Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.mft
File: 1-xYciKaQsnNxbSF1KcJgZGo_3Hk.mft (raw, json)
Hash identifier: G0od97gfmcWYKHAXi+3J72CUbHxdKHZOvb2Y4jGfNvY=
Subject key identifier: 8D:AF:1D:C5:D0:0C:A5:24:C1:ED:81:62:76:D2:D2:7B:EE:77:AE:9D
Authority key identifier: FB:16:1C:88:A6:90:B2:73:71:6D:21:75:29:C2:60:64:6A:3F:DC:79
Certificate issuer: /CN=fb161c88a690b273716d217529c260646a3fdc79
Certificate serial: 01A0D192AD41CBD0F214AB5C7CAFB26E4A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.mft
Manifest number: 39
Signing time: Thu 24 Sep 2026 04:00:45 +0000
Manifest this update: Thu 24 Sep 2026 04:00:45 +0000
Manifest next update: Fri 25 Sep 2026 04:00:45 +0000
Files and hashes: 1: 1-xYciKaQsnNxbSF1KcJgZGo_3Hk.crl (hash: +Rhu7yGk0jJzFcclPJpJA18NQg6evX+D3GzrBn8wnsY=)
2: HgFX8FknP4q2KqoGeCz93Sm6H4k.asa (hash: KIX+mhGNBrlmCG7t0Rd/w88Z6IlXqSrCX57HY5ze+cg=)
3: vXh_l3bn8Vdh5x5X5V-g-e0fQUc.roa (hash: OhQ+LanTw9FEC9YF21udbJnIrFGmunU2GtW1mcjImvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:ad:41:cb:d0:f2:14:ab:5c:7c:af:b2:6e:4a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb161c88a690b273716d217529c260646a3fdc79
Validity
Not Before: Sep 24 04:00:45 2026 GMT
Not After : Sep 25 04:00:45 2026 GMT
Subject: CN=8daf1dc5d00ca524c1ed816276d2d27bee77ae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:bf:c0:5b:f6:27:50:0e:d2:68:57:8e:47:
27:93:ee:d4:a3:41:9d:22:52:7e:29:e5:ec:f2:50:
4c:33:fb:9a:5d:ff:f2:36:df:54:ea:f2:1b:ad:92:
a3:4d:69:9e:d4:ff:3e:d8:37:3d:1e:aa:d3:82:7d:
51:be:f8:a0:0f:72:1a:15:08:02:96:bd:83:20:02:
9d:d2:0d:aa:fc:1b:aa:e0:90:84:5f:39:3f:47:2d:
32:f2:14:ec:0b:d9:00:a5:ce:c4:46:70:37:55:6a:
7e:b6:46:ba:3c:6f:35:13:66:9b:58:25:87:58:41:
df:67:87:18:5d:84:11:d5:8a:05:59:9a:ca:dc:be:
17:ef:69:35:06:bb:29:65:eb:26:cf:82:c5:d2:ee:
66:d9:e6:90:a8:f0:4e:0b:a3:a1:16:b4:00:63:de:
9c:ae:66:91:00:db:5f:2e:b3:db:af:a6:b6:74:cc:
c3:b3:fb:2a:3f:82:9d:68:bb:36:93:3e:5f:8d:9e:
87:ef:5f:68:a2:e3:a5:f0:3d:3f:1f:88:d5:91:cc:
b5:14:93:ba:39:66:9e:a5:be:0f:0d:e6:03:41:1d:
a9:bf:aa:de:cd:31:fd:fa:83:0f:e1:17:05:7c:d0:
24:03:c3:f8:c4:2d:99:71:2c:30:99:17:f7:2a:70:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:1D:C5:D0:0C:A5:24:C1:ED:81:62:76:D2:D2:7B:EE:77:AE:9D
X509v3 Authority Key Identifier:
keyid:FB:16:1C:88:A6:90:B2:73:71:6D:21:75:29:C2:60:64:6A:3F:DC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ae:7f:ca:e2:4e:47:3e:b9:94:fb:92:2b:8c:78:b3:a1:70:
