Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: nZpxU7PO3J0eYSR069TTr5046bMyr7o6knwilk/40gI=
Subject key identifier: E1:86:D3:92:EB:AF:58:32:67:D3:FC:24:33:9D:8C:67:0B:66:69:48
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 01A0C2C4B27DB2971847D0AE844A7F932421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 0CCF
Signing time: Mon 21 Sep 2026 07:01:05 +0000
Manifest this update: Mon 21 Sep 2026 07:01:05 +0000
Manifest next update: Tue 22 Sep 2026 07:01:05 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: 3krZv7blpTtUJJT5xYHpVjWk3wHUimKX6YpWFZZpNm8=)
2: zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa (hash: e4WusMf1jCNYs3vcwJpmwZbgUW6eoVWnObCKagC+ZGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:b2:7d:b2:97:18:47:d0:ae:84:4a:7f:93:24:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Sep 21 07:01:05 2026 GMT
Not After : Sep 22 07:01:05 2026 GMT
Subject: CN=e186d392ebaf583267d3fc24339d8c670b666948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:68:d0:15:86:14:5c:69:bb:e8:84:19:1a:cd:
a2:06:f8:57:45:e0:84:9e:24:9f:e3:1b:c4:07:b8:
f3:7c:ca:7d:c0:59:85:4c:14:ce:cf:ad:12:b6:2d:
52:c5:38:3c:b6:a8:19:f5:b5:bc:dd:82:c3:22:f3:
d3:63:2b:29:b3:61:8a:ce:58:cc:51:8c:92:c5:14:
87:38:66:87:e9:71:d8:c2:cc:49:a6:0a:05:d8:ba:
9f:71:6d:24:2a:82:b5:31:82:8c:ba:b8:22:c0:c3:
fd:22:d6:59:c5:1b:17:99:b4:a3:02:fc:33:0b:54:
b0:7c:1a:21:8e:67:fe:19:7d:75:99:b5:2f:8f:dc:
a4:75:8a:9e:38:17:f5:d0:86:04:fc:ce:9a:60:e1:
aa:eb:03:12:f4:66:6d:4b:29:cb:b7:63:69:88:4a:
50:de:f0:7b:a7:87:92:43:6e:42:01:81:06:cf:18:
3b:95:60:39:35:62:db:e0:ee:fe:37:29:9c:1b:ae:
4a:0e:e4:e2:8f:c4:e4:27:a2:45:c5:b5:e0:f9:3c:
1e:0a:7b:2d:3f:96:a5:37:23:db:e2:0a:2a:68:51:
4c:40:2d:80:43:d1:4e:53:68:ea:af:1e:ce:97:8a:
a4:00:12:3c:b4:f1:17:ac:5f:72:26:a5:ad:9e:2a:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:86:D3:92:EB:AF:58:32:67:D3:FC:24:33:9D:8C:67:0B:66:69:48
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b2:51:0e:65:73:94:fe:b5:8e:1f:c1:53:cb:55:b4:36:ed:
dd:0d:ac:32:b6:bf:a3:ed:4e:ae:fc:da:ec:ea:35:86:cf:18:
50:77:95:a4:bd:f7:4b:a8:be:1c:e0:7c:a6:44:19:40:88:e5:
b0:dc:26:c7:31:d7:ae:24:7d:cd:ea:d7:82:5f:36:af:80:28:
f0:85:22:62:7b:d5:60:34:76:40:cd:cb:da:14:d6:8d:28:c3:
63:0b:dc:f6:57:91:79:7b:bd:a0:95:4a:1f:c8:78:13:79:f3:
8e:3a:ac:24:e4:b4:0b:da:8d:8a:ba:41:0a:7a:9c:46:5a:c0:
5b:18:98:07:b6:bd:d9:19:92:18:a2:fc:e6:f6:43:23:bc:fa:
cd:ae:9c:ef:97:cd:5b:90:73:5a:9d:ef:cd:13:7e:bb:bb:78:
a2:46:0e:88:bd:ca:e1:bc:bd:f5:4c:8f:8a:31:6d:2e:c1:53:
6f:ed:b3:2e:48:38:a8:43:4c:6b:97:3a:a4:27:5b:13:fa:cb:
71:dc:3f:84:57:8c:7a:9a:26:b9:03:c7:42:37:40:e3:b1:f5:
c0:ee:f2:65:86:57:a5:b7:42:0a:75:9f:88:4d:8b:96:ee:f3:
b5:e1:f1:f2:1d:76:f9:0a:20:7f:77:e3:22:f9:cc:96:1b:ed:
96:30:72:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxLJ9spcYR9CuhEp/kyQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZmI1MjZhMzNmMzY2YWE4OTQ2MTg4ZTVkMzI2YmRjZTQ2
ZTJjNDAwHhcNMjYwOTIxMDcwMTA1WhcNMjYwOTIyMDcwMTA1WjAzMTEwLwYDVQQD
EyhlMTg2ZDM5MmViYWY1ODMyNjdkM2ZjMjQzMzlkOGM2NzBiNjY2OTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GjQFYYUXGm76IQZGs2iBvhXReCE
niSf4xvEB7jzfMp9wFmFTBTOz60Sti1SxTg8tqgZ9bW83YLDIvPTYysps2GKzljM
UYySxRSHOGaH6XHYwsxJpgoF2LqfcW0kKoK1MYKMurgiwMP9ItZZxRsXmbSjAvwz
C1SwfBohjmf+GX11mbUvj9ykdYqeOBf10IYE/M6aYOGq6wMS9GZtSynLt2NpiEpQ
3vB7p4eSQ25CAYEGzxg7lWA5NWLb4O7+NymcG65KDuTij8TkJ6JFxbXg+TweCnst
P5alNyPb4goqaFFMQC2AQ9FOU2jqrx7Ol4qkABI8tPEXrF9yJqWtnirdsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGG05Lrr1gyZ9P8JDOdjGcLZmlIMB8GA1UdIwQY
MBaAFNX7Umoz82aqiUYYjl0ya9zkbixAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYt
MGU5ZDNlY2E0NGMyLzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80YTI3Y2ItOGNkNi00NWNjLTgyNDYtMGU5ZDNlY2E0NGMy
LzEvMWZ0U2FqUHpacXFKUmhpT1hUSnIzT1J1TEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbJRDmVz
lP61jh/BU8tVtDbt3Q2sMra/o+1Orvza7Oo1hs8YUHeVpL33S6i+HOB8pkQZQIjl
sNwmxzHXriR9zerXgl82r4Ao8IUiYnvVYDR2QM3L2hTWjSjDYwvc9leReXu9oJVK
H8h4E3nzjjqsJOS0C9qNirpBCnqcRlrAWxiYB7a92RmSGKL85vZDI7z6za6c75fN
W5BzWp3vzRN+u7t4okYOiL3K4by99UyPijFtLsFTb+2zLkg4qENMa5c6pCdbE/rL
cdw/hFeMepomuQPHQjdA47H1wO7yZYZXpbdCCnWfiE2Llu7zteHx8h12+Qogf3fj
IvnMlhvtljByfw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:03:55 2026 by rpki-client