Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
File: 1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft (raw, json)
Hash identifier: j/XncDtJ/jL06Q4ABUDkP6wG8dCF/CY6JRX1hkanNcc=
Subject key identifier: D9:F3:50:EF:FB:FC:F4:61:00:EF:12:5E:A8:45:FA:E2:DC:3C:34:75
Authority key identifier: D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
Certificate issuer: /CN=d4f0455f745ef93c2d65bf73f053f631b3aecd80
Certificate serial: 01A0CA46C2B96AFB6AF067063329131FB9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:30 +0000
Manifest this update: Tue 22 Sep 2026 18:00:30 +0000
Manifest next update: Wed 23 Sep 2026 18:00:30 +0000
Files and hashes: 1: 1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl (hash: +8IJTdaa5qeCRbxux/g4lSV4pxHsc0p34ACSaHDulXA=)
2: 5vAwcbdTRz-0U7GLJ6AIyLP61fo.roa (hash: JnIHeO8xvI7ywhZBlyvW36i3gSDsUsdWcdM+GZ8Te+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:c2:b9:6a:fb:6a:f0:67:06:33:29:13:1f:b9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f0455f745ef93c2d65bf73f053f631b3aecd80
Validity
Not Before: Sep 22 18:00:30 2026 GMT
Not After : Sep 23 18:00:30 2026 GMT
Subject: CN=d9f350effbfcf46100ef125ea845fae2dc3c3475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:bc:45:49:49:ee:08:a6:ae:9a:ae:ef:df:
bf:5e:2c:0b:6e:73:0a:1b:2d:a6:e3:70:46:8d:23:
58:8e:6e:aa:34:87:f5:28:35:2d:1a:3c:cd:f6:64:
2a:87:55:24:19:0b:d8:66:cd:a5:17:86:61:73:29:
c9:99:26:d6:6e:77:71:d5:ad:44:10:2a:d2:67:02:
70:a0:6d:b8:c2:12:ab:18:a6:fd:cb:89:90:7a:1a:
fd:1e:b0:50:d3:bb:d8:28:64:08:bb:a9:7e:b1:2f:
1a:91:82:ec:f2:b9:c1:6d:3e:25:49:43:6c:5c:f2:
36:bf:f3:5b:a2:18:f7:ae:cb:ca:15:8e:b9:23:65:
52:8f:77:14:51:09:67:b7:1f:9e:f6:8a:f1:ee:12:
fe:48:b9:e9:8a:68:41:30:90:bb:7f:1d:61:b8:5a:
e2:6c:ce:f7:4a:97:cd:6d:a2:80:69:a6:ce:79:34:
97:ae:f7:7e:b5:f2:d5:f9:96:c9:a4:74:48:46:0c:
59:74:68:38:0f:0e:16:43:0d:d6:fc:20:f1:b6:57:
f4:b1:74:1c:5f:83:8d:17:90:a3:89:93:c4:76:81:
f2:93:10:1f:86:78:a6:82:93:e8:4b:bb:e7:44:a7:
1d:80:ab:4b:c3:d0:2f:c4:9f:aa:fd:82:75:81:59:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F3:50:EF:FB:FC:F4:61:00:EF:12:5E:A8:45:FA:E2:DC:3C:34:75
X509v3 Authority Key Identifier:
keyid:D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b7:79:1e:a4:e7:76:16:d9:63:7b:06:73:06:28:81:d6:3e:
a3:f6:61:55:1e:d3:15:db:8f:de:98:0c:4c:1d:0f:e5:53:70:
