Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: 2kXhlGdWgH8G92Tr8C9x5vZQfvaHkWFRe8cOPRB2WvM=
Subject key identifier: 6C:FC:A4:CB:C1:2E:97:E3:38:EC:80:41:64:96:C7:F7:FF:10:84:A4
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 01A0CFA4AAD1F8514CD27E35E883F43EB7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 19:01:10 +0000
Manifest this update: Wed 23 Sep 2026 19:01:10 +0000
Manifest next update: Thu 24 Sep 2026 19:01:10 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: ADDx+N7dqGFozvKdxUJN5asWv5kAgC5JeWfSrFhGloY=)
2: q2viQQxnb5hv9cHSi6k5fpuWvhk.roa (hash: moDWR3w9AS8vgQ6/NXNmyaldf5yTsoXdPMVWWQQURXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:aa:d1:f8:51:4c:d2:7e:35:e8:83:f4:3e:b7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Sep 23 19:01:10 2026 GMT
Not After : Sep 24 19:01:10 2026 GMT
Subject: CN=6cfca4cbc12e97e338ec80416496c7f7ff1084a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:c9:3a:b7:a5:0a:b3:4e:8c:8f:b3:83:b7:
b9:dc:fe:1f:2f:94:ca:40:2d:c9:d1:30:64:cb:e0:
1c:46:ef:da:b4:2a:6f:50:5a:6a:00:a0:6f:bd:3a:
0d:e1:e9:f3:1a:d1:4e:df:1d:89:85:fc:a3:93:28:
7d:ad:8d:f1:86:b8:9d:80:a6:e2:07:ab:c0:44:b5:
4b:f8:60:02:05:dd:8d:03:da:ff:2e:8a:27:b5:d1:
fe:94:19:5f:86:11:d7:93:84:c3:1c:75:dc:8f:47:
2a:ef:5d:e6:e8:dc:60:f9:bc:71:8d:ef:1d:56:87:
4d:b6:14:05:7c:80:e9:50:84:50:a3:70:83:19:5b:
ae:ef:1d:09:55:c7:46:2b:3b:42:52:8a:b2:cd:20:
c4:ad:1c:af:e7:4e:c3:1a:e1:dc:e4:d1:d2:fe:8f:
b3:33:c4:90:48:61:16:c8:2c:7f:6a:a1:62:eb:ca:
2f:8e:80:55:9f:74:33:d3:e9:24:e7:6a:26:a2:2d:
54:59:e9:97:75:ea:cb:f3:70:54:58:b5:e1:b0:53:
95:2d:35:e7:6f:8b:6c:40:e4:e6:c7:02:7d:45:e7:
6f:24:18:4f:9c:8a:ee:d4:63:3c:5c:d9:a8:d4:da:
9c:27:15:ea:f7:bc:7a:27:a3:e6:63:e3:e0:8f:ae:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FC:A4:CB:C1:2E:97:E3:38:EC:80:41:64:96:C7:F7:FF:10:84:A4
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a8:6c:6f:c5:6d:82:db:c9:1d:03:3f:d0:3c:0f:ab:bb:4a:
a0:37:43:40:74:db:2c:1f:af:a3:d1:6e:24:aa:3e:b7:72:bc:
be:24:17:98:3d:c3:44:97:3b:00:14:2d:b6:89:70:05:b0:19:
23:f2:7e:31:66:7b:ad:11:15:59:fa:9b:fa:fc:30:d7:27:dd:
bf:8c:e9:79:09:85:a7:53:70:a3:50:8d:97:67:cf:ee:e6:e0:
2d:6b:2d:10:0f:f8:e2:ae:b3:17:b0:0e:67:11:a8:d3:56:b7:
4c:c8:ee:23:ab:52:f8:fa:db:59:4d:9e:8e:9a:5b:a9:b1:91:
6c:28:2e:59:3b:62:41:ae:28:53:a4:40:d8:6f:8c:8f:b9:52:
20:40:9d:28:a5:02:c3:33:f0:5e:22:94:2e:09:9e:dd:5a:6c:
7f:a5:f4:5a:86:c9:44:a5:0e:46:0e:c1:d0:ee:4c:67:b2:6d:
57:89:6b:10:18:ec:f9:84:17:66:96:c1:ba:29:2b:65:c0:28:
14:65:3f:53:9b:d7:89:f4:a0:3c:52:f3:c2:a0:ad:9e:31:ee:
9a:2d:cb:62:c4:09:99:a5:2b:04:31:b3:8d:33:42:7d:bf:09:
29:26:95:22:ad:ed:d2:8b:b9:5d:96:a9:b1:2e:58:00:c1:82:
3c:23:cf:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpKrR+FFM0n416IP0PrflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNGFkZWNkODRiYjE3NDhiZDM1Yjk5ZWNlYTQ2NzcyZTAx
ZWM5MzUwHhcNMjYwOTIzMTkwMTEwWhcNMjYwOTI0MTkwMTEwWjAzMTEwLwYDVQQD
Eyg2Y2ZjYTRjYmMxMmU5N2UzMzhlYzgwNDE2NDk2YzdmN2ZmMTA4NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu7JOrelCrNOjI+zg7e53P4fL5TK
QC3J0TBky+AcRu/atCpvUFpqAKBvvToN4enzGtFO3x2Jhfyjkyh9rY3xhridgKbi
B6vARLVL+GACBd2NA9r/LoontdH+lBlfhhHXk4TDHHXcj0cq713m6Nxg+bxxje8d
VodNthQFfIDpUIRQo3CDGVuu7x0JVcdGKztCUoqyzSDErRyv507DGuHc5NHS/o+z
M8SQSGEWyCx/aqFi68ovjoBVn3Qz0+kk52omoi1UWemXderL83BUWLXhsFOVLTXn
b4tsQOTmxwJ9RedvJBhPnIru1GM8XNmo1NqcJxXq97x6J6PmY+Pgj66Q9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz8pMvBLpfjOOyAQWSWx/f/EISkMB8GA1UdIwQY
MBaAFNJK3s2EuxdIvTW5ns6kZ3LgHsk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEt
NDhhNjA3YmJlMjVlLzEvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEtNDhhNjA3YmJlMjVl
LzEvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6hsb8Vt
gtvJHQM/0DwPq7tKoDdDQHTbLB+vo9FuJKo+t3K8viQXmD3DRJc7ABQttolwBbAZ
I/J+MWZ7rREVWfqb+vww1yfdv4zpeQmFp1Nwo1CNl2fP7ubgLWstEA/44q6zF7AO
ZxGo01a3TMjuI6tS+PrbWU2ejppbqbGRbCguWTtiQa4oU6RA2G+Mj7lSIECdKKUC
wzPwXiKULgme3Vpsf6X0WobJRKUORg7B0O5MZ7JtV4lrEBjs+YQXZpbBuikrZcAo
FGU/U5vXifSgPFLzwqCtnjHumi3LYsQJmaUrBDGzjTNCfb8JKSaVIq3t0ou5XZap
sS5YAMGCPCPP9Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:26:00 2026 by rpki-client