Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier: Zp0Y3LWfCzW+yClpm3Ev/CfHC5aZQ6BELdwckCY5lgE=
Subject key identifier: 44:D9:22:40:29:3D:4F:1A:92:84:44:1A:3F:28:78:2E:A9:1D:86:3A
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 01A0C7B346B733A7447ABC6F54C62F79C68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 06:00:10 +0000
Manifest this update: Tue 22 Sep 2026 06:00:10 +0000
Manifest next update: Wed 23 Sep 2026 06:00:10 +0000
Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: Tr0BGryvIm944piamj7HDyVCoky0Zqqe1pgL7SgLmrc=)
2: Rho95ZWPheaVQQ9rPl1_APX-IdU.roa (hash: C+usd2BKZ4KTjGvMtB8Sy6rObSrr4wOsZ9I+pM/IkIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:46:b7:33:a7:44:7a:bc:6f:54:c6:2f:79:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Sep 22 06:00:10 2026 GMT
Not After : Sep 23 06:00:10 2026 GMT
Subject: CN=44d92240293d4f1a9284441a3f28782ea91d863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:ab:79:94:07:fb:60:09:7f:b2:c0:6b:b0:
11:73:6b:0b:25:22:d6:82:dc:8e:4b:f3:56:ad:fc:
be:c0:b1:16:c4:aa:6f:2f:66:0d:7b:a4:36:b9:84:
b0:d0:ac:8b:a4:1c:e6:a5:51:50:98:2b:d7:ec:fd:
71:0e:7b:d0:cf:2e:5d:d3:4e:4f:10:1b:a7:32:21:
c3:85:f2:d2:11:68:a3:13:cd:95:47:be:b9:05:02:
5d:31:32:7b:f6:14:12:93:0a:2d:4c:88:76:7d:fe:
8e:75:97:41:ab:04:17:d3:24:ce:16:f5:97:c3:d6:
0c:7e:46:15:c8:a1:c6:77:f8:31:12:5e:f5:14:6d:
53:cb:ee:f9:0a:29:06:8b:60:51:23:f6:42:de:42:
9d:2f:ab:79:87:29:f9:9f:1f:9a:de:11:99:5c:93:
04:29:7e:78:ee:3b:7a:43:69:70:9e:91:9a:17:ac:
70:f9:c5:01:54:af:9b:3a:31:0b:29:2c:a3:61:cb:
d1:41:46:ff:92:55:86:b2:42:7f:84:1a:65:b8:79:
94:a3:e0:99:41:e6:71:50:a1:c5:bd:d7:38:2c:54:
7c:04:67:90:06:1a:4b:97:d5:c9:19:d1:3f:c8:7e:
f4:47:40:b3:76:4e:f8:36:53:9a:9c:17:11:b5:53:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D9:22:40:29:3D:4F:1A:92:84:44:1A:3F:28:78:2E:A9:1D:86:3A
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:06:a5:bb:64:7e:76:85:9a:af:76:f7:32:48:e8:f1:98:b0:
84:c6:41:bb:45:b5:a5:fc:5f:10:86:b8:25:d1:8a:1f:b5:98:
96:bd:a7:da:23:10:71:24:b1:85:c1:0b:ca:5d:ca:1f:ee:70:
eb:d7:8d:75:8e:07:09:4f:70:ef:07:0c:7f:93:53:8e:74:ed:
16:78:a5:36:07:df:b7:d5:06:47:8d:7e:c2:27:0b:d1:5c:36:
e3:1d:0d:f8:19:95:8e:53:4d:fb:fa:79:85:04:b9:8a:3b:54:
1a:36:07:50:6d:6d:b4:83:1c:a9:b2:ac:88:66:bc:9f:c1:df:
69:62:ff:d2:07:bc:d3:25:95:24:db:6c:9e:60:a1:d8:b0:99:
28:e1:a9:c3:d9:e1:dc:45:49:13:70:ad:41:0d:dd:32:91:0a:
47:fb:dc:37:07:82:46:c9:8a:45:34:28:26:61:55:a7:d3:47:
a7:f6:05:42:6b:31:4a:28:e1:1c:34:80:86:16:05:04:4d:17:
ce:e2:44:c3:91:9e:0e:bd:3a:57:8e:3a:b0:c2:6a:6b:3b:df:
19:1d:78:df:1b:03:96:89:00:d3:22:38:72:3c:1b:41:c5:41:
25:a8:ab:fe:5c:6f:9e:96:8d:fa:fb:89:a9:63:74:9a:3e:ec:
52:c2:24:73
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDHs0a3M6dEerxvVMYvecaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYmI0OWU2ODgzMzVhYjE1OTNmOWQxMGUwMDZlZjVlOWJj
OGJkNTYwHhcNMjYwOTIyMDYwMDEwWhcNMjYwOTIzMDYwMDEwWjAzMTEwLwYDVQQD
Eyg0NGQ5MjI0MDI5M2Q0ZjFhOTI4NDQ0MWEzZjI4NzgyZWE5MWQ4NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VqreZQH+2AJf7LAa7ARc2sLJSLW
gtyOS/NWrfy+wLEWxKpvL2YNe6Q2uYSw0KyLpBzmpVFQmCvX7P1xDnvQzy5d005P
EBunMiHDhfLSEWijE82VR765BQJdMTJ79hQSkwotTIh2ff6OdZdBqwQX0yTOFvWX
w9YMfkYVyKHGd/gxEl71FG1Ty+75CikGi2BRI/ZC3kKdL6t5hyn5nx+a3hGZXJME
KX547jt6Q2lwnpGaF6xw+cUBVK+bOjELKSyjYcvRQUb/klWGskJ/hBpluHmUo+CZ
QeZxUKHFvdc4LFR8BGeQBhpLl9XJGdE/yH70R0Czdk74NlOanBcRtVPWWQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFETZIkApPU8akoREGj8oeC6pHYY6MB8GA1UdIwQY
MBaAFPq7SeaIM1qxWT+dEOAG716byL1WMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ydEo1b2d6V3JGWlA1MFE0QWJ2WHB2SXZWWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZDdhM2JhLTA3ZTUtNDFkNi04YzM5
LTU2YTU1YzQyZGU4OC8xLzEtcnRKNW9neldyRlpQNTBRNEFidlhwdkl2VlkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2Q3YTNiYS0wN2U1LTQxZDYtOGMzOS01NmE1NWM0MmRl
ODgvMS8xLXJ0SjVvZ3pXckZaUDUwUTRBYnZYcHZJdlZZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgal
u2R+doWar3b3Mkjo8ZiwhMZBu0W1pfxfEIa4JdGKH7WYlr2n2iMQcSSxhcELyl3K
H+5w69eNdY4HCU9w7wcMf5NTjnTtFnilNgfft9UGR41+wicL0Vw24x0N+BmVjlNN
+/p5hQS5ijtUGjYHUG1ttIMcqbKsiGa8n8HfaWL/0ge80yWVJNtsnmCh2LCZKOGp
w9nh3EVJE3CtQQ3dMpEKR/vcNweCRsmKRTQoJmFVp9NHp/YFQmsxSijhHDSAhhYF
BE0XzuJEw5GeDr06V446sMJqazvfGR143xsDlokA0yI4cjwbQcVBJair/lxvnpaN
+vuJqWN0mj7sUsIkcw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:22:14 2026 by rpki-client