Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: xatNhcr7vxH/PdTFx8wyZTqUJi3Yk9mbK7NULFvGLjY=
Subject key identifier: 2C:FE:5E:67:6A:AB:FF:6E:32:5E:C8:11:9D:25:75:E4:34:74:A0:7A
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 01A0D5396589C19B8028BF7076C634BB90E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 1A92
Signing time: Thu 24 Sep 2026 21:01:43 +0000
Manifest this update: Thu 24 Sep 2026 21:01:43 +0000
Manifest next update: Fri 25 Sep 2026 21:01:43 +0000
Files and hashes: 1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: hhmuxft2uKqnhXyRc4vYM7eAU4A/dhDNfXJMYYjdV9Q=)
2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:65:89:c1:9b:80:28:bf:70:76:c6:34:bb:90:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Sep 24 21:01:43 2026 GMT
Not After : Sep 25 21:01:43 2026 GMT
Subject: CN=2cfe5e676aabff6e325ec8119d2575e43474a07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:42:1b:86:5f:aa:f4:c9:96:fb:af:5d:c3:
65:03:18:84:54:cb:76:da:3e:1a:c7:b7:62:cc:08:
9d:28:bd:ec:24:5a:1c:eb:7a:d3:c6:b1:57:8a:e4:
c9:8c:6c:b3:45:94:7a:04:e0:4a:1e:ef:46:9b:8b:
66:ca:a9:ba:59:71:36:65:ba:77:0f:39:5d:d3:29:
46:aa:9e:21:07:18:56:0f:a9:ac:b0:48:65:8b:c4:
a2:73:94:34:34:f3:6a:a5:e7:de:7a:20:70:a0:e5:
6c:f8:9a:ad:e5:2e:22:ef:8f:c9:45:68:4b:dc:96:
d9:2b:98:e2:32:c3:38:fa:f6:8a:02:75:e7:ea:9d:
29:54:7d:bf:21:21:18:6c:df:8a:6d:7c:60:bb:b2:
3b:53:2a:b6:99:b7:cc:b8:cb:f7:59:02:bd:66:ee:
ba:d5:47:6c:94:ac:84:85:fb:6a:02:ed:f0:14:df:
bb:aa:34:56:1b:af:46:f4:17:80:cb:bc:de:68:c5:
cf:89:79:09:c8:77:9f:fd:5b:ea:c8:46:a4:13:8e:
e6:52:39:0d:0b:2d:37:68:38:db:bd:70:ba:4b:0d:
9e:a5:82:d3:89:3d:53:db:5e:b6:ff:78:a1:0e:35:
7a:2d:38:77:7f:4a:9f:09:ef:d8:42:dd:81:10:38:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:5E:67:6A:AB:FF:6E:32:5E:C8:11:9D:25:75:E4:34:74:A0:7A
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f8:a2:2d:bb:e6:60:2f:b1:e5:e7:c8:76:a3:e2:61:ec:80:
85:43:24:6e:0a:87:67:51:1c:cd:6a:26:94:1a:f5:fd:95:4d:
89:7b:8d:c6:74:20:69:8f:40:63:0d:12:5a:79:1c:42:37:d8:
ef:28:34:0a:aa:03:6f:5a:e1:f3:10:cd:40:95:76:4e:c9:2b:
7a:c2:8a:66:03:06:50:81:13:1d:00:60:21:0b:c3:36:f8:c4:
de:6d:3d:57:f0:73:16:53:3f:82:16:71:35:56:ed:f3:12:ff:
5b:f1:6e:cd:37:d0:1b:34:f4:30:7b:85:cc:6d:2d:dc:66:59:
00:bb:27:72:e4:18:3b:7b:94:90:29:c6:05:d9:d0:79:2f:9b:
cb:1d:87:ef:ef:2c:80:59:07:14:cc:4c:d3:a6:1b:c5:d2:ba:
19:a2:57:58:74:7a:40:1e:4d:6a:b3:b3:93:57:de:f7:e4:3b:
cd:f8:06:31:48:9f:ba:fb:8c:c9:30:96:ab:df:f4:79:63:f8:
b8:50:04:b5:2f:e9:bd:61:38:04:14:91:50:8e:bf:a8:57:16:
63:7c:05:fc:cf:6e:bb:35:32:12:f9:4c:ee:c2:5c:3a:80:8b:
e1:24:09:79:9a:5d:b6:0a:d4:a1:35:a8:ad:9c:44:e9:8b:8a:
78:f0:d7:c4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDVOWWJwZuAKL9wdsY0u5DlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi
MmY0NjYwHhcNMjYwOTI0MjEwMTQzWhcNMjYwOTI1MjEwMTQzWjAzMTEwLwYDVQQD
EygyY2ZlNWU2NzZhYWJmZjZlMzI1ZWM4MTE5ZDI1NzVlNDM0NzRhMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbhCG4ZfqvTJlvuvXcNlAxiEVMt2
2j4ax7dizAidKL3sJFoc63rTxrFXiuTJjGyzRZR6BOBKHu9Gm4tmyqm6WXE2Zbp3
Dzld0ylGqp4hBxhWD6mssEhli8Sic5Q0NPNqpefeeiBwoOVs+Jqt5S4i74/JRWhL
3JbZK5jiMsM4+vaKAnXn6p0pVH2/ISEYbN+KbXxgu7I7Uyq2mbfMuMv3WQK9Zu66
1UdslKyEhftqAu3wFN+7qjRWG69G9BeAy7zeaMXPiXkJyHef/VvqyEakE47mUjkN
Cy03aDjbvXC6Sw2epYLTiT1T2162/3ihDjV6LTh3f0qfCe/YQt2BEDi1NwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCz+Xmdqq/9uMl7IEZ0ldeQ0dKB6MB8GA1UdIwQY
MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1
LWZkMTY3YWQ5MmE5ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2YzL2EzMjk0Yi1kNDc4LTRkYmQtYWFlNS1mZDE2N2FkOTJh
OWQvMS8xLXdZYU9mQ2dONUl4RTlhNHU1dGIycld5OUdZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvii
LbvmYC+x5efIdqPiYeyAhUMkbgqHZ1EczWomlBr1/ZVNiXuNxnQgaY9AYw0SWnkc
QjfY7yg0CqoDb1rh8xDNQJV2TskresKKZgMGUIETHQBgIQvDNvjE3m09V/BzFlM/
ghZxNVbt8xL/W/FuzTfQGzT0MHuFzG0t3GZZALsncuQYO3uUkCnGBdnQeS+byx2H
7+8sgFkHFMxM06YbxdK6GaJXWHR6QB5NarOzk1fe9+Q7zfgGMUifuvuMyTCWq9/0
eWP4uFAEtS/pvWE4BBSRUI6/qFcWY3wF/M9uuzUyEvlM7sJcOoCL4SQJeZpdtgrU
oTWorZxE6YuKePDXxA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:42:05 2026 by rpki-client