Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier: KZQ520cyJpDXsGEcEXo4cEs0hObo2AWd0v75ns9wndI=
Subject key identifier: 3C:08:86:53:DD:0F:D4:C3:CA:3B:D1:CD:D7:F6:18:03:51:80:35:82
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 01A0D34A88F15DE10C4A39653294D744E3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 12:01:12 +0000
Manifest this update: Thu 24 Sep 2026 12:01:12 +0000
Manifest next update: Fri 25 Sep 2026 12:01:12 +0000
Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: O2EyYsPd6H8DNu30voY6dYlJDVweDev1wUEiPjoMlF4=)
2: YPX4hTijPNtYr9QhjImFgFRXgKg.roa (hash: Uysgi8w4knYDa70kMhClAKgRlCbLW7PT65F4/2d78Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:88:f1:5d:e1:0c:4a:39:65:32:94:d7:44:e3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Sep 24 12:01:12 2026 GMT
Not After : Sep 25 12:01:12 2026 GMT
Subject: CN=3c088653dd0fd4c3ca3bd1cdd7f6180351803582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:05:ec:7f:92:00:b1:9f:92:64:e6:09:7f:
0b:bb:90:27:94:5b:97:85:2c:ee:6a:f3:83:dc:5d:
e8:9f:65:77:07:57:d0:b6:6e:65:c7:c3:cb:09:0e:
f9:f3:7d:30:07:11:66:e0:e4:55:fd:53:2d:dc:84:
4d:ab:0f:34:27:87:01:47:c7:66:1c:d0:d2:76:72:
12:7c:52:a1:82:fe:7a:81:39:9b:7f:86:b0:df:6a:
ba:4d:21:c1:c7:98:43:bc:be:b4:60:95:70:97:e6:
51:79:7c:33:e5:ec:b2:fb:02:25:f9:e1:b8:73:65:
c4:df:b2:77:b2:bb:6c:9e:e4:1b:f2:9c:c0:af:d7:
b5:8c:2d:8b:12:c3:77:a2:ea:c8:51:6d:a5:0b:77:
8a:37:97:68:af:8b:6d:cc:9f:68:b2:1c:35:cc:73:
f6:75:82:cb:df:ab:b0:5d:97:fc:b1:51:d7:d3:68:
17:48:93:00:8e:fc:82:33:2a:ab:77:7f:f9:26:8c:
19:4f:30:7e:b9:7f:35:0a:90:68:5e:f6:4b:ef:45:
83:a7:0d:a7:ac:f0:7d:f2:0f:df:ce:35:17:a8:d6:
02:77:ff:61:da:e4:ca:e5:70:43:8e:5c:6b:d3:b9:
cf:a2:81:57:51:84:71:8c:09:f2:07:77:9f:71:7d:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:08:86:53:DD:0F:D4:C3:CA:3B:D1:CD:D7:F6:18:03:51:80:35:82
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dc:bb:36:27:af:21:77:c8:7f:b9:69:f4:c7:f6:d7:26:e0:
1c:9f:f8:ac:6d:ed:27:82:db:2e:1d:b7:dc:5e:3f:f8:34:0e:
4f:0a:6c:78:e2:e9:f0:2d:3f:f2:a4:63:8b:18:6b:8f:aa:77:
3f:97:14:f1:14:0f:75:d5:cc:8e:a7:c1:af:03:69:54:29:8c:
c2:ac:ec:7c:8f:10:f4:24:e5:a5:a1:bc:bb:79:f8:01:33:63:
57:60:37:4d:8d:01:55:ab:50:bc:96:75:86:8e:dc:d2:da:45:
25:42:1d:72:69:2b:8f:c6:ff:f4:34:4c:e6:b8:7c:d8:1c:08:
a6:9d:09:14:0e:bf:1a:16:f3:a5:38:c2:0d:46:e3:62:6c:a7:
43:b2:39:3e:74:09:ab:bd:ff:84:53:8b:fe:89:48:6f:8b:a7:
19:29:2a:5f:5f:d1:82:37:c5:57:5b:da:f5:75:e7:2e:b7:dd:
81:bf:a5:49:e1:3d:fa:52:fe:10:68:68:6c:08:6b:19:17:71:
16:2a:f5:00:89:83:f0:19:d6:bb:d3:b0:cd:35:ac:4d:d4:92:
97:87:ce:47:72:80:fc:d7:10:e1:d9:cf:5b:2f:63:7d:0a:5f:
39:22:98:40:60:5f:a1:e6:28:d9:9e:6b:97:fa:e2:23:ce:ed:
24:a9:d3:47
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDTSojxXeEMSjllMpTXROPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYjc5NmQ5ODBmYTYwZmUyNTE0ZmNlNjI2NDZmNDVkMTJj
OTUxNjUwHhcNMjYwOTI0MTIwMTEyWhcNMjYwOTI1MTIwMTEyWjAzMTEwLwYDVQQD
EygzYzA4ODY1M2RkMGZkNGMzY2EzYmQxY2RkN2Y2MTgwMzUxODAzNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa8F7H+SALGfkmTmCX8Lu5AnlFuX
hSzuavOD3F3on2V3B1fQtm5lx8PLCQ75830wBxFm4ORV/VMt3IRNqw80J4cBR8dm
HNDSdnISfFKhgv56gTmbf4aw32q6TSHBx5hDvL60YJVwl+ZReXwz5eyy+wIl+eG4
c2XE37J3srtsnuQb8pzAr9e1jC2LEsN3ourIUW2lC3eKN5dor4ttzJ9oshw1zHP2
dYLL36uwXZf8sVHX02gXSJMAjvyCMyqrd3/5JowZTzB+uX81CpBoXvZL70WDpw2n
rPB98g/fzjUXqNYCd/9h2uTK5XBDjlxr07nPooFXUYRxjAnyB3efcX13IQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDwIhlPdD9TDyjvRzdf2GANRgDWCMB8GA1UdIwQY
MBaAFPq3ltmA+mD+JRT85iZG9F0SyVFlMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1yZVcyWUQ2WVA0bEZQem1Ka2IwWFJMSlVXVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvOTdmODllLTgyYjUtNDQyYi1iNjcy
LTVkMTkyZmJmY2IwYi8xLzEtcmVXMllENllQNGxGUHptSmtiMFhSTEpVV1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE4Lzk3Zjg5ZS04MmI1LTQ0MmItYjY3Mi01ZDE5MmZiZmNi
MGIvMS8xLXJlVzJZRDZZUDRsRlB6bUprYjBYUkxKVVdVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9y7
NievIXfIf7lp9Mf21ybgHJ/4rG3tJ4LbLh233F4/+DQOTwpseOLp8C0/8qRjixhr
j6p3P5cU8RQPddXMjqfBrwNpVCmMwqzsfI8Q9CTlpaG8u3n4ATNjV2A3TY0BVatQ
vJZ1ho7c0tpFJUIdcmkrj8b/9DRM5rh82BwIpp0JFA6/GhbzpTjCDUbjYmynQ7I5
PnQJq73/hFOL/olIb4unGSkqX1/RgjfFV1va9XXnLrfdgb+lSeE9+lL+EGhobAhr
GRdxFir1AImD8BnWu9OwzTWsTdSSl4fOR3KA/NcQ4dnPWy9jfQpfOSKYQGBfoeYo
2Z5rl/riI87tJKnTRw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:48:37 2026 by rpki-client