5d:3e:9e:27:b0:9f:e7:ac:b3:2a:60:fb:74:e0:6a:9a:75:9a:
48:50:d3:95:ae:cc:a1:54:73:8f:39:83:c0:ed:b2:3f:eb:ad:
a5:f7:57:7a:6f:ee:51:d8:50:da:80:fc:2d:5c:e4:d1:79:49:
67:2c:f8:31:59:f5:84:6d:11:c4:d7:3f:28:32:f4:db:4f:cb:
52:38:a1:c8:e4:eb:bf:54:3c:a9:55:79:7b:4f:43:b1:83:18:
17:41:38:5d:ea:b8:8a:4e:8f:6c:40:8a:23:48:59:8b:38:83:
84:db:b3:35:a6:7c:fd:72:2e:60:d8:eb:04:3b:77:1e:53:ff:
60:30:1a:01:42:4f:0f:ce:ce:3d:80:74:80:74:52:20:ca:ea:
32:d3:67:42:ad:8e:4e:5a:6c:75:ae:33:d6:f9:31:77:e0:0d:
42:cd:43:a1:a0:16:5a:11:57:7f:ca:37:5a:65:0b:d7:33:1b:
82:70:d2:5b:c7:88:f2:4a:ea:67:3d:97:b2:83:95:b8:11:d0:
d8:4a:92:de:2d:55:0f:04:36:07:8a:16:29:ad:84:f0:f4:ba:
0b:cf:ba:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRsK5avtq8GcGMykTH7nZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZjA0NTVmNzQ1ZWY5M2MyZDY1YmY3M2YwNTNmNjMxYjNh
ZWNkODAwHhcNMjYwOTIyMTgwMDMwWhcNMjYwOTIzMTgwMDMwWjAzMTEwLwYDVQQD
EyhkOWYzNTBlZmZiZmNmNDYxMDBlZjEyNWVhODQ1ZmFlMmRjM2MzNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWO8RUlJ7gimrpqu79+/XiwLbnMK
Gy2m43BGjSNYjm6qNIf1KDUtGjzN9mQqh1UkGQvYZs2lF4ZhcynJmSbWbndx1a1E
ECrSZwJwoG24whKrGKb9y4mQehr9HrBQ07vYKGQIu6l+sS8akYLs8rnBbT4lSUNs
XPI2v/Nbohj3rsvKFY65I2VSj3cUUQlntx+e9orx7hL+SLnpimhBMJC7fx1huFri
bM73SpfNbaKAaabOeTSXrvd+tfLV+ZbJpHRIRgxZdGg4Dw4WQw3W/CDxtlf0sXQc
X4ONF5CjiZPEdoHykxAfhnimgpPoS7vnRKcdgKtLw9AvxJ+q/YJ1gVlz0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnzUO/7/PRhAO8SXqhF+uLcPDR1MB8GA1UdIwQY
MBaAFNTwRV90Xvk8LWW/c/BT9jGzrs2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVBCRlgzUmUtVHd0WmI5ejhGUDJNYk91ellBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmIt
OWNjY2I3ZWYzYjViLzEvMVBCRlgzUmUtVHd0WmI5ejhGUDJNYk91ellBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84MzRmOWQtNTViNy00NTViLTk2YmItOWNjY2I3ZWYzYjVi
LzEvMVBCRlgzUmUtVHd0WmI5ejhGUDJNYk91ellBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLd5HqTn
dhbZY3sGcwYogdY+o/ZhVR7TFduP3pgMTB0P5VNwXT6eJ7Cf56yzKmD7dOBqmnWa
SFDTla7MoVRzjzmDwO2yP+utpfdXem/uUdhQ2oD8LVzk0XlJZyz4MVn1hG0RxNc/
KDL020/LUjihyOTrv1Q8qVV5e09DsYMYF0E4Xeq4ik6PbECKI0hZiziDhNuzNaZ8
/XIuYNjrBDt3HlP/YDAaAUJPD87OPYB0gHRSIMrqMtNnQq2OTlpsda4z1vkxd+AN
Qs1DoaAWWhFXf8o3WmUL1zMbgnDSW8eI8krqZz2XsoOVuBHQ2EqS3i1VDwQ2B4oW
Ka2E8PS6C8+6Yg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:19 2026 by rpki-client