Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: hE7C5gDJapook3J9chXW44GDGcD8RdaGt6ncfEGI7qU=
Subject key identifier: 6D:9A:4C:4A:E7:32:B3:1D:48:69:50:FF:CB:B0:EE:06:8E:7D:5F:DC
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 01A1DA263C8C473226FA12EC0AFF75710B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 1964
Signing time: Sat 14 Nov 2026 13:01:41 +0000
Manifest this update: Sat 14 Nov 2026 13:01:41 +0000
Manifest next update: Sun 15 Nov 2026 13:01:41 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: p6OpAH7urjen0jJnP77YQgRYzLg5Aa+yZTPxM8Q6WJs=)
2: 2O8krpss1XUBhd1z1aphhjRg5kI.roa (hash: y4ACY414P23FTUASLCD5rS3epsK/nudRTUHUj5PRHCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:26:3c:8c:47:32:26:fa:12:ec:0a:ff:75:71:0b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: Nov 14 13:01:41 2026 GMT
Not After : Nov 15 13:01:41 2026 GMT
Subject: CN=6d9a4c4ae732b31d486950ffcbb0ee068e7d5fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:e8:52:63:95:4d:25:4c:29:fd:22:25:83:
51:fd:39:62:82:4c:55:7b:d3:4e:cd:d5:fa:fc:88:
f0:4c:89:73:c0:95:bc:91:e1:c4:37:1d:94:5b:6f:
13:56:da:b0:22:d2:81:46:9a:eb:5b:bd:ec:d4:4e:
85:c0:bf:8d:b3:14:1d:d3:79:50:45:2c:58:ae:85:
16:77:5a:fe:38:97:b6:e3:3e:55:09:0a:fc:b9:73:
ab:e5:27:b8:e1:75:9d:d1:2e:87:7e:cd:e4:04:9b:
59:8b:41:87:61:87:8e:13:98:1b:6c:d5:85:ef:24:
6e:ef:dc:3e:dc:25:1e:f4:c5:ed:7b:0c:f1:7b:e8:
dd:35:40:31:8e:58:4f:ac:72:50:e9:00:a4:61:7b:
0f:ac:ca:b7:ee:76:45:8e:87:86:75:0c:1c:57:84:
c7:9e:ee:8e:46:a2:a2:a2:f8:3b:05:4f:96:64:39:
a4:71:85:e0:91:4e:ef:b6:ec:23:99:93:5c:43:2d:
de:93:b8:dc:4c:8e:42:dc:5b:f4:1b:f8:5a:2d:45:
8c:ff:51:96:fd:74:00:52:30:cb:e6:71:cd:ea:6f:
f3:cb:5c:c9:a0:54:e7:44:49:bf:7e:34:61:49:dd:
f2:99:33:c6:42:47:7a:b0:9a:c3:b4:59:17:06:da:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9A:4C:4A:E7:32:B3:1D:48:69:50:FF:CB:B0:EE:06:8E:7D:5F:DC
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e1:93:1f:42:bd:b1:c0:84:4c:10:b1:d9:aa:2b:cf:c0:73:
4e:a1:2e:80:bf:c8:79:21:e8:75:31:32:c7:94:50:bd:72:a2:
f7:ef:e7:f8:9f:5e:4f:c4:bd:99:6c:87:0d:c5:69:c0:81:ee:
fe:c0:3f:d3:49:52:bd:ea:5d:25:77:98:e1:cd:a5:5e:5b:c8:
52:2c:13:b2:d2:40:76:11:74:b6:5f:59:f3:08:d7:7a:fd:3a:
76:f7:40:39:24:62:4a:95:2b:21:a4:a6:c6:70:68:f3:bb:36:
b9:f1:f4:7f:fa:19:f1:a8:cf:d7:97:c4:5f:9f:6c:b5:31:75:
0d:65:2e:cb:06:4d:f0:b4:01:ef:2b:41:b8:60:bf:8a:61:40:
a0:26:f2:c1:71:e6:77:6e:50:ea:44:e5:fd:01:1e:3d:aa:ec:
fa:35:99:4c:a9:13:b3:2c:57:4d:f7:0d:f1:cb:4a:39:00:5b:
81:30:3b:59:2a:7e:96:df:f9:76:49:27:df:c5:aa:81:a9:38:
c9:27:03:8f:d1:b4:b7:3c:2e:4a:44:97:bf:ab:10:0f:aa:0c:
1b:27:c0:da:79:4a:e0:3c:2a:82:b7:e5:5c:a3:1e:b7:10:07:
42:c5:48:be:81:bd:3c:a6:66:cc:17:4a:b6:43:5b:86:7e:f2:
24:72:8c:d5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaHaJjyMRzIm+hLsCv91cQsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTRjYzIwYTcwZWY1YTAzMTQ2YTdkYzVhNzlkZGI1MDY1
YmVkZTgwHhcNMjYxMTE0MTMwMTQxWhcNMjYxMTE1MTMwMTQxWjAzMTEwLwYDVQQD
Eyg2ZDlhNGM0YWU3MzJiMzFkNDg2OTUwZmZjYmIwZWUwNjhlN2Q1ZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl23oUmOVTSVMKf0iJYNR/TligkxV
e9NOzdX6/IjwTIlzwJW8keHENx2UW28TVtqwItKBRprrW73s1E6FwL+NsxQd03lQ
RSxYroUWd1r+OJe24z5VCQr8uXOr5Se44XWd0S6Hfs3kBJtZi0GHYYeOE5gbbNWF
7yRu79w+3CUe9MXtewzxe+jdNUAxjlhPrHJQ6QCkYXsPrMq37nZFjoeGdQwcV4TH
nu6ORqKiovg7BU+WZDmkcYXgkU7vtuwjmZNcQy3ek7jcTI5C3Fv0G/haLUWM/1GW
/XQAUjDL5nHN6m/zy1zJoFTnREm/fjRhSd3ymTPGQkd6sJrDtFkXBtqo9wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG2aTErnMrMdSGlQ/8uw7gaOfV/cMB8GA1UdIwQY
MBaAFPoUzCCnDvWgMUan3Fp53bUGW+3oMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oVE1JS2NPOWFBeFJxZmNXbm5kdFFaYjdlZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvNTBiZmNlLTM4NWUtNDA2NC1iZGU3
LTU5ZmVjMmI5ZjkxNC8xLzEtaFRNSUtjTzlhQXhScWZjV25uZHRRWmI3ZWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzljLzUwYmZjZS0zODVlLTQwNjQtYmRlNy01OWZlYzJiOWY5
MTQvMS8xLWhUTUlLY085YUF4UnFmY1dubmR0UVpiN2VnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuGT
H0K9scCETBCx2aorz8BzTqEugL/IeSHodTEyx5RQvXKi9+/n+J9eT8S9mWyHDcVp
wIHu/sA/00lSvepdJXeY4c2lXlvIUiwTstJAdhF0tl9Z8wjXev06dvdAOSRiSpUr
IaSmxnBo87s2ufH0f/oZ8ajP15fEX59stTF1DWUuywZN8LQB7ytBuGC/imFAoCby
wXHmd25Q6kTl/QEePars+jWZTKkTsyxXTfcN8ctKOQBbgTA7WSp+lt/5dkkn38Wq
gak4yScDj9G0tzwuSkSXv6sQD6oMGyfA2nlK4DwqgrflXKMetxAHQsVIvoG9PKZm
zBdKtkNbhn7yJHKM1Q==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:21 2026 by rpki-client