Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
File: 1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft (raw, json)
Hash identifier: CjOyaLpbpu4y34WChgdeNCeMEpjqkqvQXFJQQc+ICTk=
Subject key identifier: B0:91:5E:61:85:F9:12:C0:51:AE:A7:68:AC:BD:C5:2A:1D:0D:A8:DB
Authority key identifier: FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
Certificate issuer: /CN=fad7e14a262560191c66576998e9c69b89c3c136
Certificate serial: 01A0D1C92F088B57B75DF14051CE1C4428EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
Manifest number: 0EFC
Signing time: Thu 24 Sep 2026 05:00:17 +0000
Manifest this update: Thu 24 Sep 2026 05:00:17 +0000
Manifest next update: Fri 25 Sep 2026 05:00:17 +0000
Files and hashes: 1: 1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl (hash: UlWBWuu+ylkBg5neT32V/Ov6Hc/NwW5X5oaGn2vRSOw=)
2: bocz5SG9Zj4HkXUBKia2cUoBHTI.roa (hash: kxCpDn7CCZ/6SqGTk6+uT7aXJeJIuhuC431y0OFAOkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:2f:08:8b:57:b7:5d:f1:40:51:ce:1c:44:28:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7e14a262560191c66576998e9c69b89c3c136
Validity
Not Before: Sep 24 05:00:17 2026 GMT
Not After : Sep 25 05:00:17 2026 GMT
Subject: CN=b0915e6185f912c051aea768acbdc52a1d0da8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:7c:76:b9:f3:e4:18:6f:50:0c:c0:ca:26:
12:42:e6:07:27:bf:8f:e7:3a:b0:bb:c9:84:24:9d:
2b:92:c3:bc:32:f2:05:d1:c7:46:ee:2c:98:91:bd:
52:03:73:37:e3:3c:6b:92:1f:a2:a0:ae:ef:56:1c:
f7:54:2c:bc:e1:3e:d9:9b:00:77:4e:2c:69:44:dd:
90:c5:18:f2:11:01:d3:7c:6d:fb:7c:cd:a0:19:e6:
b7:ff:e9:23:3c:21:2d:fb:7f:f3:fe:5d:d7:a5:a0:
2e:95:e7:e5:61:84:57:68:f8:77:e4:c3:ce:be:a0:
d2:7d:e0:b5:49:99:34:7d:4e:2f:73:01:ed:fc:a9:
4c:a7:9d:4d:16:62:e3:de:22:77:9b:4c:24:61:71:
20:e9:47:dc:8d:19:ac:5b:fd:41:85:b9:49:cf:94:
48:11:05:32:f7:d4:e2:e3:62:62:be:93:16:84:4d:
f0:43:88:4b:9d:fa:74:cc:e2:05:64:bb:35:aa:63:
6e:ff:70:4a:be:5b:a7:2d:90:27:7e:8f:4b:70:9b:
d7:9c:f2:b3:59:5b:e8:f1:a1:df:2a:24:c9:1c:4b:
3c:99:b2:b9:ea:03:34:83:ad:64:50:b7:1c:54:b7:
47:59:a3:ca:f9:24:2b:86:7b:54:56:cc:ad:79:a7:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:91:5E:61:85:F9:12:C0:51:AE:A7:68:AC:BD:C5:2A:1D:0D:A8:DB
X509v3 Authority Key Identifier:
keyid:FA:D7:E1:4A:26:25:60:19:1C:66:57:69:98:E9:C6:9B:89:C3:C1:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tfhSiYlYBkcZldpmOnGm4nDwTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e6656b-80c8-435e-bc1d-d6e715523f39/1/1-tfhSiYlYBkcZldpmOnGm4nDwTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:39:01:aa:f9:c5:51:d7:63:c3:cd:a4:39:ce:8c:2d:1a:33:
