Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: KPoz5XgWXGJAZe9olApQ7Q+io/PzqgFrxGuoZ5fZl+w=
Subject key identifier: E8:B2:7C:91:D7:C3:91:40:E3:1D:83:A6:75:38:09:79:DD:05:7E:3F
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 01A0CEFF77EFF9E09550A6F2F7596A2D45CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 16:00:43 +0000
Manifest this update: Wed 23 Sep 2026 16:00:43 +0000
Manifest next update: Thu 24 Sep 2026 16:00:43 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: dOjgvet4HRl4ZjTJzLOmc3EcStYyvh1rj4Ozwt8e01s=)
2: gR91LIxxnbU08v57AUEvFf010vs.roa (hash: SbAN6voQ5c1qkWMDRn5E0Sl0vR5PwgTVIGlVOQ/CsHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:77:ef:f9:e0:95:50:a6:f2:f7:59:6a:2d:45:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Sep 23 16:00:43 2026 GMT
Not After : Sep 24 16:00:43 2026 GMT
Subject: CN=e8b27c91d7c39140e31d83a675380979dd057e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:0f:de:b4:39:0c:a0:e3:87:f0:11:69:58:
25:34:ba:c7:90:fc:20:c6:7f:01:50:54:cb:07:18:
1b:b3:3b:fa:5f:8a:4f:04:d5:ec:67:f9:e9:13:8c:
87:48:ed:ed:16:7e:51:c7:b0:4e:69:eb:7c:47:15:
3c:9e:7f:ed:bd:d4:bb:9d:59:e2:90:5d:e6:22:af:
2c:6d:cb:7f:a9:1e:c7:a2:b4:a9:72:29:cc:61:47:
18:0c:1b:88:de:25:f8:f0:d4:24:b1:3d:ea:e2:71:
6b:ce:4b:05:9d:fc:13:88:fa:9c:36:69:8a:0d:b4:
6a:ca:a9:c6:dc:1f:41:a0:f4:48:32:ad:e1:36:bf:
88:77:15:b8:4f:b2:04:4b:08:e7:b0:59:73:f5:7a:
0d:16:fc:77:75:9c:0e:be:a8:45:92:b8:c0:23:e0:
f8:1c:15:3e:97:a0:d1:a9:92:02:c1:17:bd:80:9f:
56:af:0c:36:82:4a:29:1b:96:05:a2:08:54:30:a3:
09:ea:3c:b3:a9:19:5a:66:e4:f1:03:11:12:41:9c:
67:b9:6d:f5:d1:93:e9:e3:7d:cb:bc:99:30:d6:a8:
c7:35:e5:d7:b2:8d:78:55:3e:7e:44:a9:77:a8:d7:
8c:73:33:cf:a5:a7:95:37:1c:fa:73:dc:67:46:d2:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B2:7C:91:D7:C3:91:40:E3:1D:83:A6:75:38:09:79:DD:05:7E:3F
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:23:69:fa:e1:60:d7:e6:92:cc:c1:8a:5f:25:57:be:55:bc:
28:01:f3:a4:70:2d:7c:74:cc:d3:9c:f7:30:2a:70:f1:b2:16:
db:d4:19:50:4e:a5:6c:dc:45:33:b4:fd:5e:99:88:06:19:6b:
f9:73:a2:e7:22:ce:fe:a8:e3:18:80:46:49:53:07:35:d1:9f:
f7:68:64:5c:04:ea:2f:28:c1:76:c2:21:bb:24:bd:86:9d:ac:
52:79:cc:87:51:b8:4f:4c:7d:bb:e3:2c:6c:dd:f9:a9:28:28:
62:d0:2f:09:83:66:c6:47:ac:29:82:78:84:27:bc:62:fb:f4:
22:a7:19:98:a4:d3:38:15:4d:3c:45:67:4d:ef:fd:68:87:cf:
aa:09:a6:f9:d3:94:bb:63:48:2b:1b:4d:59:e3:4e:1e:88:d8:
93:62:41:a8:23:e8:79:29:2e:6e:33:ff:3e:2a:0d:ff:f8:74:
dc:4d:2a:0d:19:9c:80:c5:71:de:53:b3:cc:84:ae:b8:64:47:
d3:3a:30:a9:d9:d1:cd:7e:36:eb:a9:c8:21:37:74:62:93:93:
47:11:e6:ab:03:18:9a:39:6e:4d:22:fd:59:0e:85:58:68:ce:
1d:de:c4:db:40:f1:6a:92:0b:b0:6d:79:4e:6c:4a:ac:d7:c5:
14:5e:3b:bb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDO/3fv+eCVUKby91lqLUXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDE4NjNjYmRlYzFiNTk2ZGFjZWViOTAxYTA4NTNkNmM4
N2U3NTYwHhcNMjYwOTIzMTYwMDQzWhcNMjYwOTI0MTYwMDQzWjAzMTEwLwYDVQQD
EyhlOGIyN2M5MWQ3YzM5MTQwZTMxZDgzYTY3NTM4MDk3OWRkMDU3ZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6EP3rQ5DKDjh/ARaVglNLrHkPwg
xn8BUFTLBxgbszv6X4pPBNXsZ/npE4yHSO3tFn5Rx7BOaet8RxU8nn/tvdS7nVni
kF3mIq8sbct/qR7HorSpcinMYUcYDBuI3iX48NQksT3q4nFrzksFnfwTiPqcNmmK
DbRqyqnG3B9BoPRIMq3hNr+IdxW4T7IESwjnsFlz9XoNFvx3dZwOvqhFkrjAI+D4
HBU+l6DRqZICwRe9gJ9Wrww2gkopG5YFoghUMKMJ6jyzqRlaZuTxAxESQZxnuW31
0ZPp433LvJkw1qjHNeXXso14VT5+RKl3qNeMczPPpaeVNxz6c9xnRtLcOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOiyfJHXw5FA4x2DpnU4CXndBX4/MB8GA1UdIwQY
MBaAFPrRhjy97BtZbazuuQGghT1sh+dWMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10R0dQTDNzRzFsdHJPNjVBYUNGUFd5SDUxWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvZGRkYTdlLWEwMzctNGQzOC05NTU1
LTBhMTEwYzQ5NzQ5Yy8xLzEtdEdHUEwzc0cxbHRyTzY1QWFDRlBXeUg1MVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RmL2RkZGE3ZS1hMDM3LTRkMzgtOTU1NS0wYTExMGM0OTc0
OWMvMS8xLXRHR1BMM3NHMWx0ck82NUFhQ0ZQV3lINTFZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSNp
+uFg1+aSzMGKXyVXvlW8KAHzpHAtfHTM05z3MCpw8bIW29QZUE6lbNxFM7T9XpmI
Bhlr+XOi5yLO/qjjGIBGSVMHNdGf92hkXATqLyjBdsIhuyS9hp2sUnnMh1G4T0x9
u+MsbN35qSgoYtAvCYNmxkesKYJ4hCe8Yvv0IqcZmKTTOBVNPEVnTe/9aIfPqgmm
+dOUu2NIKxtNWeNOHojYk2JBqCPoeSkubjP/PioN//h03E0qDRmcgMVx3lOzzISu
uGRH0zowqdnRzX4266nIITd0YpOTRxHmqwMYmjluTSL9WQ6FWGjOHd7E20DxapIL
sG15TmxKrNfFFF47uw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:35:18 2026 by rpki-client