Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: TmqTyx+7JN0KNvgXJ2NBC/n+Bn2H5v9I+UTd5J/4auo=
Subject key identifier: 0D:84:21:04:59:4B:8A:4C:F3:07:97:7E:D2:02:77:63:F8:78:90:DA
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 01A0D83C248B03CFFB563E4C7D9CE8399B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 11:03:35 +0000
Manifest this update: Fri 25 Sep 2026 11:03:35 +0000
Manifest next update: Sat 26 Sep 2026 11:03:35 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: j9B1V5ton/9MX0Fan48VvhuzXMhB6DoXvzAf+/V6UIQ=)
2: A0zEfLP6aje6siYVgtOIFTUv-gA.roa (hash: U3yH+f7j1agPNZjyy4FkXU1kfVyaRAeAIT0ypJqPwSA=)
3: C96r7R6Mb5GqlprR3I_no-ERD4g.roa (hash: NLf7EUxe3BSu+odq1YzXIDULHf2Z5URrNMh4SALrwlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:24:8b:03:cf:fb:56:3e:4c:7d:9c:e8:39:9b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Sep 25 11:03:35 2026 GMT
Not After : Sep 26 11:03:35 2026 GMT
Subject: CN=0d842104594b8a4cf307977ed2027763f87890da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b8:d9:b6:1a:59:c8:20:bb:01:bf:64:ba:48:
0e:d9:3f:80:07:af:55:bd:5a:ec:c5:5b:70:2b:92:
63:3a:a6:36:7c:a1:d5:51:b1:17:df:f5:87:31:b5:
eb:02:7a:dd:4a:f1:db:95:50:da:84:9d:b6:66:f1:
7c:59:ef:d1:d4:25:68:8c:11:2e:0f:85:e8:26:76:
7d:dd:a4:53:82:01:4f:27:f4:d5:62:4d:8c:b7:08:
9f:f7:51:94:c1:35:d4:1c:89:22:0e:3b:b2:86:8e:
ab:77:b2:e7:75:c7:df:24:5a:5e:31:1c:90:07:ea:
af:ff:85:a7:0f:64:fb:6d:70:86:4a:83:de:48:c3:
aa:b0:38:ab:f4:e6:66:55:f6:e6:6a:bd:7d:f0:3a:
b3:28:25:ca:a0:da:0d:f3:38:36:e3:44:14:e5:b6:
87:bd:84:26:d0:3e:fd:c4:b5:31:3b:ec:74:44:2e:
8d:bd:b5:c0:9a:ac:58:80:70:5a:0c:9c:20:8a:d2:
1b:d4:2a:ec:d5:03:96:53:6c:3a:c6:c5:fb:2f:17:
cb:6c:d1:40:77:85:af:d2:97:ac:48:f7:09:51:d0:
9d:a8:0e:e9:4b:71:9a:57:97:66:da:a9:bb:d0:ac:
e4:33:6f:3e:57:9f:33:80:45:20:d3:0a:2d:df:94:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:84:21:04:59:4B:8A:4C:F3:07:97:7E:D2:02:77:63:F8:78:90:DA
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:90:6f:ab:5b:4d:f6:b6:b2:3b:00:39:72:cb:e8:ae:0e:73:
d8:e0:0a:6c:5f:20:36:78:9f:a6:8e:c2:4c:e2:d7:ae:9f:2e:
2f:29:0d:4c:3e:5e:47:24:31:ef:4e:97:b4:89:27:04:ff:e4:
11:d0:e4:85:d5:a9:e1:cf:e0:2a:2f:07:79:82:2a:f2:e5:cc:
ff:53:d0:4b:c4:91:ed:9c:62:bc:64:0d:c0:a8:d3:f7:d1:8d:
41:4d:6c:c0:8d:ae:a0:a4:8f:b8:c7:29:37:a5:e3:d0:2f:4b:
b2:a0:a9:b1:0e:3e:2c:60:87:33:e3:d1:02:95:79:8a:22:c4:
ad:3d:e6:97:88:e9:10:ec:29:41:a6:4b:09:5f:9e:2e:2a:84:
e5:82:dc:31:a2:22:f6:d5:df:ad:f6:32:45:6e:ae:18:6f:b9:
51:46:22:ba:dd:ec:74:e9:1f:b2:63:c8:ae:1e:9f:53:4c:54:
e9:38:82:a5:57:1c:fc:d1:8e:27:c1:38:04:c3:44:9f:5a:2a:
c0:0a:93:2e:a6:59:40:46:8c:21:f5:3c:d6:72:b2:e2:62:a0:
ea:e0:ab:ce:62:bd:10:37:8d:b0:e1:53:b1:6a:d9:14:ea:77:
3a:f3:ec:ee:92:6d:f6:10:e8:00:1c:14:3d:4a:07:3e:49:41:
9f:52:4c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYPCSLA8/7Vj5MfZzoOZtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjM1N2M1NDk0OWYyMGI0MDA4ODNlZDhjOThkMzczMWMz
Y2I0OTUwHhcNMjYwOTI1MTEwMzM1WhcNMjYwOTI2MTEwMzM1WjAzMTEwLwYDVQQD
EygwZDg0MjEwNDU5NGI4YTRjZjMwNzk3N2VkMjAyNzc2M2Y4Nzg5MGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bjZthpZyCC7Ab9kukgO2T+AB69V
vVrsxVtwK5JjOqY2fKHVUbEX3/WHMbXrAnrdSvHblVDahJ22ZvF8We/R1CVojBEu
D4XoJnZ93aRTggFPJ/TVYk2Mtwif91GUwTXUHIkiDjuyho6rd7LndcffJFpeMRyQ
B+qv/4WnD2T7bXCGSoPeSMOqsDir9OZmVfbmar198DqzKCXKoNoN8zg240QU5baH
vYQm0D79xLUxO+x0RC6NvbXAmqxYgHBaDJwgitIb1Crs1QOWU2w6xsX7LxfLbNFA
d4Wv0pesSPcJUdCdqA7pS3GaV5dm2qm70KzkM28+V58zgEUg0wot35QgbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2EIQRZS4pM8weXftICd2P4eJDaMB8GA1UdIwQY
MBaAFNbzV8VJSfILQAiD7YyY03McPLSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTkt
MDVmMDllZjg2ZTdiLzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yODFlZGItMGQ0Mi00MDdhLWI0NTktMDVmMDllZjg2ZTdi
LzEvMXZOWHhVbEo4Z3RBQ0lQdGpKalRjeHc4dEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJBvq1tN
9rayOwA5csvorg5z2OAKbF8gNnifpo7CTOLXrp8uLykNTD5eRyQx706XtIknBP/k
EdDkhdWp4c/gKi8HeYIq8uXM/1PQS8SR7ZxivGQNwKjT99GNQU1swI2uoKSPuMcp
N6Xj0C9LsqCpsQ4+LGCHM+PRApV5iiLErT3ml4jpEOwpQaZLCV+eLiqE5YLcMaIi
9tXfrfYyRW6uGG+5UUYiut3sdOkfsmPIrh6fU0xU6TiCpVcc/NGOJ8E4BMNEn1oq
wAqTLqZZQEaMIfU81nKy4mKg6uCrzmK9EDeNsOFTsWrZFOp3OvPs7pJt9hDoABwU
PUoHPklBn1JMzw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:51:03 2026 by rpki-client