9d:66:ee:a7:8c:a0:a4:3b:78:92:03:af:55:6f:3f:4d:95:08:
2b:1a:60:6e:74:d4:3c:73:40:ec:b3:0b:18:3e:0c:b7:7f:7e:
fc:af:19:7f:81:c5:03:82:cb:00:95:ff:23:bf:13:7c:c3:ab:
75:2d:ca:46:a5:d7:d1:e7:53:81:ec:c0:d6:5e:cc:a9:7b:2b:
68:d1:22:9e:fa:60:e0:61:8d:c9:fb:90:72:88:af:3c:2f:b1:
49:91:f7:b1:4d:3d:16:ab:6d:3d:94:72:e7:aa:82:2a:32:e8:
95:16:81:e7:7e:a8:46:e8:13:ba:71:1e:bd:47:d7:cb:2d:9c:
d6:ac:ed:91:18:d6:a8:ed:81:aa:38:84:e8:54:77:f9:a7:2c:
9e:ff:29:60:df:19:5b:40:11:11:63:83:21:53:e6:cf:50:d4:
2a:d1:5d:7a:ef:a2:16:e8:93:83:b0:47:80:bc:36:1a:08:2b:
4a:3a:d7:cd:a5:6d:b7:c0:e6:6f:94:79:f4:f8:67:f1:e3:fe:
85:ce:47:f3:fc:0d:c2:98:b7:d8:a0:17:6a:fd:01:c3:c8:d2:
1e:da:03:e9:15:0a:93:2e:af:1e:13:8f:97:f5:35:6f:f5:c7:
cc:78:61:f4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDRkq1By9DyFKtcfK+ybkp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTYxYzg4YTY5MGIyNzM3MTZkMjE3NTI5YzI2MDY0NmEz
ZmRjNzkwHhcNMjYwOTI0MDQwMDQ1WhcNMjYwOTI1MDQwMDQ1WjAzMTEwLwYDVQQD
Eyg4ZGFmMWRjNWQwMGNhNTI0YzFlZDgxNjI3NmQyZDI3YmVlNzdhZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WS/wFv2J1AO0mhXjkcnk+7Uo0Gd
IlJ+KeXs8lBMM/uaXf/yNt9U6vIbrZKjTWme1P8+2Dc9HqrTgn1RvvigD3IaFQgC
lr2DIAKd0g2q/Buq4JCEXzk/Ry0y8hTsC9kApc7ERnA3VWp+tka6PG81E2abWCWH
WEHfZ4cYXYQR1YoFWZrK3L4X72k1BrspZesmz4LF0u5m2eaQqPBOC6OhFrQAY96c
rmaRANtfLrPbr6a2dMzDs/sqP4KdaLs2kz5fjZ6H719oouOl8D0/H4jVkcy1FJO6
OWaepb4PDeYDQR2pv6rezTH9+oMP4RcFfNAkA8P4xC2ZcSwwmRf3KnBAlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI2vHcXQDKUkwe2BYnbS0nvud66dMB8GA1UdIwQY
MBaAFPsWHIimkLJzcW0hdSnCYGRqP9x5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14WWNpS2FRc25OeGJTRjFLY0pnWkdvXzNIay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjAwY2NjLTA1NmItNDBhOS1iZDNh
LTM5NGE3NGVkYWFkZi8xLzEteFljaUthUXNuTnhiU0YxS2NKZ1pHb18zSGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYwMGNjYy0wNTZiLTQwYTktYmQzYS0zOTRhNzRlZGFh
ZGYvMS8xLXhZY2lLYVFzbk54YlNGMUtjSmdaR29fM0hrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS65/
yuJORz65lPuSK4x4s6FwnWbup4ygpDt4kgOvVW8/TZUIKxpgbnTUPHNA7LMLGD4M
t39+/K8Zf4HFA4LLAJX/I78TfMOrdS3KRqXX0edTgezA1l7MqXsraNEinvpg4GGN
yfuQcoivPC+xSZH3sU09FqttPZRy56qCKjLolRaB536oRugTunEevUfXyy2c1qzt
kRjWqO2BqjiE6FR3+acsnv8pYN8ZW0AREWODIVPmz1DUKtFdeu+iFuiTg7BHgLw2
GggrSjrXzaVtt8Dmb5R59Phn8eP+hc5H8/wNwpi32KAXav0Bw8jSHtoD6RUKky6v
HhOPl/U1b/XHzHhh9A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:46:40 2026 by rpki-client