Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: hYbSU8Z/+CqtF7gawj0GOvhtWc381CuO16kJpcQyt5I=
Subject key identifier: 73:03:02:64:56:94:28:CC:F1:1E:B4:CD:68:AB:28:FE:F3:34:23:A9
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 01A0DA5F9E3A69D7BD3904922A54C11F40DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 1A04
Signing time: Fri 25 Sep 2026 21:01:34 +0000
Manifest this update: Fri 25 Sep 2026 21:01:34 +0000
Manifest next update: Sat 26 Sep 2026 21:01:34 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: RnDIb3cZ0t0ongK8rX2tXYOh4Xx27xyDd9o/Wspf+zM=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:9e:3a:69:d7:bd:39:04:92:2a:54:c1:1f:40:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Sep 25 21:01:34 2026 GMT
Not After : Sep 26 21:01:34 2026 GMT
Subject: CN=73030264569428ccf11eb4cd68ab28fef33423a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:33:39:21:eb:82:ba:4e:bd:aa:7f:ed:9b:
6d:83:1a:2b:41:c0:7e:2a:de:ce:84:ef:94:4c:20:
a8:15:ea:5e:d1:65:59:c5:15:34:37:a3:4e:ef:45:
77:b4:21:cb:74:90:02:c0:75:a9:b0:b7:38:7e:5a:
a1:22:cf:45:2a:6f:36:cc:7f:14:58:19:c2:31:c5:
c6:ef:6b:e1:d0:4c:5b:a9:0e:1d:5c:38:09:7e:73:
53:86:fe:27:8b:0b:8b:60:79:0c:28:d5:c7:5a:db:
04:3f:66:f9:88:8f:64:e1:4a:ad:cb:3e:29:d0:57:
e0:7c:1d:2e:46:39:33:1c:f0:d2:97:42:80:70:10:
a6:20:08:b7:74:98:e5:e4:23:14:01:7c:1c:91:f9:
ec:9e:62:0e:86:30:15:5a:68:a6:90:ae:39:14:09:
1f:ea:41:94:d1:ae:87:1e:23:d4:89:b5:55:c0:b9:
57:92:08:5a:f2:33:68:09:2e:50:b7:a6:26:cd:0a:
3a:cd:cd:fb:c8:f0:75:0e:6b:38:b5:d1:83:d4:82:
bf:da:c0:80:8e:29:83:e2:2b:d6:0b:b7:dd:dc:11:
c8:f1:73:3e:e0:a4:b7:64:1d:0c:22:0c:3f:4f:bf:
13:02:d9:30:b8:54:be:c5:22:eb:5c:99:46:68:f0:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:02:64:56:94:28:CC:F1:1E:B4:CD:68:AB:28:FE:F3:34:23:A9
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cc:8a:84:6a:4c:f4:fb:10:17:9a:ce:eb:6c:39:31:a5:cd:
73:09:aa:37:ce:46:35:98:88:24:63:3d:e4:51:08:c5:47:16:
11:bb:db:02:56:8d:14:dc:e1:93:3d:02:45:9b:99:b7:a0:26:
5e:ad:f4:d4:e4:b4:33:9e:31:3c:e0:c7:f7:95:f4:da:83:97:
c2:c2:e5:1f:83:a9:07:9c:d4:18:36:34:54:be:97:0c:6c:65:
76:52:40:37:dc:c1:69:1b:d8:60:41:20:af:fc:0e:14:2d:53:
61:3f:cb:17:6e:1d:24:f3:fe:33:21:0f:96:05:3f:fc:aa:ac:
28:e4:05:23:2b:b7:01:74:e3:d4:39:54:69:5d:b5:71:68:53:
63:1e:1d:24:aa:0c:4f:74:29:5f:27:42:e2:51:0e:cd:37:cd:
59:29:54:26:94:de:23:9e:bd:0f:6d:4a:36:ef:3e:00:4a:0e:
fe:64:da:62:60:1a:d0:45:6a:16:25:67:87:a5:8d:2e:a7:28:
e0:6e:21:03:bb:66:b9:ed:99:a3:6f:da:18:53:28:c1:7a:95:
12:03:17:af:56:6a:9d:56:0c:34:f0:ad:fb:3e:33:13:aa:64:
87:fb:b0:9a:9f:e4:13:82:1e:da:f3:ba:04:8c:e4:a1:5d:e7:
f7:66:a3:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaX546ade9OQSSKlTBH0DfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZWRiNWY2ZGU3MjQzNjE0OGIzNWE1OTAzN2YyMzM0MTUw
ZGRiMzYwHhcNMjYwOTI1MjEwMTM0WhcNMjYwOTI2MjEwMTM0WjAzMTEwLwYDVQQD
Eyg3MzAzMDI2NDU2OTQyOGNjZjExZWI0Y2Q2OGFiMjhmZWYzMzQyM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolAzOSHrgrpOvap/7ZttgxorQcB+
Kt7OhO+UTCCoFepe0WVZxRU0N6NO70V3tCHLdJACwHWpsLc4flqhIs9FKm82zH8U
WBnCMcXG72vh0ExbqQ4dXDgJfnNThv4niwuLYHkMKNXHWtsEP2b5iI9k4Uqtyz4p
0FfgfB0uRjkzHPDSl0KAcBCmIAi3dJjl5CMUAXwckfnsnmIOhjAVWmimkK45FAkf
6kGU0a6HHiPUibVVwLlXkgha8jNoCS5Qt6YmzQo6zc37yPB1Dms4tdGD1IK/2sCA
jimD4ivWC7fd3BHI8XM+4KS3ZB0MIgw/T78TAtkwuFS+xSLrXJlGaPA4kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMDAmRWlCjM8R60zWirKP7zNCOpMB8GA1UdIwQY
MBaAFNTttfbeckNhSLNaWQN/IzQVDds2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3Yjct
NDU0YzkzYzA2NWEwLzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zYTUyNTgtOTg5ZC00MDBiLWI3YjctNDU0YzkzYzA2NWEw
LzEvMU8yMTl0NXlRMkZJczFwWkEzOGpOQlVOMnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8yKhGpM
9PsQF5rO62w5MaXNcwmqN85GNZiIJGM95FEIxUcWEbvbAlaNFNzhkz0CRZuZt6Am
Xq301OS0M54xPODH95X02oOXwsLlH4OpB5zUGDY0VL6XDGxldlJAN9zBaRvYYEEg
r/wOFC1TYT/LF24dJPP+MyEPlgU//KqsKOQFIyu3AXTj1DlUaV21cWhTYx4dJKoM
T3QpXydC4lEOzTfNWSlUJpTeI569D21KNu8+AEoO/mTaYmAa0EVqFiVnh6WNLqco
4G4hA7tmue2Zo2/aGFMowXqVEgMXr1ZqnVYMNPCt+z4zE6pkh/uwmp/kE4Ie2vO6
BIzkoV3n92ajcw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:06:03 2026 by rpki-client