e0:a2:26:b9:87:19:a0:e2:46:b7:4d:cf:a1:a5:20:da:07:a0:
c3:07:96:09:c6:29:39:f8:21:37:91:12:cd:91:89:87:f1:5f:
ea:32:27:e3:0a:e8:86:08:4d:31:c2:fe:18:13:ca:ac:3a:7a:
dc:f1:e9:e0:16:e7:2e:a4:f1:86:38:09:f2:60:85:d7:24:d8:
c3:a6:95:5c:32:1e:71:d4:54:4a:b6:96:5a:06:41:ea:3d:cb:
2a:c7:a3:13:30:88:b4:df:9b:18:ee:99:d5:6e:86:90:ed:6d:
0d:2d:75:1b:2e:11:1c:05:fc:61:49:c8:dd:9d:55:4b:22:68:
ab:b7:d4:62:7d:a0:7b:83:04:ef:2d:82:25:8d:c2:89:47:80:
23:79:12:20:19:10:9b:f3:13:ae:3e:fc:16:42:f6:7a:1f:af:
61:0d:af:0b:cc:5d:f0:8a:16:98:60:b4:b7:93:a0:41:6e:58:
27:16:d0:94:c0:94:da:96:3d:cb:98:53:68:86:cf:e6:0f:f2:
be:e9:9a:16:27:1e:9b:11:6a:22:fb:30:5a:58:2c:a5:a3:d6:
ae:c5:1b:1b:91:4a:38:a5:0a:57:43:50:15:d7:2f:0a:e2:99:
c3:e0:92:af
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDRyS8Ii1e3XfFAUc4cRCjrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDdlMTRhMjYyNTYwMTkxYzY2NTc2OTk4ZTljNjliODlj
M2MxMzYwHhcNMjYwOTI0MDUwMDE3WhcNMjYwOTI1MDUwMDE3WjAzMTEwLwYDVQQD
EyhiMDkxNWU2MTg1ZjkxMmMwNTFhZWE3NjhhY2JkYzUyYTFkMGRhOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rx8drnz5BhvUAzAyiYSQuYHJ7+P
5zqwu8mEJJ0rksO8MvIF0cdG7iyYkb1SA3M34zxrkh+ioK7vVhz3VCy84T7ZmwB3
TixpRN2QxRjyEQHTfG37fM2gGea3/+kjPCEt+3/z/l3XpaAuleflYYRXaPh35MPO
vqDSfeC1SZk0fU4vcwHt/KlMp51NFmLj3iJ3m0wkYXEg6UfcjRmsW/1BhblJz5RI
EQUy99Ti42JivpMWhE3wQ4hLnfp0zOIFZLs1qmNu/3BKvlunLZAnfo9LcJvXnPKz
WVvo8aHfKiTJHEs8mbK56gM0g61kULccVLdHWaPK+SQrhntUVsyteaf7hwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLCRXmGF+RLAUa6naKy9xSodDajbMB8GA1UdIwQY
MBaAFPrX4UomJWAZHGZXaZjpxpuJw8E2MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10ZmhTaVlsWUJrY1psZHBtT25HbTRuRHdUWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvZTY2NTZiLTgwYzgtNDM1ZS1iYzFk
LWQ2ZTcxNTUyM2YzOS8xLzEtdGZoU2lZbFlCa2NabGRwbU9uR200bkR3VFkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlhL2U2NjU2Yi04MGM4LTQzNWUtYmMxZC1kNmU3MTU1MjNm
MzkvMS8xLXRmaFNpWWxZQmtjWmxkcG1PbkdtNG5Ed1RZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTkB
qvnFUddjw82kOc6MLRoz4KImuYcZoOJGt03PoaUg2gegwweWCcYpOfghN5ESzZGJ
h/Ff6jIn4wrohghNMcL+GBPKrDp63PHp4BbnLqTxhjgJ8mCF1yTYw6aVXDIecdRU
SraWWgZB6j3LKsejEzCItN+bGO6Z1W6GkO1tDS11Gy4RHAX8YUnI3Z1VSyJoq7fU
Yn2ge4ME7y2CJY3CiUeAI3kSIBkQm/MTrj78FkL2eh+vYQ2vC8xd8IoWmGC0t5Og
QW5YJxbQlMCU2pY9y5hTaIbP5g/yvumaFicemxFqIvswWlgspaPWrsUbG5FKOKUK
V0NQFdcvCuKZw+CSrw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:11:08 2026 by rpki-client