Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: 7ne5S/YoAaFz5gn/WjwM0PW/kDoBssqAunDE4bGNSm0=
Subject key identifier: DB:CD:43:91:72:71:B3:2A:41:CA:3A:CF:A4:EA:A7:32:28:A3:23:76
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 01A0C1E816C093901B6A99DBCB780ED72F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 12FD
Signing time: Mon 21 Sep 2026 03:00:07 +0000
Manifest this update: Mon 21 Sep 2026 03:00:07 +0000
Manifest next update: Tue 22 Sep 2026 03:00:07 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: JwNeW1ofp/QgjOwOE+6sls2e82dK5ZKaWeDZ8eCwXdQ=)
2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:16:c0:93:90:1b:6a:99:db:cb:78:0e:d7:2f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Sep 21 03:00:07 2026 GMT
Not After : Sep 22 03:00:07 2026 GMT
Subject: CN=dbcd43917271b32a41ca3acfa4eaa73228a32376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:eb:d9:97:d7:e9:e0:73:7b:f6:80:0b:e4:
a7:d6:77:dd:98:78:89:64:27:29:72:bd:45:19:47:
3a:c1:66:ee:ea:e4:11:e7:cd:a8:e3:ab:ff:95:67:
2b:06:d1:5f:1c:d4:8d:03:c4:37:44:f9:f8:c1:12:
9a:ac:96:94:7a:29:92:e6:d8:73:47:46:19:11:59:
79:c0:87:42:86:d7:78:78:74:49:00:24:94:e4:09:
d4:e5:15:87:6c:4b:e9:2e:f2:79:4a:72:83:2b:ec:
11:d3:24:7c:ca:de:0c:e0:97:50:11:0c:f0:2c:c7:
34:33:d9:1c:a2:8d:9c:55:ef:9a:50:a7:af:59:07:
3d:2f:b4:d6:d7:0b:2a:da:b9:db:15:11:e2:0f:e4:
d9:95:5f:78:ee:5c:db:1e:6f:5d:e8:7b:63:d6:c5:
bb:2c:61:bc:53:b9:ca:77:f8:5a:5d:67:91:1d:29:
53:48:f7:a2:71:7f:68:d7:35:eb:e8:e0:78:7b:36:
4d:b8:34:22:11:39:2f:2c:02:d5:7f:b3:39:0c:b2:
73:da:65:19:62:1b:2a:14:c4:2b:e5:1a:e7:ea:10:
cb:80:5f:95:71:bb:b5:86:fe:37:cf:41:24:61:48:
e5:68:e7:ec:48:0b:22:ec:ca:56:6b:45:e2:96:2b:
d3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CD:43:91:72:71:B3:2A:41:CA:3A:CF:A4:EA:A7:32:28:A3:23:76
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:11:29:f5:75:e0:9d:cf:fe:1d:92:28:74:7b:60:f3:72:81:
f1:3e:6a:26:7e:29:20:c5:5b:44:b7:5f:1e:23:a3:25:04:3b:
db:99:39:7c:e4:ff:be:a8:57:c0:45:bc:f1:c0:0d:b2:04:b4:
c6:b1:b2:ee:90:85:14:18:5c:8c:e8:64:f7:ef:07:7f:3e:3c:
82:dd:4b:8c:b5:54:be:67:1d:af:47:1c:39:b4:e1:09:e4:7c:
f1:9d:f6:9f:8e:d7:c4:05:88:3a:ac:87:26:e9:09:a1:ad:be:
82:3a:0e:8f:2c:b2:9b:d5:96:19:f3:01:36:17:55:09:99:54:
cc:9d:80:09:06:6d:11:f3:24:5c:29:55:72:3c:44:0c:fa:60:
e3:e5:55:d7:b3:8e:4e:0b:59:f4:ef:6f:40:d1:2d:e7:22:9c:
e8:e7:fe:ba:6f:44:6e:66:d4:6c:1a:5c:9e:6a:31:98:ce:c1:
d7:e9:e1:f4:33:16:61:b0:c8:b5:cb:21:0b:26:6e:21:01:e1:
e0:a8:78:dc:94:c5:27:72:6d:d6:f9:cc:fc:64:f1:bd:c9:92:
78:17:ce:e1:21:9c:fa:e3:84:c3:58:98:16:f9:b1:4e:6c:7a:
b2:f1:a3:85:82:e6:90:9c:66:4c:35:a8:29:8c:3e:df:35:25:
f4:28:0c:46
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDB6BbAk5Abapnby3gO1y+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTI0Y2U3Yjk5MTI0ZGVmYjU1YjgyNDczNThkZmRkYTM1
ZjZjZTAwHhcNMjYwOTIxMDMwMDA3WhcNMjYwOTIyMDMwMDA3WjAzMTEwLwYDVQQD
EyhkYmNkNDM5MTcyNzFiMzJhNDFjYTNhY2ZhNGVhYTczMjI4YTMyMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnknr2ZfX6eBze/aAC+Sn1nfdmHiJ
ZCcpcr1FGUc6wWbu6uQR582o46v/lWcrBtFfHNSNA8Q3RPn4wRKarJaUeimS5thz
R0YZEVl5wIdChtd4eHRJACSU5AnU5RWHbEvpLvJ5SnKDK+wR0yR8yt4M4JdQEQzw
LMc0M9kcoo2cVe+aUKevWQc9L7TW1wsq2rnbFRHiD+TZlV947lzbHm9d6Htj1sW7
LGG8U7nKd/haXWeRHSlTSPeicX9o1zXr6OB4ezZNuDQiETkvLALVf7M5DLJz2mUZ
YhsqFMQr5Rrn6hDLgF+Vcbu1hv43z0EkYUjlaOfsSAsi7MpWa0XilivTjwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNvNQ5FycbMqQco6z6TqpzIooyN2MB8GA1UdIwQY
MBaAFPkSTOe5kSTe+1W4JHNY392jX2zgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SSk01N21SSk43N1ZiZ2tjMWpmM2FOZmJPQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYmM2ZWRjLWZiMTctNGRlMC05YWE3
LWRkMjIyZTJmYjVjNy8xLzEtUkpNNTdtUkpONzdWYmdrYzFqZjNhTmZiT0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIwL2JjNmVkYy1mYjE3LTRkZTAtOWFhNy1kZDIyMmUyZmI1
YzcvMS8xLVJKTTU3bVJKTjc3VmJna2MxamYzYU5mYk9BLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBEp
9XXgnc/+HZIodHtg83KB8T5qJn4pIMVbRLdfHiOjJQQ725k5fOT/vqhXwEW88cAN
sgS0xrGy7pCFFBhcjOhk9+8Hfz48gt1LjLVUvmcdr0ccObThCeR88Z32n47XxAWI
OqyHJukJoa2+gjoOjyyym9WWGfMBNhdVCZlUzJ2ACQZtEfMkXClVcjxEDPpg4+VV
17OOTgtZ9O9vQNEt5yKc6Of+um9EbmbUbBpcnmoxmM7B1+nh9DMWYbDItcshCyZu
IQHh4Kh43JTFJ3Jt1vnM/GTxvcmSeBfO4SGc+uOEw1iYFvmxTmx6svGjhYLmkJxm
TDWoKYw+3zUl9CgMRg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:00:29 2026 by rpki-client