Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: KLzo1+rPPvJEd42oHig0HdGHhBh2MdhP+EXl0ZqVBg4=
Subject key identifier: 55:16:8A:C7:17:6C:3B:33:AB:0A:1C:86:8E:73:50:94:3A:91:FF:C3
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 01A0C6D84386FA4B9E59B2AC23E14DA857A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 07F8
Signing time: Tue 22 Sep 2026 02:00:56 +0000
Manifest this update: Tue 22 Sep 2026 02:00:56 +0000
Manifest next update: Wed 23 Sep 2026 02:00:56 +0000
Files and hashes: 1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: OIU5B1/8mcg4KcP5KQR8GW1713dEg+evc1u4cnE9jQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:43:86:fa:4b:9e:59:b2:ac:23:e1:4d:a8:57:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Sep 22 02:00:56 2026 GMT
Not After : Sep 23 02:00:56 2026 GMT
Subject: CN=55168ac7176c3b33ab0a1c868e7350943a91ffc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:54:91:a3:43:23:10:41:1f:62:c1:27:ad:
bd:67:e8:23:01:69:ad:ef:72:f2:02:f5:de:08:60:
3f:90:a7:1c:aa:40:be:fe:2f:4d:0e:40:2e:fd:88:
e4:2f:27:a7:d8:31:82:cf:80:00:5c:00:da:37:03:
84:81:38:39:5c:59:4a:06:5e:be:ec:ae:f1:45:23:
01:e5:c7:b3:ed:1f:cc:c3:3c:b1:17:df:74:b4:b3:
ee:41:f1:2f:e9:e7:4d:a7:8f:7d:21:63:6b:7f:92:
07:ff:76:e5:d4:40:69:96:b2:f6:21:00:40:a0:d5:
1d:c0:7c:50:36:b6:d4:5c:8e:fc:77:e8:ea:80:01:
f5:0b:2a:ae:ce:72:29:d0:15:55:c7:e7:78:69:a5:
e9:ea:bd:66:58:75:a8:0f:4c:f9:51:57:6c:93:f7:
8e:03:a9:97:ff:37:ea:5e:64:db:26:b8:b9:36:29:
3f:99:bc:7a:e5:c7:d3:ac:95:f0:23:97:2a:9a:75:
44:c2:be:1c:bd:ea:ca:0e:30:8d:f3:25:46:e0:a2:
df:f9:cb:fd:30:01:44:f8:fd:f4:50:eb:5a:3f:7b:
ad:b0:3e:38:52:11:a9:c8:67:0a:da:8b:d2:b0:e7:
9b:8e:53:b6:be:a9:15:b2:61:3a:04:8b:2b:10:63:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:16:8A:C7:17:6C:3B:33:AB:0A:1C:86:8E:73:50:94:3A:91:FF:C3
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:12:a3:b0:39:e0:ff:1d:84:f6:da:03:68:90:e5:84:48:d2:
8c:b4:ea:14:5a:f3:04:2c:e5:a4:77:8b:ea:0f:8e:ec:06:3a:
2d:11:83:05:57:8e:f0:6c:eb:17:8d:c1:55:8a:85:f2:fe:e7:
2f:3a:a4:91:57:06:07:eb:a3:22:dd:c5:30:5c:c5:c0:bd:22:
de:18:67:87:71:af:4a:a2:fe:76:25:d9:c0:be:5f:95:7e:11:
25:ed:14:68:fa:b2:5b:18:a7:86:e9:37:d7:66:78:e5:a1:0a:
1a:10:d8:99:8f:b4:5b:ce:72:bf:ee:ac:0e:4a:18:d6:74:6e:
d2:d8:3d:b1:c7:96:b7:c4:c3:2b:96:f9:1e:7e:a6:99:59:e4:
c0:f1:d1:35:8e:2f:c1:e2:a6:71:83:9b:17:1c:ef:ba:60:06:
08:3e:ea:02:98:a8:54:f5:65:21:6c:9c:8c:c0:e1:fb:96:ca:
b0:6e:b8:0b:7a:2c:5c:05:27:f6:e3:d5:23:54:53:b4:da:bc:
1d:51:26:07:24:b8:c6:64:d5:d1:4c:17:bc:ae:12:82:72:64:
c2:97:4e:83:ff:cb:90:99:27:24:fe:25:3e:84:4f:44:8d:f4:
80:d9:6c:e8:cd:8e:83:1a:eb:2b:7b:95:b9:f2:cc:30:41:15:
44:0b:d7:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2EOG+kueWbKsI+FNqFelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm
YTlkNmMwHhcNMjYwOTIyMDIwMDU2WhcNMjYwOTIzMDIwMDU2WjAzMTEwLwYDVQQD
Eyg1NTE2OGFjNzE3NmMzYjMzYWIwYTFjODY4ZTczNTA5NDNhOTFmZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC5UkaNDIxBBH2LBJ629Z+gjAWmt
73LyAvXeCGA/kKccqkC+/i9NDkAu/YjkLyen2DGCz4AAXADaNwOEgTg5XFlKBl6+
7K7xRSMB5cez7R/MwzyxF990tLPuQfEv6edNp499IWNrf5IH/3bl1EBplrL2IQBA
oNUdwHxQNrbUXI78d+jqgAH1CyquznIp0BVVx+d4aaXp6r1mWHWoD0z5UVdsk/eO
A6mX/zfqXmTbJri5Nik/mbx65cfTrJXwI5cqmnVEwr4cverKDjCN8yVG4KLf+cv9
MAFE+P30UOtaP3utsD44UhGpyGcK2ovSsOebjlO2vqkVsmE6BIsrEGNgYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUWiscXbDszqwocho5zUJQ6kf/DMB8GA1UdIwQY
MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt
Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5
LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBKjsDng
/x2E9toDaJDlhEjSjLTqFFrzBCzlpHeL6g+O7AY6LRGDBVeO8GzrF43BVYqF8v7n
LzqkkVcGB+ujIt3FMFzFwL0i3hhnh3GvSqL+diXZwL5flX4RJe0UaPqyWxinhuk3
12Z45aEKGhDYmY+0W85yv+6sDkoY1nRu0tg9sceWt8TDK5b5Hn6mmVnkwPHRNY4v
weKmcYObFxzvumAGCD7qApioVPVlIWycjMDh+5bKsG64C3osXAUn9uPVI1RTtNq8
HVEmByS4xmTV0UwXvK4SgnJkwpdOg//LkJknJP4lPoRPRI30gNls6M2OgxrrK3uV
ufLMMEEVRAvXXg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:53:28 2026 by rpki-client