Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: /NuQaa3N9zlCgBO31gtce8bARJG43N7fFIppwG5Mv8Y=
Subject key identifier: B4:14:1E:24:83:22:E6:9D:EA:31:F0:18:BE:49:B6:01:16:8F:B8:A6
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 01A0CAB49012030DCEF11FA7626C302144BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 20:00:26 +0000
Manifest this update: Tue 22 Sep 2026 20:00:26 +0000
Manifest next update: Wed 23 Sep 2026 20:00:26 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: 0oNIg23Bs6SfDZ7WAvaCX9TTqiJRDIdVGq3H5XQAMzM=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:90:12:03:0d:ce:f1:1f:a7:62:6c:30:21:44:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: Sep 22 20:00:26 2026 GMT
Not After : Sep 23 20:00:26 2026 GMT
Subject: CN=b4141e248322e69dea31f018be49b601168fb8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:de:f4:e3:9b:e9:c5:52:cf:72:f2:3d:77:
58:a7:05:c0:bd:0c:66:e6:89:f7:41:92:e5:df:90:
de:74:ef:91:8f:13:a7:de:bb:ff:18:7c:9c:b4:af:
de:3b:bc:46:3d:53:08:c0:cc:8e:4c:fd:e0:cb:a8:
9d:0e:76:30:97:c5:61:47:a1:05:87:23:70:bc:f4:
31:50:03:2a:db:a8:27:b8:32:bb:bc:0c:df:ef:ae:
2e:3d:a1:00:fe:17:05:ce:6f:10:b9:22:1e:91:fd:
a2:84:c7:ce:69:a9:ee:43:ce:df:de:3f:49:4d:60:
c4:3a:91:48:43:ba:8e:eb:af:bf:96:c1:b1:36:7e:
5d:a7:fa:02:a8:e8:20:5b:c6:d3:54:a4:6d:27:28:
94:f9:0e:3d:b4:d1:4b:1c:6a:00:a2:68:11:8a:9f:
c7:69:f5:0e:8c:26:56:0b:63:6e:ac:52:86:b7:7b:
6a:69:bf:03:63:52:f4:b4:cc:8e:a1:9e:1a:19:58:
6c:1d:e1:51:a0:9b:64:4e:66:7b:d7:9a:df:c2:0d:
15:62:b2:be:8b:44:ea:63:c9:4e:cb:21:0e:75:d3:
9e:4d:ee:11:5e:19:ed:70:c2:08:3b:2b:7f:93:38:
ae:22:1e:eb:82:cd:74:7c:5f:ac:cc:6b:cd:9c:96:
06:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:1E:24:83:22:E6:9D:EA:31:F0:18:BE:49:B6:01:16:8F:B8:A6
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:56:71:2c:cd:8a:d1:bf:70:08:fe:64:52:13:ae:5b:06:89:
09:5e:11:6a:15:8a:74:62:f0:ed:24:5b:66:52:8d:8c:51:d7:
5b:ae:3b:ee:a6:99:d1:05:7e:e9:df:ec:51:e3:39:93:c9:43:
aa:18:46:f7:17:78:28:6a:f0:2b:85:77:83:93:ff:f0:72:88:
ca:48:20:5f:78:4f:96:85:6e:22:6b:6f:c4:73:01:00:fd:5d:
6d:34:49:9f:f3:90:a6:c1:08:ab:cd:dc:30:ce:2b:be:43:d2:
3a:31:69:30:2e:e3:64:9d:6d:c1:71:0d:98:4a:50:19:5e:3d:
68:b1:4e:98:6e:41:0c:fc:66:8f:b1:f6:cb:89:cb:3a:7b:29:
45:ce:2d:63:87:b2:8a:62:30:5f:0e:fa:a2:d9:9e:f8:92:a8:
83:b6:2f:65:28:f0:62:38:1b:52:fa:e0:8f:3c:33:f2:d7:2a:
65:a8:e1:e5:cf:d8:6f:bf:74:4b:cc:24:11:53:ed:80:d4:ea:
50:a7:98:2f:ec:f6:fa:e0:69:f6:18:a7:4c:c5:a3:c3:5f:1c:
3f:42:a6:a2:cd:33:0d:88:07:08:7c:b1:94:56:92:cb:81:23:
76:f2:ec:ea:47:ce:c6:38:54:4e:ea:7b:83:67:4d:36:29:08:
fd:40:a1:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtJASAw3O8R+nYmwwIUS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOGYxMGEyYzc5MmQwZDM2NTY3OGEzNmNhN2Y3ZjE0MDlj
YTNhZmQwHhcNMjYwOTIyMjAwMDI2WhcNMjYwOTIzMjAwMDI2WjAzMTEwLwYDVQQD
EyhiNDE0MWUyNDgzMjJlNjlkZWEzMWYwMThiZTQ5YjYwMTE2OGZiOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdve9OOb6cVSz3LyPXdYpwXAvQxm
5on3QZLl35DedO+RjxOn3rv/GHyctK/eO7xGPVMIwMyOTP3gy6idDnYwl8VhR6EF
hyNwvPQxUAMq26gnuDK7vAzf764uPaEA/hcFzm8QuSIekf2ihMfOaanuQ87f3j9J
TWDEOpFIQ7qO66+/lsGxNn5dp/oCqOggW8bTVKRtJyiU+Q49tNFLHGoAomgRip/H
afUOjCZWC2NurFKGt3tqab8DY1L0tMyOoZ4aGVhsHeFRoJtkTmZ715rfwg0VYrK+
i0TqY8lOyyEOddOeTe4RXhntcMIIOyt/kziuIh7rgs10fF+szGvNnJYG4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQUHiSDIuad6jHwGL5JtgEWj7imMB8GA1UdIwQY
MBaAFOOPEKLHktDTZWeKNsp/fxQJyjr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjct
ODM1M2FhNDBiYWViLzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81MzM1ZTItMTU5OC00ODIyLTgyMjctODM1M2FhNDBiYWVi
LzEvNDQ4UW9zZVMwTk5sWjRvMnluOV9GQW5LT3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1ZxLM2K
0b9wCP5kUhOuWwaJCV4RahWKdGLw7SRbZlKNjFHXW6477qaZ0QV+6d/sUeM5k8lD
qhhG9xd4KGrwK4V3g5P/8HKIykggX3hPloVuImtvxHMBAP1dbTRJn/OQpsEIq83c
MM4rvkPSOjFpMC7jZJ1twXENmEpQGV49aLFOmG5BDPxmj7H2y4nLOnspRc4tY4ey
imIwXw76otme+JKog7YvZSjwYjgbUvrgjzwz8tcqZajh5c/Yb790S8wkEVPtgNTq
UKeYL+z2+uBp9hinTMWjw18cP0Kmos0zDYgHCHyxlFaSy4EjdvLs6kfOxjhUTup7
g2dNNikI/UChqg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:37:02 2026 by rpki-client