Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: kN87Q69kxq58ZK9OBUB+1gPsA9SsYyHvd6zPH+vrbs8=
Subject key identifier: CF:A5:EC:A6:EE:27:7A:1A:9D:1B:3B:E0:08:1F:D1:2B:C0:6F:A5:8B
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 01A0C10C7F8657C1FEAC1CB1C24A587BE698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 1A62
Signing time: Sun 20 Sep 2026 23:00:16 +0000
Manifest this update: Sun 20 Sep 2026 23:00:16 +0000
Manifest next update: Mon 21 Sep 2026 23:00:16 +0000
Files and hashes: 1: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (hash: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24=)
2: bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (hash: SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=)
3: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: bYCrGebQeORlAICkYTdCP9WmMgQgyiHz6javgIyUO+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:7f:86:57:c1:fe:ac:1c:b1:c2:4a:58:7b:e6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Sep 20 23:00:16 2026 GMT
Not After : Sep 21 23:00:16 2026 GMT
Subject: CN=cfa5eca6ee277a1a9d1b3be0081fd12bc06fa58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:31:9a:5d:48:a5:43:0b:4a:b1:04:9a:6c:
6e:ab:a4:83:2f:23:62:56:9c:48:42:c8:fc:0e:94:
d0:e4:dd:c8:b9:90:06:51:40:21:df:68:9f:19:9b:
5c:57:d4:41:e4:06:16:de:14:c5:87:82:76:6a:3d:
a4:2c:ea:de:d6:b6:b7:8b:83:c4:97:78:62:85:79:
41:47:73:ae:16:5a:3d:2a:89:0c:ad:f1:6c:0c:67:
be:d7:b8:e0:ee:97:5c:72:30:ed:49:94:06:9e:bd:
31:b9:81:61:c7:62:9d:37:c3:61:6a:0a:0c:75:57:
e3:bf:8b:9b:90:f5:00:59:47:7f:5c:fb:c7:61:d2:
11:91:47:4f:c7:7e:de:5a:61:56:f3:df:27:1b:9f:
0b:31:c4:78:07:98:00:84:bb:c3:2c:c6:0b:37:ae:
88:ca:ca:27:04:69:61:3c:dd:19:f8:14:73:72:d8:
4f:3d:7e:9c:65:e0:28:23:12:49:e2:5f:23:5a:c7:
ff:83:b0:c7:21:e8:e3:e1:c0:4b:0c:21:00:dc:13:
c2:c1:23:76:1f:a5:bc:2e:a3:af:2b:5f:6a:e4:4e:
12:ac:36:86:c8:37:82:a5:26:8e:30:7a:97:30:72:
67:a0:3d:bd:ad:8d:87:55:82:74:bb:37:55:0f:c7:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A5:EC:A6:EE:27:7A:1A:9D:1B:3B:E0:08:1F:D1:2B:C0:6F:A5:8B
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c6:63:9b:3a:2b:69:95:e3:c5:6a:78:b4:3a:ad:c6:90:af:
2a:96:c5:c1:13:a4:7a:5c:48:3a:9f:57:11:9b:13:ce:fe:da:
12:87:95:d3:14:fa:33:8b:55:53:73:cf:d9:ee:5c:c7:f2:9a:
0e:f3:bf:97:ab:15:ec:16:79:99:53:ef:59:06:c7:0a:06:e8:
ec:ea:a9:4a:2c:cd:96:36:f3:79:b6:7a:60:76:91:ee:12:72:
4c:0e:1f:2a:dd:4f:72:01:44:1e:d3:74:c7:c0:15:aa:0e:87:
0a:dd:49:9e:2d:97:b4:58:2b:05:bf:ca:06:11:ed:00:34:7e:
a1:58:56:c8:d0:c9:2e:be:9e:5b:80:d3:fe:73:dc:c1:f5:16:
2c:54:e8:20:dd:d3:3a:51:11:4c:c0:7a:2a:18:e6:21:36:76:
2c:27:55:36:16:6b:33:ac:85:a6:ae:56:1a:00:04:f7:52:99:
ab:70:e3:13:25:54:24:50:3b:c7:87:71:21:01:14:06:fd:4c:
89:55:ee:b7:26:24:a0:8c:5d:af:b1:b9:28:c3:cf:fe:cd:65:
6f:39:2f:39:50:ed:1c:c8:d1:49:cb:40:3c:93:2c:07:ae:0d:
15:f9:0b:89:1b:77:4d:32:ea:87:26:8c:4f:68:d2:6e:68:9c:
d5:e9:5e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBDH+GV8H+rByxwkpYe+aYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWQ4MTVkYjMyMjZiN2E4NDg5NjEyNjJhZDc0ZmZjMTU1
NTdmYTEwHhcNMjYwOTIwMjMwMDE2WhcNMjYwOTIxMjMwMDE2WjAzMTEwLwYDVQQD
EyhjZmE1ZWNhNmVlMjc3YTFhOWQxYjNiZTAwODFmZDEyYmMwNmZhNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ8xml1IpUMLSrEEmmxuq6SDLyNi
VpxIQsj8DpTQ5N3IuZAGUUAh32ifGZtcV9RB5AYW3hTFh4J2aj2kLOre1ra3i4PE
l3hihXlBR3OuFlo9KokMrfFsDGe+17jg7pdccjDtSZQGnr0xuYFhx2KdN8NhagoM
dVfjv4ubkPUAWUd/XPvHYdIRkUdPx37eWmFW898nG58LMcR4B5gAhLvDLMYLN66I
ysonBGlhPN0Z+BRzcthPPX6cZeAoIxJJ4l8jWsf/g7DHIejj4cBLDCEA3BPCwSN2
H6W8LqOvK19q5E4SrDaGyDeCpSaOMHqXMHJnoD29rY2HVYJ0uzdVD8daCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+l7KbuJ3oanRs74Agf0SvAb6WLMB8GA1UdIwQY
MBaAFHedgV2zImt6hIlhJirXT/wVVX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUt
NjU2MWM4NDkwNTdmLzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUtNjU2MWM4NDkwNTdm
LzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncZjmzor
aZXjxWp4tDqtxpCvKpbFwROkelxIOp9XEZsTzv7aEoeV0xT6M4tVU3PP2e5cx/Ka
DvO/l6sV7BZ5mVPvWQbHCgbo7OqpSizNljbzebZ6YHaR7hJyTA4fKt1PcgFEHtN0
x8AVqg6HCt1Jni2XtFgrBb/KBhHtADR+oVhWyNDJLr6eW4DT/nPcwfUWLFToIN3T
OlERTMB6KhjmITZ2LCdVNhZrM6yFpq5WGgAE91KZq3DjEyVUJFA7x4dxIQEUBv1M
iVXutyYkoIxdr7G5KMPP/s1lbzkvOVDtHMjRSctAPJMsB64NFfkLiRt3TTLqhyaM
T2jSbmic1eleEQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:13:27 2026 by rpki-client