Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: NwGsNqnTMZXsOUBYaQv1ITTo16IvVKBaaiZsKe3Qhvs=
Subject key identifier: 82:A4:31:D2:B4:DA:F8:AD:77:B8:7A:80:F2:48:F1:2C:13:28:65:B5
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 01A0C4E9CC73019FEF8F0B990121630546A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 17:00:51 +0000
Manifest this update: Mon 21 Sep 2026 17:00:51 +0000
Manifest next update: Tue 22 Sep 2026 17:00:51 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: cjL5rPtMFuMUP/AgLvfjNLT3r0CgHgoUPe4euXJ3G1M=)
2: tlqqKuREfvSDchQZG18OHn9THi0.roa (hash: Wl7Ev0O/+N6l1ewgModoKbWom1OB+k9jR2molK76grA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:cc:73:01:9f:ef:8f:0b:99:01:21:63:05:46:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Sep 21 17:00:51 2026 GMT
Not After : Sep 22 17:00:51 2026 GMT
Subject: CN=82a431d2b4daf8ad77b87a80f248f12c132865b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f6:9e:71:81:14:3d:ec:88:bd:9d:fe:44:14:
53:d8:3b:69:93:8b:15:17:b1:b2:fc:fa:43:69:db:
58:79:85:63:0e:58:d6:1f:0f:45:b0:3f:16:4a:bb:
d8:cc:f9:3f:fc:7a:f5:25:03:42:7a:87:1c:88:25:
dd:58:0a:ef:27:26:37:26:0f:82:e4:12:0b:6e:83:
38:00:db:1c:5f:a3:b4:ac:d9:f9:02:18:d5:99:7d:
b2:f3:4e:28:78:20:32:0d:48:dc:d1:8d:4d:75:84:
e3:66:80:66:64:e4:22:c4:4c:79:22:26:97:a4:cd:
32:36:cf:e8:80:fd:b8:8d:48:1a:7b:ea:3d:1b:e2:
06:3d:06:78:59:64:f7:37:6e:44:ca:2c:8f:ba:ba:
bb:e0:93:44:a4:4e:e8:99:d4:b8:c0:6a:35:98:e5:
52:fd:61:c2:bc:e4:a1:36:c3:e7:a4:b2:0c:cc:e5:
1c:a3:39:26:d7:bb:23:e3:01:02:4a:34:15:b2:84:
e8:bc:d8:82:69:2e:36:2d:f0:5a:bc:b8:7e:bb:9a:
e2:9b:68:17:87:38:7e:e8:e9:53:71:5c:30:5b:54:
8b:ee:21:c5:4d:32:76:59:cb:17:19:56:08:14:3f:
81:30:8a:e4:c5:a0:0b:da:72:2e:34:e8:cf:11:d3:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A4:31:D2:B4:DA:F8:AD:77:B8:7A:80:F2:48:F1:2C:13:28:65:B5
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:a8:d1:fb:6b:01:06:a0:58:96:6e:bb:b5:08:c9:fb:3f:
c2:7e:46:14:6b:14:5e:0a:38:8a:2e:fe:e7:46:df:3a:41:b8:
b4:b9:a4:05:3e:7e:11:16:76:5a:d9:d5:b4:08:c4:be:91:cb:
fd:29:3f:25:6d:b3:90:9b:c5:0c:ec:41:02:53:be:88:3e:ee:
dd:c0:db:e1:cb:e6:eb:19:82:98:bd:8c:2b:89:a9:82:eb:b9:
cb:05:c7:e5:8e:98:5a:87:e3:27:74:71:7e:ce:15:37:02:35:
5b:ad:24:f2:df:3e:e4:c9:c8:c3:ee:1e:80:1c:da:c4:6a:05:
7b:1b:19:3d:6d:ab:ec:27:8b:7a:d3:6c:22:b2:a6:99:c9:10:
b4:ec:20:f4:45:3d:15:6f:d1:1d:d2:7f:5f:39:9f:f7:da:b2:
8b:11:aa:f4:9d:38:ff:49:84:30:55:63:c2:0d:33:cb:32:a8:
04:c9:ad:6a:bb:69:8f:3f:00:d4:6f:01:df:da:0b:d7:3c:7f:
0f:42:b4:f1:ab:ec:49:c2:ad:6c:a2:c6:c3:27:34:0e:4c:85:
5f:49:f8:fd:dc:e8:4b:2f:31:89:6c:fc:ec:06:bc:41:d5:f3:
f9:8a:85:01:f3:7b:94:90:d8:d5:aa:84:a6:2d:12:ae:1c:89:
71:4b:32:6f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDE6cxzAZ/vjwuZASFjBUapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTVkMjg3NzEzMmFhYWRjZGY1NDA1OGFjYmY5ZTA3ZWRk
YjU5OGMwHhcNMjYwOTIxMTcwMDUxWhcNMjYwOTIyMTcwMDUxWjAzMTEwLwYDVQQD
Eyg4MmE0MzFkMmI0ZGFmOGFkNzdiODdhODBmMjQ4ZjEyYzEzMjg2NWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8faecYEUPeyIvZ3+RBRT2Dtpk4sV
F7Gy/PpDadtYeYVjDljWHw9FsD8WSrvYzPk//Hr1JQNCeocciCXdWArvJyY3Jg+C
5BILboM4ANscX6O0rNn5AhjVmX2y804oeCAyDUjc0Y1NdYTjZoBmZOQixEx5IiaX
pM0yNs/ogP24jUgae+o9G+IGPQZ4WWT3N25EyiyPurq74JNEpE7omdS4wGo1mOVS
/WHCvOShNsPnpLIMzOUcozkm17sj4wECSjQVsoTovNiCaS42LfBavLh+u5rim2gX
hzh+6OlTcVwwW1SL7iHFTTJ2WcsXGVYIFD+BMIrkxaAL2nIuNOjPEdOrgQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIKkMdK02vitd7h6gPJI8SwTKGW1MB8GA1UdIwQY
MBaAFPpV0odxMqqtzfVAWKy/ngft21mMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sWFNoM0V5cXEzTjlVQllyTC1lQi0zYldZdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTJkMjA4LWEyMmEtNDIxYy04YzVi
LWVhZjlkYTRhZGVmNi8xLzEtbFhTaDNFeXFxM045VUJZckwtZUItM2JXWXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAyLzkyZDIwOC1hMjJhLTQyMWMtOGM1Yi1lYWY5ZGE0YWRl
ZjYvMS8xLWxYU2gzRXlxcTNOOVVCWXJMLWVCLTNiV1l3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVuo
0ftrAQagWJZuu7UIyfs/wn5GFGsUXgo4ii7+50bfOkG4tLmkBT5+ERZ2WtnVtAjE
vpHL/Sk/JW2zkJvFDOxBAlO+iD7u3cDb4cvm6xmCmL2MK4mpguu5ywXH5Y6YWofj
J3Rxfs4VNwI1W60k8t8+5MnIw+4egBzaxGoFexsZPW2r7CeLetNsIrKmmckQtOwg
9EU9FW/RHdJ/Xzmf99qyixGq9J04/0mEMFVjwg0zyzKoBMmtartpjz8A1G8B39oL
1zx/D0K08avsScKtbKLGwyc0DkyFX0n4/dzoSy8xiWz87Aa8QdXz+YqFAfN7lJDY
1aqEpi0SrhyJcUsybw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:16:42 2026 by rpki-client