Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
File: 1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft (raw, json)
Hash identifier: kuxM3pXgq1yEpo07GDPDRhnJtQNCw7j9Mljm3O0ptRs=
Subject key identifier: 59:35:D8:78:99:A9:5A:8E:86:C5:B0:65:91:03:FC:D6:6D:2D:82:B6
Authority key identifier: FA:42:52:A4:A7:E7:F3:2F:6E:CE:CD:A9:99:92:AA:A8:22:1D:4E:74
Certificate issuer: /CN=fa4252a4a7e7f32f6ececda99992aaa8221d4e74
Certificate serial: 01A0DD97A1664C9AFCFF07E5AD85482645BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:36 +0000
Manifest this update: Sat 26 Sep 2026 12:01:36 +0000
Manifest next update: Sun 27 Sep 2026 12:01:36 +0000
Files and hashes: 1: 1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl (hash: wzZp2GYe3tvhLwe0/5hOVboDHDqZOc+I9jrj8rzl8lc=)
2: I1oytQ2dC0mrTslmK3apIAP5fOQ.roa (hash: WdWnYz2nz10WKmvWBQa7iutQJAl62MS58LqLaXRVCgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:a1:66:4c:9a:fc:ff:07:e5:ad:85:48:26:45:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4252a4a7e7f32f6ececda99992aaa8221d4e74
Validity
Not Before: Sep 26 12:01:36 2026 GMT
Not After : Sep 27 12:01:36 2026 GMT
Subject: CN=5935d87899a95a8e86c5b0659103fcd66d2d82b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9b:0e:45:c1:6b:5b:c0:e8:cc:fe:4a:30:58:
dd:fa:20:3b:5e:98:e5:e0:93:9c:c9:22:c5:3d:ae:
62:f0:d6:62:ba:03:9d:e4:53:72:92:1f:a8:a3:f6:
4d:18:ca:24:d3:32:cf:ba:38:73:ad:d3:89:50:60:
f0:4b:21:e7:86:27:cb:b7:b2:12:f3:6f:15:61:f4:
a3:80:4a:9a:07:0a:b0:34:1e:8e:54:32:e3:df:91:
b5:f5:6b:19:a0:71:7f:4d:5f:ea:6a:af:b8:4a:60:
a1:e5:b4:b2:18:18:c6:58:39:fe:3a:83:84:8e:a1:
af:be:2c:8c:e8:54:8e:53:b2:c4:0b:7d:87:ce:84:
e4:83:f4:cf:f4:3b:ba:0f:f2:96:8d:ad:66:23:d4:
7c:d5:7c:21:de:7e:b2:ff:10:1e:ae:04:14:9d:6c:
1e:38:78:c0:26:9d:cf:61:0a:56:b2:3e:34:6e:36:
a1:ee:8d:3d:01:de:3b:be:31:fc:a5:6b:3d:86:e0:
34:2b:ff:cc:93:ef:cf:f5:a7:7f:30:4c:c3:96:27:
e3:8f:3f:06:21:8f:3d:f2:b7:57:8e:b7:90:2b:ff:
40:43:12:ab:4d:f9:fe:ae:62:ed:74:8f:a6:14:87:
4f:85:05:70:64:c7:8e:07:15:8f:a7:64:19:31:40:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:D8:78:99:A9:5A:8E:86:C5:B0:65:91:03:FC:D6:6D:2D:82:B6
X509v3 Authority Key Identifier:
keyid:FA:42:52:A4:A7:E7:F3:2F:6E:CE:CD:A9:99:92:AA:A8:22:1D:4E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:04:4c:ba:51:60:c0:3b:51:8f:3d:91:12:b5:e0:2a:82:60:
db:9d:fb:70:db:75:37:24:fe:2f:ac:d5:0e:df:6e:ba:ae:85:
