Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json)
Hash identifier: +hAG7U2s6egZZlox8LR3hB3dJdpnjFDx+9YIAoB8VAw=
Subject key identifier: 4C:AF:4F:0E:DB:B6:77:A6:EF:03:9B:A2:AF:EC:8C:F5:8B:A8:72:81
Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Certificate serial: 01A0D5DEB0125B67AFDD1CEB776D0519EE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
Manifest number: 1A6B
Signing time: Fri 25 Sep 2026 00:02:16 +0000
Manifest this update: Fri 25 Sep 2026 00:02:16 +0000
Manifest next update: Sat 26 Sep 2026 00:02:16 +0000
Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: dz/ukUt6Egw+bOxxtHTl0wrFwjsfBblzEoVfFHJObzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:b0:12:5b:67:af:dd:1c:eb:77:6d:05:19:ee:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa
Validity
Not Before: Sep 25 00:02:16 2026 GMT
Not After : Sep 26 00:02:16 2026 GMT
Subject: CN=4caf4f0edbb677a6ef039ba2afec8cf58ba87281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:c3:b2:23:e5:f3:61:ba:17:df:0c:8b:69:
19:88:3e:e8:9d:9f:4b:80:2b:cc:b1:9a:cc:58:bb:
d3:da:40:d0:15:a7:e9:71:cf:2d:ee:64:3b:60:f4:
7b:e1:2b:87:cd:5d:42:8c:3d:07:dd:b5:67:4a:86:
97:90:8e:79:ca:e4:b5:c1:a5:8e:a3:cb:fe:b4:e9:
2a:28:64:f2:b6:91:db:e4:39:86:ad:81:63:0b:3c:
7f:38:76:f6:6f:6b:3e:dd:35:07:96:b8:bc:8c:02:
82:51:d4:af:55:23:10:aa:6f:17:9c:eb:ca:77:60:
8a:a4:40:de:76:95:e5:90:b8:ba:79:a1:a1:d7:4b:
df:68:9e:67:cc:3e:1f:14:33:70:22:c6:30:e4:1d:
8a:e9:33:b3:d4:a7:66:da:aa:55:fd:f9:99:ff:5d:
72:37:d7:0c:d3:8d:af:bf:3a:bc:e9:24:ed:a6:09:
e1:49:ee:8b:78:55:cb:38:7f:a7:75:22:4e:69:43:
4d:3c:26:79:ce:03:18:34:f9:63:75:d6:76:39:1a:
f7:e3:55:83:b3:8b:f0:cc:d4:86:20:12:95:58:27:
88:47:cd:3a:e1:c3:54:41:79:24:66:ae:50:d6:4c:
b2:0a:f3:25:7c:3d:60:f3:86:9e:b1:98:da:9a:b1:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AF:4F:0E:DB:B6:77:A6:EF:03:9B:A2:AF:EC:8C:F5:8B:A8:72:81
X509v3 Authority Key Identifier:
keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:95:c5:87:b3:0b:51:85:3b:d3:8c:40:2d:9e:1a:33:63:fd:
25:15:64:4b:cf:f0:d8:56:77:99:9e:e7:9d:3d:fa:b4:c3:c0:
40:99:ac:bc:3b:7b:9e:68:55:7b:8f:63:3d:c4:c9:23:be:66:
73:e3:63:47:63:61:35:57:aa:b7:ff:9c:14:b4:54:06:f2:5a:
b9:52:e7:c5:a8:89:80:e1:8e:d8:4a:1e:9b:4d:66:17:af:51:
82:2c:22:05:f3:9c:fc:68:22:e3:2e:f2:cb:f5:ae:e9:88:18:
17:bd:3f:d5:ec:d0:31:21:62:eb:1f:90:26:79:43:0a:09:12:
22:f6:6b:ca:63:43:e5:27:86:86:2f:1c:5d:3c:2b:95:18:e0:
92:00:30:66:09:90:e9:27:0d:f9:3f:d5:57:56:d2:70:88:63:
35:0d:a4:c9:d2:ba:2f:ee:7d:5d:4a:09:5d:43:42:fd:7a:92:
05:a9:7e:9d:a1:aa:6f:0d:2d:f0:fb:98:16:07:fe:37:78:b1:
6b:97:e2:c8:ad:a4:77:c4:22:ba:87:a2:cf:18:f8:3f:dd:71:
f2:02:8e:ab:50:ee:3a:c2:ef:56:8c:72:6c:56:20:c8:9b:bd:
6d:7b:1b:fe:82:54:fb:e3:23:f5:e9:7a:6f:87:93:e4:6c:bb:
00:40:ac:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3rASW2ev3Rzrd20FGe5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNTVkYjQ5YTVjMWZjOTAxY2ExYTg1YzhkMjVmMTNmMTg2
ZTJmZmEwHhcNMjYwOTI1MDAwMjE2WhcNMjYwOTI2MDAwMjE2WjAzMTEwLwYDVQQD
Eyg0Y2FmNGYwZWRiYjY3N2E2ZWYwMzliYTJhZmVjOGNmNThiYTg3MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqivDsiPl82G6F98Mi2kZiD7onZ9L
gCvMsZrMWLvT2kDQFafpcc8t7mQ7YPR74SuHzV1CjD0H3bVnSoaXkI55yuS1waWO
o8v+tOkqKGTytpHb5DmGrYFjCzx/OHb2b2s+3TUHlri8jAKCUdSvVSMQqm8XnOvK
d2CKpEDedpXlkLi6eaGh10vfaJ5nzD4fFDNwIsYw5B2K6TOz1Kdm2qpV/fmZ/11y
N9cM042vvzq86STtpgnhSe6LeFXLOH+ndSJOaUNNPCZ5zgMYNPljddZ2ORr341WD
s4vwzNSGIBKVWCeIR8064cNUQXkkZq5Q1kyyCvMlfD1g84aesZjamrFlawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyvTw7btnem7wOboq/sjPWLqHKBMB8GA1UdIwQY
MBaAFAtV20mlwfyQHKGoXI0l8T8Ybi/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFYYlNhWEJfSkFjb2FoY2pTWHhQeGh1TF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81MjM5ODgtNWEwMC00MGE2LWIwNDQt
YTI3ZTc0Zjc1ZDI2LzEvQzFYYlNhWEJfSkFjb2FoY2pTWHhQeGh1TF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81MjM5ODgtNWEwMC00MGE2LWIwNDQtYTI3ZTc0Zjc1ZDI2
LzEvQzFYYlNhWEJfSkFjb2FoY2pTWHhQeGh1TF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpXFh7ML
UYU704xALZ4aM2P9JRVkS8/w2FZ3mZ7nnT36tMPAQJmsvDt7nmhVe49jPcTJI75m
c+NjR2NhNVeqt/+cFLRUBvJauVLnxaiJgOGO2Eoem01mF69RgiwiBfOc/Ggi4y7y
y/Wu6YgYF70/1ezQMSFi6x+QJnlDCgkSIvZrymND5SeGhi8cXTwrlRjgkgAwZgmQ
6ScN+T/VV1bScIhjNQ2kydK6L+59XUoJXUNC/XqSBal+naGqbw0t8PuYFgf+N3ix
a5fiyK2kd8Qiuoeizxj4P91x8gKOq1DuOsLvVoxybFYgyJu9bXsb/oJU++Mj9el6
b4eT5Gy7AECspQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:25:01 2026 by rpki-client