Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: F85v4ALkqcfdqJxGOrHj02QtkxRyqpep9IngRBeLJ0U=
Subject key identifier: BE:93:D1:A5:65:C8:0D:34:70:5D:45:40:69:16:88:8D:69:76:D5:61
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 01A0D0B6869DBC67079AF25C994C81DD1882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 0A22
Signing time: Thu 24 Sep 2026 00:00:17 +0000
Manifest this update: Thu 24 Sep 2026 00:00:17 +0000
Manifest next update: Fri 25 Sep 2026 00:00:17 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: u+9pwK83X8xj++44EyP4qA3X2CphuooQXYFEFVyjeZk=)
2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:86:9d:bc:67:07:9a:f2:5c:99:4c:81:dd:18:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Sep 24 00:00:17 2026 GMT
Not After : Sep 25 00:00:17 2026 GMT
Subject: CN=be93d1a565c80d34705d45406916888d6976d561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:80:b2:f3:08:7b:9a:d6:bf:fe:ce:0f:5d:
b4:43:25:20:0b:f7:1b:2d:ac:b8:20:9f:f9:e3:79:
ad:b3:69:e1:df:5b:6e:65:f9:30:fc:a5:fe:d3:9a:
63:0f:ea:6b:96:12:75:31:84:e6:12:c6:75:e8:4f:
cd:88:63:c8:08:41:90:cb:b5:da:d1:72:73:1f:a9:
27:27:f3:78:fe:e5:d5:75:7a:b9:84:7f:7c:8c:50:
83:c8:f7:f1:08:2d:be:85:cb:f7:03:f7:9e:40:10:
b4:5d:22:23:c4:17:68:50:e9:80:90:dc:25:78:97:
10:8e:e2:eb:f2:2b:1f:67:86:73:b7:14:d3:3b:54:
f5:2f:40:11:ba:98:70:b3:85:51:0d:e0:28:f7:c6:
7b:55:f2:2e:e4:fc:a7:64:9b:18:d3:c4:50:5f:15:
98:d1:93:09:b0:3f:f8:aa:12:9d:4e:44:84:00:0f:
ff:c9:63:23:a0:55:4c:79:68:82:8c:7f:e5:a9:7f:
b9:95:cb:e3:25:99:59:24:a6:d9:26:d8:40:28:f6:
f9:da:a9:8e:c5:fe:b0:e7:c0:c2:e6:db:3e:78:52:
9f:80:42:fd:59:7e:94:16:99:87:e8:79:50:95:6b:
95:d8:c6:49:21:f9:7f:97:75:3a:4c:d6:f1:8b:84:
f1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:93:D1:A5:65:C8:0D:34:70:5D:45:40:69:16:88:8D:69:76:D5:61
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f6:8d:cc:67:24:cd:48:23:f8:06:f7:74:bc:90:a2:26:02:
1b:91:eb:22:74:1e:bb:e8:bd:4c:99:ec:a9:87:19:3c:79:db:
fd:0b:90:d7:82:e0:ac:eb:04:27:c7:82:33:0e:d2:ca:38:7e:
88:65:89:7b:b4:14:99:d3:a1:61:a5:5e:2d:07:ee:5f:db:a9:
7a:65:82:20:ba:09:2b:ff:cd:eb:d8:81:17:c9:a3:30:29:57:
43:6f:ff:de:5c:1a:ac:e7:95:8b:4b:d0:04:6d:f8:5a:d6:08:
0e:bc:0b:86:b5:44:3c:28:db:6d:6f:72:a6:49:7f:0e:43:f0:
2f:f4:c9:20:c2:f4:30:ac:56:08:73:d8:18:f8:50:a0:08:f5:
21:e1:77:1c:ae:6b:fa:15:35:31:fc:3b:d4:24:04:52:d8:d4:
2b:3f:01:86:e1:c5:d9:f4:4d:76:4c:19:9c:53:78:a3:c9:7c:
cb:71:5a:37:6a:59:1e:ef:92:b3:c8:5b:8c:9c:20:99:86:a2:
d6:ac:71:b9:7c:85:02:00:f5:d5:6e:7e:25:7f:aa:9d:f6:22:
cc:81:64:9a:3f:55:4a:bc:bf:61:5e:04:86:d8:88:43:ed:4b:
6f:81:a7:24:3e:d6:62:16:8b:07:e9:46:a1:51:36:aa:e0:b5:
f7:8c:66:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQtoadvGcHmvJcmUyB3RiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWQ0Yjk0MWUwNjRiNDZiYzI5YWY2NDViYzc1NDcwNGQz
YTk0YzEwHhcNMjYwOTI0MDAwMDE3WhcNMjYwOTI1MDAwMDE3WjAzMTEwLwYDVQQD
EyhiZTkzZDFhNTY1YzgwZDM0NzA1ZDQ1NDA2OTE2ODg4ZDY5NzZkNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKmAsvMIe5rWv/7OD120QyUgC/cb
Lay4IJ/543mts2nh31tuZfkw/KX+05pjD+prlhJ1MYTmEsZ16E/NiGPICEGQy7Xa
0XJzH6knJ/N4/uXVdXq5hH98jFCDyPfxCC2+hcv3A/eeQBC0XSIjxBdoUOmAkNwl
eJcQjuLr8isfZ4ZztxTTO1T1L0ARuphws4VRDeAo98Z7VfIu5PynZJsY08RQXxWY
0ZMJsD/4qhKdTkSEAA//yWMjoFVMeWiCjH/lqX+5lcvjJZlZJKbZJthAKPb52qmO
xf6w58DC5ts+eFKfgEL9WX6UFpmH6HlQlWuV2MZJIfl/l3U6TNbxi4TxVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6T0aVlyA00cF1FQGkWiI1pdtVhMB8GA1UdIwQY
MBaAFNMdS5QeBktGvCmvZFvHVHBNOpTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2Njkt
NzA1NDQ5YmRlZWI2LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zMzMxMTMtYTg5MS00ZDkyLWI2NjktNzA1NDQ5YmRlZWI2
LzEvMHgxTGxCNEdTMGE4S2E5a1c4ZFVjRTA2bE1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPaNzGck
zUgj+Ab3dLyQoiYCG5HrInQeu+i9TJnsqYcZPHnb/QuQ14LgrOsEJ8eCMw7Syjh+
iGWJe7QUmdOhYaVeLQfuX9upemWCILoJK//N69iBF8mjMClXQ2//3lwarOeVi0vQ
BG34WtYIDrwLhrVEPCjbbW9ypkl/DkPwL/TJIML0MKxWCHPYGPhQoAj1IeF3HK5r
+hU1Mfw71CQEUtjUKz8BhuHF2fRNdkwZnFN4o8l8y3FaN2pZHu+Ss8hbjJwgmYai
1qxxuXyFAgD11W5+JX+qnfYizIFkmj9VSry/YV4EhtiIQ+1Lb4GnJD7WYhaLB+lG
oVE2quC194xmtg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:43:06 2026 by rpki-client