Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: DgVuSIsWkQvGyyVBLdS5vSRXEfj6ekIVee61U3C2Ofk=
Subject key identifier: B5:F7:65:6E:6C:F5:1C:D1:24:DD:B2:4B:03:C2:DC:FE:BC:FB:F5:01
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 01A0C66A7D8C2949082C8B40D19FAC37F591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 00:01:02 +0000
Manifest this update: Tue 22 Sep 2026 00:01:02 +0000
Manifest next update: Wed 23 Sep 2026 00:01:02 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: KWyOSwH7kdoRgsz2jGckjFwk5WIjMW3EdwoyaF+NBAU=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:7d:8c:29:49:08:2c:8b:40:d1:9f:ac:37:f5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Sep 22 00:01:02 2026 GMT
Not After : Sep 23 00:01:02 2026 GMT
Subject: CN=b5f7656e6cf51cd124ddb24b03c2dcfebcfbf501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:04:06:fd:58:ce:13:ae:1b:b8:3f:4b:93:
84:4d:76:65:fd:fd:a6:f4:d6:6f:f5:44:f6:f7:fe:
1d:05:4b:37:32:4b:62:71:a3:cf:cc:b6:88:4d:52:
70:81:4f:34:70:44:5d:ac:58:71:2e:72:87:76:69:
14:10:7d:b1:03:3b:36:89:e7:bb:54:a7:eb:d9:7f:
ca:37:78:4d:b8:53:cd:8a:11:36:40:68:fb:7f:24:
c1:3d:26:8f:8a:c8:f7:fb:28:a7:29:aa:4c:11:a5:
21:ed:55:ab:a0:ba:23:1b:d3:79:57:ec:2f:fc:af:
63:30:81:60:ee:30:ee:8f:bc:13:5a:28:00:d9:bd:
a4:5c:13:c8:b4:0a:b6:ad:c0:e2:d8:e2:7e:f5:79:
6d:57:e2:9b:57:e6:fc:b9:70:e0:82:f2:d7:d1:41:
70:d5:ec:99:3d:36:3b:63:24:70:dd:24:f9:d7:ad:
a4:8d:52:ca:bc:50:b8:83:16:cf:9e:c0:b5:5c:70:
66:f6:cb:88:3d:18:15:bc:7d:d9:42:33:0a:ba:11:
d8:30:2e:e1:2c:14:fe:cd:3d:00:68:4b:e4:5b:39:
72:b1:e8:8e:b6:fa:74:2c:ce:ea:b0:6e:65:e2:a6:
d3:6d:69:90:49:98:c8:45:36:28:af:ff:d0:38:a0:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F7:65:6E:6C:F5:1C:D1:24:DD:B2:4B:03:C2:DC:FE:BC:FB:F5:01
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:60:31:cf:ef:4f:14:89:f6:20:ce:e3:25:91:9c:21:27:23:
1d:59:df:50:5e:df:c7:78:1d:3c:2f:a3:7a:ba:85:ff:e8:4a:
e0:72:83:12:10:75:5c:8d:4f:ef:5a:ad:da:bb:de:33:b5:d0:
d6:d5:9f:f6:ec:91:66:fa:c0:b3:59:a4:bf:93:45:c1:c1:4b:
15:20:a8:16:42:d6:c3:98:ca:a1:8e:86:c6:ad:b6:ca:90:20:
30:34:cd:32:91:2b:38:9c:f4:25:a0:74:90:aa:4c:7d:ab:cf:
d2:40:57:73:2b:ad:48:d9:70:66:a2:c4:e8:32:1b:6c:66:ea:
87:bb:32:25:a0:b3:99:cc:8a:2d:80:40:1a:ca:7e:89:26:ff:
e1:10:79:57:30:2c:a7:b0:ca:7f:9d:30:f0:94:cb:ba:57:26:
cc:d9:b7:b0:13:e2:0d:91:5d:51:f9:1d:cc:18:bb:5b:98:19:
80:45:a5:96:06:f2:c7:00:23:77:01:12:55:13:76:cb:b7:bc:
04:1f:ec:26:ca:8a:85:43:60:dd:16:a4:a5:f7:89:c9:6d:db:
b7:b5:18:53:30:4b:c7:6d:1f:19:0c:91:06:3c:5f:33:d9:6c:
f9:21:e6:71:db:40:09:da:f9:2a:b9:6a:31:70:64:92:aa:d8:
0d:ac:9d:96
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDGan2MKUkILItA0Z+sN/WRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDNlOWRhZWRiNmJhNDI2YjY4MTZkMWM5MGYzNzkyMjNi
ZTc1NzYwHhcNMjYwOTIyMDAwMTAyWhcNMjYwOTIzMDAwMTAyWjAzMTEwLwYDVQQD
EyhiNWY3NjU2ZTZjZjUxY2QxMjRkZGIyNGIwM2MyZGNmZWJjZmJmNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RQEBv1YzhOuG7g/S5OETXZl/f2m
9NZv9UT29/4dBUs3MkticaPPzLaITVJwgU80cERdrFhxLnKHdmkUEH2xAzs2iee7
VKfr2X/KN3hNuFPNihE2QGj7fyTBPSaPisj3+yinKapMEaUh7VWroLojG9N5V+wv
/K9jMIFg7jDuj7wTWigA2b2kXBPItAq2rcDi2OJ+9XltV+KbV+b8uXDggvLX0UFw
1eyZPTY7YyRw3ST5162kjVLKvFC4gxbPnsC1XHBm9suIPRgVvH3ZQjMKuhHYMC7h
LBT+zT0AaEvkWzlyseiOtvp0LM7qsG5l4qbTbWmQSZjIRTYor//QOKDzlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLX3ZW5s9RzRJN2ySwPC3P68+/UBMB8GA1UdIwQY
MBaAFPjT6drttrpCa2gW0ckPN5IjvnV2MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OUHAydTIydWtKcmFCYlJ5UTgza2lPLWRYWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvMjI4ZjM0LTM1NjMtNDRkNC04ZmZi
LTZiMzI3M2YzNDRmMy8xLzEtTlBwMnUyMnVrSnJhQmJSeVE4M2tpTy1kWFkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5LzIyOGYzNC0zNTYzLTQ0ZDQtOGZmYi02YjMyNzNmMzQ0
ZjMvMS8xLU5QcDJ1MjJ1a0pyYUJiUnlRODNraU8tZFhZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGAx
z+9PFIn2IM7jJZGcIScjHVnfUF7fx3gdPC+jerqF/+hK4HKDEhB1XI1P71qt2rve
M7XQ1tWf9uyRZvrAs1mkv5NFwcFLFSCoFkLWw5jKoY6Gxq22ypAgMDTNMpErOJz0
JaB0kKpMfavP0kBXcyutSNlwZqLE6DIbbGbqh7syJaCzmcyKLYBAGsp+iSb/4RB5
VzAsp7DKf50w8JTLulcmzNm3sBPiDZFdUfkdzBi7W5gZgEWllgbyxwAjdwESVRN2
y7e8BB/sJsqKhUNg3RakpfeJyW3bt7UYUzBLx20fGQyRBjxfM9ls+SHmcdtACdr5
KrlqMXBkkqrYDaydlg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:21:16 2026 by rpki-client