
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: gELboFNQsRbjp108aDSOdyoQDa5oQdwWNQtn5APNwdE=
Subject key identifier: C5:00:C1:96:5F:4B:C9:7C:CE:7D:9F:FF:84:87:34:79:11:4F:5E:DB
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 01A0D8A83942DACEEDC3BCE9E0E4B9958EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 13:01:38 +0000
Manifest this update: Fri 25 Sep 2026 13:01:38 +0000
Manifest next update: Sat 26 Sep 2026 13:01:38 +0000
Files and hashes: 1: 4cocr0q1XWVnObqRRasdUZTa22c.roa (hash: 86THFSFQTNeIPxjfawMpIZH9JHPT6I8T1KqMTV+dRZo=)
2: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: zP+IcOyVGHSBR0Ft/alzBOaVn4uqjc573vciX/Zi8Iw=)
3: iwkzEw-xYne2_moODPhsHHvfJEE.roa (hash: e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=)
4: lPb2QmWiKPxzYTHlUwItF0AKSL0.roa (hash: t0HsgpiNiYSsplZbvt5snbpm+tzmqAxHOzqpSQ+fk5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:39:42:da:ce:ed:c3:bc:e9:e0:e4:b9:95:8e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Sep 25 13:01:38 2026 GMT
Not After : Sep 26 13:01:38 2026 GMT
Subject: CN=c500c1965f4bc97cce7d9fff84873479114f5edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:07:1f:d4:fa:f6:86:34:61:84:47:58:d8:
6f:09:44:70:83:7e:45:b2:06:c2:e1:28:49:07:03:
25:3c:7f:38:73:d1:8d:15:80:44:19:1d:80:a4:84:
23:1a:3f:9a:34:ae:5f:d3:b1:c9:9e:fa:33:70:bd:
33:b1:30:f3:9c:5e:8b:66:da:ad:81:7d:56:60:dd:
27:8c:47:7c:7d:9d:50:e1:c5:21:ac:e2:86:e3:41:
51:0c:6a:2f:00:fc:ff:ae:dc:1f:8a:d0:25:24:0c:
e4:51:37:3f:f4:11:21:12:7b:02:de:e6:30:27:cd:
4d:8a:5d:37:2e:80:5b:74:04:5c:65:de:67:6c:8b:
75:a6:c6:b2:5f:eb:72:04:68:92:d4:5a:ee:29:5a:
e1:21:84:aa:4b:47:54:f0:58:0f:17:67:9b:24:be:
1c:52:17:5d:32:09:ab:4c:bd:50:74:29:23:cc:2c:
f4:d7:c2:ec:ba:93:88:1d:23:3c:74:51:94:24:1f:
d2:95:d0:22:ba:7a:03:56:3e:8f:8e:45:a8:08:bc:
6c:f9:bc:4a:3a:10:35:ba:88:7d:7c:a8:ec:bd:f8:
bb:92:b2:aa:20:6c:d4:dd:30:0f:95:7e:4c:34:66:
92:81:85:f8:f4:6b:59:9d:e1:ff:bb:f5:6a:c5:53:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:00:C1:96:5F:4B:C9:7C:CE:7D:9F:FF:84:87:34:79:11:4F:5E:DB
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6b:db:6b:fc:cc:46:e6:27:11:a3:d6:6b:c8:ff:f9:ab:28:
f1:23:e8:9d:a7:71:c9:47:d3:3d:b5:40:6e:98:b6:bf:d6:ef:
16:79:6b:29:f8:d5:b7:73:59:23:c3:cb:dc:3b:75:3d:32:53:
88:2c:39:b8:22:dd:fa:c2:58:9c:09:d5:71:0b:1a:e9:b1:ac:
6b:db:83:6c:35:54:9d:3c:fe:10:0a:8c:4c:40:f6:50:e8:60:
68:e1:41:d0:57:d7:51:7a:d6:66:ed:9d:1b:fc:d0:c8:68:b1:
70:c3:34:c8:ae:fe:b0:fa:02:2b:7b:62:2b:74:49:79:88:23:
5d:53:90:a5:83:c0:b8:8e:91:ce:93:9d:f9:2a:b0:69:70:db:
07:f9:a4:e7:98:e9:1e:fd:20:8b:d3:29:9b:94:0d:17:91:29:
73:1d:cd:d9:3f:62:38:5e:05:a4:2c:93:c0:ca:e1:52:46:6f:
e5:6d:8b:a4:f9:5e:7d:c0:c2:19:26:60:64:79:b2:65:51:1f:
39:35:51:56:20:05:a2:29:27:6b:78:30:af:d0:c7:09:56:f4:
1f:64:8d:65:c5:1b:2a:3b:f5:76:d3:66:6f:2b:42:d6:22:8c:
05:34:25:06:86:f3:93:28:bc:3e:a4:6e:07:d2:eb:03:7b:77:
39:13:e3:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqDlC2s7tw7zp4OS5lY6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1
MjE3NDYwHhcNMjYwOTI1MTMwMTM4WhcNMjYwOTI2MTMwMTM4WjAzMTEwLwYDVQQD
EyhjNTAwYzE5NjVmNGJjOTdjY2U3ZDlmZmY4NDg3MzQ3OTExNGY1ZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9wHH9T69oY0YYRHWNhvCURwg35F
sgbC4ShJBwMlPH84c9GNFYBEGR2ApIQjGj+aNK5f07HJnvozcL0zsTDznF6LZtqt
gX1WYN0njEd8fZ1Q4cUhrOKG40FRDGovAPz/rtwfitAlJAzkUTc/9BEhEnsC3uYw
J81Nil03LoBbdARcZd5nbIt1psayX+tyBGiS1FruKVrhIYSqS0dU8FgPF2ebJL4c
UhddMgmrTL1QdCkjzCz018LsupOIHSM8dFGUJB/SldAiunoDVj6PjkWoCLxs+bxK
OhA1uoh9fKjsvfi7krKqIGzU3TAPlX5MNGaSgYX49GtZneH/u/VqxVOlywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUAwZZfS8l8zn2f/4SHNHkRT17bMB8GA1UdIwQY
MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt
NTBmYzRkNTU3ZDA4LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4
LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2vba/zM
RuYnEaPWa8j/+aso8SPonadxyUfTPbVAbpi2v9bvFnlrKfjVt3NZI8PL3Dt1PTJT
iCw5uCLd+sJYnAnVcQsa6bGsa9uDbDVUnTz+EAqMTED2UOhgaOFB0FfXUXrWZu2d
G/zQyGixcMM0yK7+sPoCK3tiK3RJeYgjXVOQpYPAuI6RzpOd+SqwaXDbB/mk55jp
Hv0gi9Mpm5QNF5Epcx3N2T9iOF4FpCyTwMrhUkZv5W2LpPlefcDCGSZgZHmyZVEf
OTVRViAFoikna3gwr9DHCVb0H2SNZcUbKjv1dtNmbytC1iKMBTQlBobzkyi8PqRu
B9LrA3t3ORPj1A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:59:52 2026 by rpki-client