2e:b7:17:11:16:a7:c1:96:9f:e0:38:de:03:6b:47:8c:01:2c:
72:ba:99:3d:59:d4:05:a2:12:a4:ba:a7:4f:6b:5e:e0:bb:0f:
2d:57:8f:fa:59:7e:34:24:0f:5c:3f:e0:25:a7:af:7b:19:2b:
c3:8d:3e:79:6e:40:1d:65:31:cc:f3:88:c2:c8:45:65:ea:69:
27:33:f5:b6:84:25:31:4a:8d:a1:26:6e:76:d0:ad:3a:42:05:
f0:42:cd:19:9a:11:37:9f:77:cc:ad:24:be:3f:d1:60:d6:b4:
5f:70:96:4b:64:4a:13:85:ee:e6:74:f3:6d:1a:f8:07:fd:56:
4c:f6:f1:16:9c:d2:af:ee:ff:df:f0:dc:b8:df:fb:01:a0:a6:
3d:4d:f2:0d:44:d1:78:75:84:bf:97:43:ae:dd:cb:09:c1:e0:
d4:a5:00:00:28:94:d6:3b:06:7d:94:e9:6a:32:b6:1c:ad:ad:
85:09:25:90:ff:4f:62:3b:bd:d0:b3:6c:b8:9d:7d:5f:28:d6:
c7:d5:de:36:69:b1:c9:71:46:31:83:5e:6c:44:37:39:a0:b4:
c2:78:ff:be
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDdl6FmTJr8/wflrYVIJkW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDI1MmE0YTdlN2YzMmY2ZWNlY2RhOTk5OTJhYWE4MjIx
ZDRlNzQwHhcNMjYwOTI2MTIwMTM2WhcNMjYwOTI3MTIwMTM2WjAzMTEwLwYDVQQD
Eyg1OTM1ZDg3ODk5YTk1YThlODZjNWIwNjU5MTAzZmNkNjZkMmQ4MmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZsORcFrW8DozP5KMFjd+iA7Xpjl
4JOcySLFPa5i8NZiugOd5FNykh+oo/ZNGMok0zLPujhzrdOJUGDwSyHnhifLt7IS
828VYfSjgEqaBwqwNB6OVDLj35G19WsZoHF/TV/qaq+4SmCh5bSyGBjGWDn+OoOE
jqGvviyM6FSOU7LEC32HzoTkg/TP9Du6D/KWja1mI9R81Xwh3n6y/xAergQUnWwe
OHjAJp3PYQpWsj40bjah7o09Ad47vjH8pWs9huA0K//Mk+/P9ad/MEzDlifjjz8G
IY898rdXjreQK/9AQxKrTfn+rmLtdI+mFIdPhQVwZMeOBxWPp2QZMUBBvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFk12HiZqVqOhsWwZZED/NZtLYK2MB8GA1UdIwQY
MBaAFPpCUqSn5/Mvbs7NqZmSqqgiHU50MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rSlNwS2ZuOHk5dXpzMnBtWktxcUNJZFRuUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNDRjNDJjLTFlNjgtNGFhYi04Mzlk
LTk1OTNlM2E0MzcyNS8xLzEta0pTcEtmbjh5OXV6czJwbVpLcXFDSWRUblEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YyLzQ0YzQyYy0xZTY4LTRhYWItODM5ZC05NTkzZTNhNDM3
MjUvMS8xLWtKU3BLZm44eTl1enMycG1aS3FxQ0lkVG5RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyARM
ulFgwDtRjz2RErXgKoJg2537cNt1NyT+L6zVDt9uuq6FLrcXERanwZaf4DjeA2tH
jAEscrqZPVnUBaISpLqnT2te4LsPLVeP+ll+NCQPXD/gJaevexkrw40+eW5AHWUx
zPOIwshFZeppJzP1toQlMUqNoSZudtCtOkIF8ELNGZoRN593zK0kvj/RYNa0X3CW
S2RKE4Xu5nTzbRr4B/1WTPbxFpzSr+7/3/DcuN/7AaCmPU3yDUTReHWEv5dDrt3L
CcHg1KUAACiU1jsGfZTpajK2HK2thQklkP9PYju90LNsuJ19XyjWx9XeNmmxyXFG
MYNebEQ3OaC0wnj/vg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:06:14 2026 by rpki-client