Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: jQYApV45xCV+9nGjoVE8TOlnMVlJzamFrLN/DNe/kZU=
Subject key identifier: 5C:73:CF:5B:F1:9C:04:AC:B1:08:3B:65:7B:8C:17:AE:03:B4:0D:D1
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 01A0D012F47354B248E2CFE9E7A8B65E3B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0861
Signing time: Wed 23 Sep 2026 21:01:38 +0000
Manifest this update: Wed 23 Sep 2026 21:01:38 +0000
Manifest next update: Thu 24 Sep 2026 21:01:38 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: /UmbkqNuJYcLBlxzo0WehIx+saf7/xIONExK9PShKB4=)
2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:f4:73:54:b2:48:e2:cf:e9:e7:a8:b6:5e:3b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Sep 23 21:01:38 2026 GMT
Not After : Sep 24 21:01:38 2026 GMT
Subject: CN=5c73cf5bf19c04acb1083b657b8c17ae03b40dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:8d:66:48:fd:f0:20:83:04:a5:95:81:e1:
6b:b3:4c:94:e5:22:2e:31:b0:4e:d3:30:10:9f:cf:
d0:1b:e6:6b:99:81:9a:5a:9a:06:e1:e1:be:bc:3d:
49:74:76:37:45:7a:9c:51:08:9f:8e:63:36:87:2c:
06:e5:7c:c4:6e:75:5b:e5:f9:09:ad:dc:0c:d1:10:
07:34:6a:30:79:bc:94:6a:36:26:8e:a2:49:77:2c:
7d:92:ab:47:44:0e:d0:84:c5:8c:fc:ce:23:74:8a:
cb:82:bd:cc:54:9a:40:85:c0:80:8f:f0:53:f4:46:
76:f8:59:03:73:83:aa:8a:43:58:4b:6b:9b:ff:70:
4a:e5:1e:d4:8e:7b:cf:f5:ce:65:1b:4c:a4:94:2e:
f0:8f:84:83:f9:84:3b:66:a7:20:37:ab:7c:a2:f1:
52:01:c0:d9:4d:ef:ee:95:c1:d1:ae:85:52:26:85:
ea:d5:8b:75:47:04:9c:16:3a:a7:01:8c:b2:f6:03:
38:5a:1e:2b:0d:9a:89:40:1e:76:02:c2:37:e2:9b:
f3:db:15:6e:84:1a:f8:64:66:f1:8c:d9:71:a2:71:
38:01:6a:f7:a0:a2:cd:45:86:a2:d4:87:0e:aa:8a:
27:e6:37:05:ad:9f:bc:fb:65:7f:bb:ca:5f:74:e7:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:73:CF:5B:F1:9C:04:AC:B1:08:3B:65:7B:8C:17:AE:03:B4:0D:D1
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ff:3d:3d:76:dc:29:07:87:15:7a:8d:ff:ab:3f:50:35:5a:
e9:18:c8:20:7c:a3:ca:e8:43:f7:5a:c8:30:44:37:bd:10:c3:
e5:81:3f:08:9e:40:4f:fa:a5:8b:a5:c5:07:96:a7:eb:d8:a0:
de:f0:5b:e8:82:45:15:6d:bf:fd:d8:6c:ed:11:4f:16:bd:2c:
6d:a2:55:33:92:60:b4:da:bc:b6:03:04:cb:54:8f:98:37:7b:
91:36:e3:1a:b6:6b:08:69:97:bc:a5:83:14:bc:15:33:3c:da:
2c:72:a4:b9:1c:8a:e6:d8:85:48:c6:aa:61:0e:1e:93:a2:35:
4c:9c:08:b2:9f:0d:ea:e6:6b:8f:ea:a8:9c:a5:a1:a1:e1:53:
0f:ac:02:f0:fb:84:bf:95:15:76:c7:09:3c:36:9f:11:e4:f8:
bc:54:95:b3:ba:e8:d3:c9:df:90:d2:ed:bc:7f:a5:b7:43:9d:
bd:e5:9c:54:0b:36:7b:db:bd:05:29:9e:86:b9:f1:d3:66:c2:
9e:33:f0:b4:06:31:8c:9c:19:42:ee:a9:42:cb:92:bd:27:7c:
bf:65:80:09:dc:66:f6:61:3f:ea:e4:c1:ff:d0:47:1a:b0:4a:
6f:c1:51:51:e4:34:a3:d3:b9:6c:20:ac:ab:a5:b5:89:df:1d:
f1:85:4c:ce
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDQEvRzVLJI4s/p56i2XjueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTJmMDVmY2Q1OWZkMTY4NmY5MjljNjdiZWRjZWY1OWU1
NTBkZjIwHhcNMjYwOTIzMjEwMTM4WhcNMjYwOTI0MjEwMTM4WjAzMTEwLwYDVQQD
Eyg1YzczY2Y1YmYxOWMwNGFjYjEwODNiNjU3YjhjMTdhZTAzYjQwZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SiNZkj98CCDBKWVgeFrs0yU5SIu
MbBO0zAQn8/QG+ZrmYGaWpoG4eG+vD1JdHY3RXqcUQifjmM2hywG5XzEbnVb5fkJ
rdwM0RAHNGowebyUajYmjqJJdyx9kqtHRA7QhMWM/M4jdIrLgr3MVJpAhcCAj/BT
9EZ2+FkDc4OqikNYS2ub/3BK5R7UjnvP9c5lG0yklC7wj4SD+YQ7ZqcgN6t8ovFS
AcDZTe/ulcHRroVSJoXq1Yt1RwScFjqnAYyy9gM4Wh4rDZqJQB52AsI34pvz2xVu
hBr4ZGbxjNlxonE4AWr3oKLNRYai1IcOqoon5jcFrZ+8+2V/u8pfdOcP7QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFxzz1vxnASssQg7ZXuMF64DtA3RMB8GA1UdIwQY
MBaAFPsS8F/NWf0WhvkpxnvtzvWeVQ3yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14THdYODFaX1JhRy1TbkdlLTNPOVo1VkRmSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYTAzN2QxLWVhN2MtNGM4NS04MTI4
LWQ0ZDBhYWI3MDFiZi8xLzEteEx3WDgxWl9SYUctU25HZS0zTzlaNVZEZkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2EwMzdkMS1lYTdjLTRjODUtODEyOC1kNGQwYWFiNzAx
YmYvMS8xLXhMd1g4MVpfUmFHLVNuR2UtM085WjVWRGZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgf89
PXbcKQeHFXqN/6s/UDVa6RjIIHyjyuhD91rIMEQ3vRDD5YE/CJ5AT/qli6XFB5an
69ig3vBb6IJFFW2//dhs7RFPFr0sbaJVM5JgtNq8tgMEy1SPmDd7kTbjGrZrCGmX
vKWDFLwVMzzaLHKkuRyK5tiFSMaqYQ4ek6I1TJwIsp8N6uZrj+qonKWhoeFTD6wC
8PuEv5UVdscJPDafEeT4vFSVs7ro08nfkNLtvH+lt0OdveWcVAs2e9u9BSmehrnx
02bCnjPwtAYxjJwZQu6pQsuSvSd8v2WACdxm9mE/6uTB/9BHGrBKb8FRUeQ0o9O5
bCCsq6W1id8d8YVMzg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:42:18 2026 by rpki-client