Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: EKWllE0LugldYB0eFFROOUlPD/FDmlBxfg8as0WxbuU=
Subject key identifier: A0:29:4D:A2:ED:25:FE:6C:A5:B3:19:1C:28:1A:E8:AE:85:16:9A:C1
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 01A0CD7F209151ED293484C09F2A5D685FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0F40
Signing time: Wed 23 Sep 2026 09:00:55 +0000
Manifest this update: Wed 23 Sep 2026 09:00:55 +0000
Manifest next update: Thu 24 Sep 2026 09:00:55 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: wE9mOFGNDVVtb2B2uqexj3gdb9amDjQvBmFQxc3+c6E=)
2: 3oaI4BJ1PfZU5ToAgLWtvl5NwhU.roa (hash: 3ZrLLG5oIpjvCZLR27J2YMVw+al6VtK2RFAJCZ4jGnc=)
3: cJFbLtaeoUfXlMt793s1Sx4oIHk.roa (hash: Q8rXRF1zW51xxj2bD+8pa1r9iTu2h5oDnFm7rQ/g/G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:20:91:51:ed:29:34:84:c0:9f:2a:5d:68:5f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Sep 23 09:00:55 2026 GMT
Not After : Sep 24 09:00:55 2026 GMT
Subject: CN=a0294da2ed25fe6ca5b3191c281ae8ae85169ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:07:2e:f4:b1:09:7c:ca:43:ba:df:fe:b5:
a6:91:0f:93:54:2c:3f:c8:f2:cb:12:ce:21:05:b0:
07:ee:b2:ae:3f:7f:d5:5b:f1:01:e3:de:97:7d:f3:
5b:a3:eb:86:6b:99:a5:c7:71:0a:91:b1:70:5d:1c:
85:4c:d7:9a:e0:3e:b2:0b:fc:9e:07:b4:42:ed:1a:
44:99:4c:07:8c:b8:c1:68:43:3c:a6:41:36:33:4c:
ba:d3:e2:8b:5f:bd:5b:96:83:35:b3:e0:53:75:91:
65:bf:8f:7f:be:f7:b2:90:78:55:81:90:a7:11:c9:
63:8d:7b:36:4d:7f:5c:a6:e4:a3:11:92:73:d4:f2:
96:7e:f0:9d:c3:51:41:67:77:65:8a:6a:10:1a:69:
15:b4:93:03:64:2c:1b:ab:21:74:57:d3:8f:42:16:
40:9f:1f:0d:c4:73:7d:be:80:19:32:a6:48:a5:c2:
d1:f6:13:7e:af:9b:82:67:de:e8:a8:6a:6e:1e:aa:
65:8a:7f:f3:a3:a8:da:28:3f:b7:c3:76:31:f1:e8:
ba:15:aa:21:7c:65:77:d2:91:a3:3a:52:28:9a:71:
ce:2e:e1:e8:19:c8:fd:c2:5f:11:80:0c:49:39:b3:
a1:04:ab:f3:57:29:13:b9:5f:7f:20:95:4d:ec:e7:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:4D:A2:ED:25:FE:6C:A5:B3:19:1C:28:1A:E8:AE:85:16:9A:C1
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:68:3e:47:0c:3c:bf:2c:8f:50:24:ba:4e:1e:ee:5f:c2:57:
64:c6:04:f6:a7:34:a3:97:52:3e:b0:44:18:00:f0:d4:8c:7c:
e2:5e:78:ad:53:86:02:81:0d:5a:cb:fe:da:c4:a4:54:cf:7a:
57:14:07:da:e1:db:03:17:77:9f:12:0a:79:52:51:e9:36:31:
02:71:c9:83:63:f5:87:8e:89:78:e2:b2:39:70:79:12:b2:55:
b0:3d:6f:f2:ed:73:89:d6:b4:ea:ea:39:fd:2f:99:fe:a4:25:
41:85:c6:6c:08:8e:72:99:3c:52:5b:63:ab:c9:32:88:0c:5c:
f4:68:3b:f7:ef:ed:6a:41:11:a4:73:e3:b8:d5:92:4a:e4:a2:
09:d8:b4:cf:08:4e:5d:fe:84:f0:1c:66:da:78:cb:e0:a3:38:
e7:b3:d3:9e:b6:57:27:4a:7e:95:19:72:3b:4d:de:a0:e1:8d:
64:a1:85:db:36:5f:4d:01:d6:5c:ce:5c:3b:79:ca:df:bf:71:
67:8e:d0:8d:63:59:ca:56:ce:10:e4:0f:34:ec:cc:85:f1:35:
ee:35:8b:1d:0b:f4:39:f0:f0:53:ca:1c:32:1a:fa:c5:4e:d6:
af:f6:e5:7b:d8:92:14:33:a0:fe:c7:06:55:2e:ea:02:3a:4a:
93:44:a7:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfyCRUe0pNITAnypdaF+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDg5YmNlMDhjNTVkYWE1N2I0ZjNhM2M5MDcwZmIzOTE4
NTNjY2YwHhcNMjYwOTIzMDkwMDU1WhcNMjYwOTI0MDkwMDU1WjAzMTEwLwYDVQQD
EyhhMDI5NGRhMmVkMjVmZTZjYTViMzE5MWMyODFhZThhZTg1MTY5YWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhMHLvSxCXzKQ7rf/rWmkQ+TVCw/
yPLLEs4hBbAH7rKuP3/VW/EB496XffNbo+uGa5mlx3EKkbFwXRyFTNea4D6yC/ye
B7RC7RpEmUwHjLjBaEM8pkE2M0y60+KLX71bloM1s+BTdZFlv49/vveykHhVgZCn
EcljjXs2TX9cpuSjEZJz1PKWfvCdw1FBZ3dlimoQGmkVtJMDZCwbqyF0V9OPQhZA
nx8NxHN9voAZMqZIpcLR9hN+r5uCZ97oqGpuHqplin/zo6jaKD+3w3Yx8ei6Faoh
fGV30pGjOlIomnHOLuHoGcj9wl8RgAxJObOhBKvzVykTuV9/IJVN7Oe/zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKApTaLtJf5spbMZHCga6K6FFprBMB8GA1UdIwQY
MBaAFNUIm84IxV2qV7Tzo8kHD7ORhTzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAt
NmQ3MWZlMTNkNjFkLzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAtNmQ3MWZlMTNkNjFk
LzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGg+Rww8
vyyPUCS6Th7uX8JXZMYE9qc0o5dSPrBEGADw1Ix84l54rVOGAoENWsv+2sSkVM96
VxQH2uHbAxd3nxIKeVJR6TYxAnHJg2P1h46JeOKyOXB5ErJVsD1v8u1zida06uo5
/S+Z/qQlQYXGbAiOcpk8Ultjq8kyiAxc9Gg79+/takERpHPjuNWSSuSiCdi0zwhO
Xf6E8Bxm2njL4KM457PTnrZXJ0p+lRlyO03eoOGNZKGF2zZfTQHWXM5cO3nK379x
Z47QjWNZylbOEOQPNOzMhfE17jWLHQv0OfDwU8ocMhr6xU7Wr/ble9iSFDOg/scG
VS7qAjpKk0SnUQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:41:30 2026 by rpki-client