Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: I6C/kSfeiPWMQN2N4N4RUtlQJeLyxXR2vSz5xIt4Wt4=
Subject key identifier: F0:94:D5:1B:29:1A:73:71:F7:6D:8B:73:F6:91:3B:73:5D:47:AE:4D
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 01A0C3D729CFA9E57082739E4E8EDF3FA8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 1485
Signing time: Mon 21 Sep 2026 12:00:53 +0000
Manifest this update: Mon 21 Sep 2026 12:00:53 +0000
Manifest next update: Tue 22 Sep 2026 12:00:53 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: 1k10STa+SmtVNtWk2T6jJRi96yzp+TAtgcOjdCgDUNU=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:29:cf:a9:e5:70:82:73:9e:4e:8e:df:3f:a8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Sep 21 12:00:53 2026 GMT
Not After : Sep 22 12:00:53 2026 GMT
Subject: CN=f094d51b291a7371f76d8b73f6913b735d47ae4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:5b:d6:79:73:b7:b5:90:93:10:b3:78:3f:
10:c3:24:de:4a:36:73:f4:a6:e1:b7:69:8e:6d:cf:
88:fc:9a:bd:0b:7f:48:12:f9:cc:4b:92:75:a5:89:
48:30:b3:ae:c6:d3:7f:08:25:85:8b:04:61:95:49:
f8:69:6c:6b:c0:58:2d:64:22:75:53:76:6e:3e:28:
9e:c2:ea:5d:c2:b1:e0:42:a0:f5:58:13:d0:3a:af:
45:ed:df:63:8b:2e:5f:92:34:b1:28:3f:f5:25:79:
07:09:7f:81:06:6b:19:5e:a9:b7:b5:c7:d0:72:e3:
eb:8a:37:0f:76:b1:05:ff:53:3a:59:32:a1:dd:35:
33:a2:bc:3e:0e:d1:46:60:78:c9:d9:46:f7:7a:e6:
a3:0f:c4:a8:24:54:a6:77:83:50:98:82:e8:6b:e2:
f0:b8:ff:15:97:73:2e:35:0d:7a:06:62:9f:45:df:
ed:68:af:48:4f:23:0a:33:18:31:dc:e3:61:24:f7:
4e:26:22:6f:a5:6c:7d:72:c6:9b:16:32:33:55:43:
92:f2:ef:90:76:2f:b3:bc:ec:16:fd:ad:b9:5c:c4:
0f:c8:b8:94:91:43:4a:79:e6:93:60:2b:93:77:d7:
2d:5b:57:c4:4f:75:dd:35:71:08:76:38:41:9d:4a:
86:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:94:D5:1B:29:1A:73:71:F7:6D:8B:73:F6:91:3B:73:5D:47:AE:4D
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ba:73:8b:b5:ae:d6:54:4a:50:fa:37:29:78:18:c1:d5:b8:
5c:ad:5c:71:82:e9:f1:d6:b5:c5:c8:62:c3:6e:63:5f:b3:67:
72:a3:24:e1:7a:3d:cb:38:e4:76:b6:48:5a:0a:51:0e:31:54:
ef:e0:b0:96:2a:2f:57:44:f5:b9:bf:59:bb:31:5e:5a:52:90:
47:13:d7:d3:04:ec:c7:a9:be:9d:ae:87:5c:78:86:82:c4:8c:
0a:33:41:d7:95:38:22:d3:0c:de:12:92:2e:51:4e:2c:41:10:
c7:b7:23:1a:bd:4e:0b:55:43:3a:cc:1f:82:1d:58:6f:5d:59:
68:ed:e1:06:4e:ba:a1:5b:be:5c:56:a2:d9:a1:80:ed:9f:ee:
9c:2a:4f:32:10:9d:a9:e7:63:40:f7:a0:d8:f9:8b:84:8e:45:
54:4b:c9:54:35:39:70:6f:c5:ef:82:a3:46:02:70:ef:82:a8:
fa:40:8f:c2:fa:cb:fe:42:0f:c5:c6:87:2b:0a:30:7e:38:d2:
2d:f1:a6:0b:62:d8:9f:6b:ab:36:41:1a:6f:11:93:49:7f:5f:
10:88:2c:fb:8c:bb:c1:6f:84:c0:ec:0c:e8:e3:69:b9:df:db:
05:db:60:71:e4:66:b9:31:57:74:5d:37:75:90:f4:a2:8f:3c:
f1:e2:2d:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1ynPqeVwgnOeTo7fP6irMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5
YjhkYTcwHhcNMjYwOTIxMTIwMDUzWhcNMjYwOTIyMTIwMDUzWjAzMTEwLwYDVQQD
EyhmMDk0ZDUxYjI5MWE3MzcxZjc2ZDhiNzNmNjkxM2I3MzVkNDdhZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXhb1nlzt7WQkxCzeD8QwyTeSjZz
9Kbht2mObc+I/Jq9C39IEvnMS5J1pYlIMLOuxtN/CCWFiwRhlUn4aWxrwFgtZCJ1
U3ZuPiiewupdwrHgQqD1WBPQOq9F7d9jiy5fkjSxKD/1JXkHCX+BBmsZXqm3tcfQ
cuPrijcPdrEF/1M6WTKh3TUzorw+DtFGYHjJ2Ub3euajD8SoJFSmd4NQmILoa+Lw
uP8Vl3MuNQ16BmKfRd/taK9ITyMKMxgx3ONhJPdOJiJvpWx9csabFjIzVUOS8u+Q
di+zvOwW/a25XMQPyLiUkUNKeeaTYCuTd9ctW1fET3XdNXEIdjhBnUqGFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCU1RspGnNx922Lc/aRO3NdR65NMB8GA1UdIwQY
MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt
ZDI5MmFiN2NlOWZhLzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh
LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7pzi7Wu
1lRKUPo3KXgYwdW4XK1ccYLp8da1xchiw25jX7NncqMk4Xo9yzjkdrZIWgpRDjFU
7+CwliovV0T1ub9ZuzFeWlKQRxPX0wTsx6m+na6HXHiGgsSMCjNB15U4ItMM3hKS
LlFOLEEQx7cjGr1OC1VDOswfgh1Yb11ZaO3hBk66oVu+XFai2aGA7Z/unCpPMhCd
qedjQPeg2PmLhI5FVEvJVDU5cG/F74KjRgJw74Ko+kCPwvrL/kIPxcaHKwowfjjS
LfGmC2LYn2urNkEabxGTSX9fEIgs+4y7wW+EwOwM6ONpud/bBdtgceRmuTFXdF03
dZD0oo888eItyQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:50:27 2026 by rpki-client