Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier: lJJq0V/LFCgxUFJKtyuOv1ndzDmDEGHUy3qnNQvsArM=
Subject key identifier: CF:7F:AB:99:35:BE:70:85:F6:42:9E:B6:4E:88:7A:44:4E:89:4F:F1
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial: 01A0DA289F32F2E57A821126C19C467DEBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 20:01:30 +0000
Manifest this update: Fri 25 Sep 2026 20:01:30 +0000
Manifest next update: Sat 26 Sep 2026 20:01:30 +0000
Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: 5NApO/TzlJhk2Nbo6gsJaY1c/oZ9hFwnOizE5QT4a80=)
2: oHmE_s2IgxzPCRH2-ThzQIvXCO0.roa (hash: sNd3D2Nl25u7Dz2DARN3+vH2eQ72TG1JHi7rWfuknfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:9f:32:f2:e5:7a:82:11:26:c1:9c:46:7d:eb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Validity
Not Before: Sep 25 20:01:30 2026 GMT
Not After : Sep 26 20:01:30 2026 GMT
Subject: CN=cf7fab9935be7085f6429eb64e887a444e894ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:f2:e1:65:94:56:cc:17:e8:89:b1:36:6f:
7c:d1:e3:1c:9b:bf:5a:ca:23:41:a1:3d:2b:28:4c:
58:49:e3:0e:04:cf:94:64:3e:4c:72:c8:8f:e7:5e:
0f:00:c6:97:4a:6a:d9:e2:26:a0:75:3d:40:65:63:
93:2c:85:24:fd:14:66:0c:a0:04:8e:7e:73:b8:1e:
25:96:9c:22:8b:62:bd:e6:3a:69:34:3d:cd:04:03:
17:17:d6:9a:eb:14:9f:06:0a:a9:40:77:0a:29:b5:
f9:ca:b3:31:38:85:25:78:7f:ad:2d:8a:82:f1:36:
de:bc:9e:f2:0e:23:7f:b3:00:fb:25:8f:8e:87:69:
89:5c:78:63:ff:24:25:a5:cd:b8:f5:aa:cd:66:c5:
de:09:3d:32:1b:87:7d:2a:f3:9d:c4:83:84:fd:db:
b5:ab:d0:fc:d0:df:e8:c0:79:4b:8f:09:ce:8c:9c:
4c:c1:05:e8:9f:0a:33:66:77:40:ef:0b:42:bb:d1:
2f:51:5b:9a:5c:81:80:9e:57:2f:c1:69:71:de:cd:
c8:2f:ac:76:ce:7c:38:a8:02:e4:04:e6:26:d9:a9:
0b:1b:0f:fc:2c:b1:e2:b1:b4:0a:30:09:9a:a0:68:
c0:a1:bf:ab:c6:32:80:b0:d5:bf:ed:88:d0:06:77:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7F:AB:99:35:BE:70:85:F6:42:9E:B6:4E:88:7A:44:4E:89:4F:F1
X509v3 Authority Key Identifier:
keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:77:b9:47:8e:37:b3:3c:2c:b4:ec:a7:28:6b:94:5f:f1:5b:
01:73:79:a5:73:63:6e:1b:81:48:06:29:fe:92:2e:d3:9b:41:
1f:fc:56:6a:03:66:62:b9:92:dc:df:83:e4:2a:20:9a:f2:6b:
bc:b1:64:58:47:f5:75:ef:99:6e:d9:89:d5:c9:a8:18:e1:d3:
92:af:61:98:1f:44:0c:61:33:d1:56:2b:ef:91:90:64:94:56:
7d:09:d6:36:a7:9f:86:6a:19:20:99:12:88:f2:03:b1:90:f2:
67:45:e6:2e:87:f7:9a:1c:88:35:8e:fe:52:03:8a:42:c6:8c:
e8:9b:3e:77:ea:af:b6:27:24:b6:9d:a3:bb:9b:89:08:f0:d8:
7c:13:12:2d:ae:d6:fb:8c:f8:28:11:ba:f7:28:db:fc:cc:6e:
22:3c:5b:59:19:a0:7a:c4:ac:26:62:86:33:cb:b5:d8:be:81:
c9:f3:0f:dc:95:bd:9e:74:29:26:f6:27:59:bc:cc:7d:0a:42:
3d:eb:91:17:7a:a3:12:b9:6c:96:8f:25:a2:fc:a8:6a:c8:e8:
2f:c6:8a:40:5b:c7:c1:c2:b1:94:fe:7e:28:fd:dd:bd:69:b7:
37:be:61:e2:73:03:80:4d:de:82:5f:24:82:15:cc:8e:f4:20:
e4:7b:6c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKJ8y8uV6ghEmwZxGfevDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZThkNGNiOGU0NDJlYzM4YTZiYzNmYTQwMGEyYTUxN2Nl
ZTBkMWUwHhcNMjYwOTI1MjAwMTMwWhcNMjYwOTI2MjAwMTMwWjAzMTEwLwYDVQQD
EyhjZjdmYWI5OTM1YmU3MDg1ZjY0MjllYjY0ZTg4N2E0NDRlODk0ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+/y4WWUVswX6ImxNm980eMcm79a
yiNBoT0rKExYSeMOBM+UZD5McsiP514PAMaXSmrZ4iagdT1AZWOTLIUk/RRmDKAE
jn5zuB4llpwii2K95jppND3NBAMXF9aa6xSfBgqpQHcKKbX5yrMxOIUleH+tLYqC
8TbevJ7yDiN/swD7JY+Oh2mJXHhj/yQlpc249arNZsXeCT0yG4d9KvOdxIOE/du1
q9D80N/owHlLjwnOjJxMwQXonwozZndA7wtCu9EvUVuaXIGAnlcvwWlx3s3IL6x2
znw4qALkBOYm2akLGw/8LLHisbQKMAmaoGjAob+rxjKAsNW/7YjQBnce1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9/q5k1vnCF9kKetk6IekROiU/xMB8GA1UdIwQY
MBaAFNPo1MuORC7DimvD+kAKKlF87g0eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYt
NWQ1ODcxMWYzNjYyLzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82Yjg1MGEtNGYxMi00MjA2LWE1MGYtNWQ1ODcxMWYzNjYy
LzEvMC1qVXk0NUVMc09LYThQNlFBb3FVWHp1RFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArne5R443
szwstOynKGuUX/FbAXN5pXNjbhuBSAYp/pIu05tBH/xWagNmYrmS3N+D5CogmvJr
vLFkWEf1de+ZbtmJ1cmoGOHTkq9hmB9EDGEz0VYr75GQZJRWfQnWNqefhmoZIJkS
iPIDsZDyZ0XmLof3mhyINY7+UgOKQsaM6Js+d+qvticktp2ju5uJCPDYfBMSLa7W
+4z4KBG69yjb/MxuIjxbWRmgesSsJmKGM8u12L6ByfMP3JW9nnQpJvYnWbzMfQpC
PeuRF3qjErlslo8lovyoasjoL8aKQFvHwcKxlP5+KP3dvWm3N75h4nMDgE3egl8k
ghXMjvQg5Hts/A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:19:23 2026 by rpki-client