd:
b5:69:83:a2:dd:35:81:8e:47:b6:46:24:2d:4b:32:
e7:e2:73:7f:48:0b:98:e8:a2:fe:03:73:b0:3d:87:
10:18:8b:49:cb:37:af:d0:ea:a0:05:93:1c:a9:3c:
73:76:ad:60:19:af:c2:c9:55:23:4b:ff:59:c2:43:
5d:77:8b:22:7d:bd:37:da:d5:9a:83:23:0f:cc:b0:
f8:d0:41:f2:86:36:71:a0:d2:94:a7:e4:eb:91:a5:
3f:38:d3:c1:0f:82:72:66:51:8a:5a:ed:8b:18:52:
9a:3d:bf:fd:2b:c3:c1:6a:a9:88:32:01:01:20:fa:
a3:52:2d:4d:14:6f:17:01:37:f6:29:28:78:57:33:
ec:81:d8:41:1a:59:01:50:42:fb:e9:ed:8a:75:0c:
39:60:d3:67:fa:75:87:db:4f:ed:36:43:78:88:53:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E3:0F:8E:C4:F5:57:06:5B:87:B6:CA:A4:FA:C2:AD:4E:31:E0:A1
X509v3 Authority Key Identifier:
keyid:03:59:93:9C:E1:C6:AA:9B:EB:BB:65:80:E1:56:EE:BD:87:1D:F3:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1mTnOHGqpvru2WA4VbuvYcd87I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/65bb4c-b281-4b84-81c0-a962c2b7b153/1/A1mTnOHGqpvru2WA4VbuvYcd87I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bd:f4:7f:02:2c:a8:22:13:4d:9b:97:7d:0f:3e:90:31:08:
54:f5:c6:d1:1a:82:75:87:0e:de:55:ce:aa:21:06:e0:77:49:
6b:48:35:b0:4f:5c:c2:cc:f9:65:1d:b9:55:d0:e4:1b:61:4e:
27:dd:0f:5f:0e:87:ce:81:80:8d:f3:1f:06:96:92:01:59:79:
fc:c0:c4:1a:5b:02:96:71:d7:5e:7f:a9:6e:85:43:d0:75:14:
48:08:02:08:8e:71:ea:85:6e:58:05:28:68:a3:5b:09:80:9e:
51:e1:aa:99:ca:ef:55:4d:58:81:cd:ca:ec:09:30:fa:28:a0:
d9:bc:f6:a6:2a:07:ab:a8:7b:d9:ba:5f:45:8e:31:91:16:7b:
73:87:e2:c6:a1:b3:9b:79:05:de:8e:05:d8:64:5e:94:3c:93:
00:9f:1a:f4:fb:3b:36:59:d3:d1:ba:f6:f1:71:d2:c1:12:b1:
ba:23:4d:2c:76:24:0f:95:2a:e3:2c:7b:70:4f:33:93:8d:b2:
99:83:5e:9f:ac:e6:4f:62:1f:00:eb:d2:a5:bd:23:50:41:10:
f4:70:39:ea:e5:a3:9f:de:21:70:6a:55:a2:89:6a:d7:61:a0:
2c:7c:d8:9b:b4:93:e3:f0:9a:ea:df:f3:8c:e3:7b:b3:ca:05:
bb:de:72:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtC2GhtXmsqEEYH3/Sq344MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTk5MzljZTFjNmFhOWJlYmJiNjU4MGUxNTZlZWJkODcx
ZGYzYjIwHhcNMjYwOTI5MTIwMjIxWhcNMjYwOTMwMTIwMjIxWjAzMTEwLwYDVQQD
EyhmZmUzMGY4ZWM0ZjU1NzA2NWI4N2I2Y2FhNGZhYzJhZDRlMzFlMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzmt+CknrxZuOdcuqZYoERgu7uKw
0rOTxkfcdUYVNwbJdOr95GyiREiJsq4i6ew7pQYXCzsbB+wZd2Wy6XBQlnscgUBy
qJjWHd90kAex/1OTqeGTbsPx6f21aYOi3TWBjke2RiQtSzLn4nN/SAuY6KL+A3Ow
PYcQGItJyzev0OqgBZMcqTxzdq1gGa/CyVUjS/9ZwkNdd4sifb032tWagyMPzLD4
0EHyhjZxoNKUp+TrkaU/ONPBD4JyZlGKWu2LGFKaPb/9K8PBaqmIMgEBIPqjUi1N
FG8XATf2KSh4VzPsgdhBGlkBUEL76e2KdQw5YNNn+nWH20/tNkN4iFPLXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/jD47E9VcGW4e2yqT6wq1OMeChMB8GA1UdIwQY
MBaAFANZk5zhxqqb67tlgOFW7r2HHfOyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFtVG5PSEdxcHZydTJXQTRWYnV2WWNkODdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82NWJiNGMtYjI4MS00Yjg0LTgxYzAt
YTk2MmMyYjdiMTUzLzEvQTFtVG5PSEdxcHZydTJXQTRWYnV2WWNkODdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82NWJiNGMtYjI4MS00Yjg0LTgxYzAtYTk2MmMyYjdiMTUz
LzEvQTFtVG5PSEdxcHZydTJXQTRWYnV2WWNkODdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdb30fwIs
qCITTZuXfQ8+kDEIVPXG0RqCdYcO3lXOqiEG4HdJa0g1sE9cwsz5ZR25VdDkG2FO
J90PXw6HzoGAjfMfBpaSAVl5/MDEGlsClnHXXn+pboVD0HUUSAgCCI5x6oVuWAUo
aKNbCYCeUeGqmcrvVU1Ygc3K7Akw+iig2bz2pioHq6h72bpfRY4xkRZ7c4fixqGz
m3kF3o4F2GRelDyTAJ8a9Ps7NlnT0br28XHSwRKxuiNNLHYkD5Uq4yx7cE8zk42y
mYNen6zmT2IfAOvSpb0jUEEQ9HA56uWjn94hcGpVoolq12GgLHzYm7ST4/Ca6t/z
jON7s8oFu95yPA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:29:21 2026 by rpki-client