Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: 6heI2Nx1ER/OOfKtzsbyVU7UmfUWLVr7VYdGcSO+IYA=
Subject key identifier: 7F:29:FA:82:96:FD:6A:EC:51:F5:BF:CF:23:3C:49:B4:96:D3:B6:C8
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 01A0D383605AD5A1FAB242338A49351DB725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 13:03:17 +0000
Manifest this update: Thu 24 Sep 2026 13:03:17 +0000
Manifest next update: Fri 25 Sep 2026 13:03:17 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: OKZeIQEx75qQoS2Y0qZQsNEyZszIDmlDodw6nLUBHG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:60:5a:d5:a1:fa:b2:42:33:8a:49:35:1d:b7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Sep 24 13:03:17 2026 GMT
Not After : Sep 25 13:03:17 2026 GMT
Subject: CN=7f29fa8296fd6aec51f5bfcf233c49b496d3b6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:57:a4:1b:6c:03:91:89:a1:d7:9b:74:fb:
f9:ad:ed:01:64:ee:15:c9:e5:ea:eb:2b:7c:27:a5:
e8:19:25:aa:84:ef:d3:5c:40:b3:6b:80:1c:ea:f9:
42:86:12:4f:8f:b6:bf:b6:86:e3:25:ef:f4:d3:24:
a7:99:18:fc:2f:ad:16:14:f9:2b:51:e6:ba:45:b4:
2a:7a:3d:77:61:5c:0e:a1:e8:c2:3c:44:be:4a:17:
e3:5a:5a:ec:61:80:f7:6c:cd:b1:8c:75:7f:d6:c0:
fd:34:07:8f:bd:28:d8:0f:e2:39:13:23:44:bd:4e:
46:5c:d6:83:73:09:c6:97:89:2a:69:ff:f0:50:c3:
74:00:76:d4:cd:83:57:2c:8e:26:38:a2:c0:58:18:
e7:a0:e9:5e:e3:46:3d:de:70:5a:52:01:a3:10:69:
79:c4:61:80:9c:92:92:ac:04:7f:7c:06:d2:af:a4:
bd:51:91:e0:7d:80:54:69:06:4a:31:c6:cb:cb:c5:
4f:85:ae:00:d2:2e:13:3c:58:e6:ef:d0:a8:d9:43:
32:3d:02:84:e8:3f:c5:07:25:db:e2:1b:28:29:30:
be:53:78:63:ac:2b:fe:35:2f:c9:63:8e:2c:7c:00:
43:15:ba:44:01:d2:1b:1f:7c:7a:24:9a:6b:ad:47:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:FA:82:96:FD:6A:EC:51:F5:BF:CF:23:3C:49:B4:96:D3:B6:C8
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:12:ec:13:49:cc:0d:28:6c:9f:df:dc:fb:4f:dd:d3:07:5c:
5b:16:c9:2c:a6:99:93:5e:d9:29:ce:4d:3c:61:73:68:3c:11:
87:8f:c3:e9:4e:36:96:75:0a:ac:b3:26:5f:2a:c7:b5:f6:a0:
13:a8:0f:ce:e5:70:03:c7:8b:a7:5b:ac:90:aa:9d:f9:ce:29:
bd:02:7b:be:9d:45:f9:32:7e:e6:b4:e3:cb:20:9a:ef:77:4e:
b7:0f:a2:ab:e2:49:a3:6e:3d:07:42:ff:e3:cd:00:7f:68:da:
ce:78:f2:d5:51:0e:3d:8a:ca:a5:8f:4c:ee:a3:55:2a:a9:52:
80:95:7a:4b:68:2e:25:4e:c8:b7:5a:39:98:88:d7:fb:69:2f:
ff:ae:9f:1d:80:13:48:d8:cf:c2:7f:d2:47:c8:e8:d1:7c:23:
85:61:21:c5:1f:73:a0:50:94:5b:a6:c0:e1:a5:02:43:4a:c3:
f8:3c:e6:75:bd:24:5c:79:77:de:49:d4:1b:b9:5a:bd:d7:a9:
75:6c:a1:88:0a:c9:c4:b6:bc:bf:7d:eb:6f:ad:71:bb:c6:4e:
07:4b:6c:9b:49:19:26:49:3d:f1:3c:94:ee:99:8f:e2:e0:cd:
89:81:b7:c8:10:5a:59:d1:72:7d:ba:58:09:1a:4a:d4:f7:90:
50:b3:c0:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg2Ba1aH6skIzikk1HbclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmRkZTk1MGRhNTZmMTIwMzMyN2U1MGUyYjM5NWM0MDIy
NTE3OTgwHhcNMjYwOTI0MTMwMzE3WhcNMjYwOTI1MTMwMzE3WjAzMTEwLwYDVQQD
Eyg3ZjI5ZmE4Mjk2ZmQ2YWVjNTFmNWJmY2YyMzNjNDliNDk2ZDNiNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWFXpBtsA5GJodebdPv5re0BZO4V
yeXq6yt8J6XoGSWqhO/TXECza4Ac6vlChhJPj7a/tobjJe/00ySnmRj8L60WFPkr
Uea6RbQqej13YVwOoejCPES+ShfjWlrsYYD3bM2xjHV/1sD9NAePvSjYD+I5EyNE
vU5GXNaDcwnGl4kqaf/wUMN0AHbUzYNXLI4mOKLAWBjnoOle40Y93nBaUgGjEGl5
xGGAnJKSrAR/fAbSr6S9UZHgfYBUaQZKMcbLy8VPha4A0i4TPFjm79Co2UMyPQKE
6D/FByXb4hsoKTC+U3hjrCv+NS/JY44sfABDFbpEAdIbH3x6JJprrUe+VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8p+oKW/WrsUfW/zyM8SbSW07bIMB8GA1UdIwQY
MBaAFNZt3pUNpW8SAzJ+UOKzlcQCJReYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83NTNhYTktYTRiMC00ZjQ3LThiMDAt
ODk3NTJlNGJmNWQzLzEvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83NTNhYTktYTRiMC00ZjQ3LThiMDAtODk3NTJlNGJmNWQz
LzEvMW0zZWxRMmxieElETW41UTRyT1Z4QUlsRjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthLsE0nM
DShsn9/c+0/d0wdcWxbJLKaZk17ZKc5NPGFzaDwRh4/D6U42lnUKrLMmXyrHtfag
E6gPzuVwA8eLp1uskKqd+c4pvQJ7vp1F+TJ+5rTjyyCa73dOtw+iq+JJo249B0L/
480Af2jaznjy1VEOPYrKpY9M7qNVKqlSgJV6S2guJU7It1o5mIjX+2kv/66fHYAT
SNjPwn/SR8jo0XwjhWEhxR9zoFCUW6bA4aUCQ0rD+Dzmdb0kXHl33knUG7lavdep
dWyhiArJxLa8v33rb61xu8ZOB0tsm0kZJkk98TyU7pmP4uDNiYG3yBBaWdFyfbpY
CRpK1PeQULPAhQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:38:43 2026 by rpki-client