Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: tJcE9U+uynJmwAWZ+R6yGstX2KhdarWHh4qc9D7/U8A=
Subject key identifier: 91:59:F5:EA:E8:41:B1:5A:E3:F8:A8:CA:E9:49:F6:A6:E4:EF:EE:8A
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 01A0C331E6B4B6E148DF774510C240033CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 0996
Signing time: Mon 21 Sep 2026 09:00:22 +0000
Manifest this update: Mon 21 Sep 2026 09:00:22 +0000
Manifest next update: Tue 22 Sep 2026 09:00:22 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: fu6k7GYF5JpB41LTuuw3auUC9UP1QZ7fpzhcteGnekY=)
2: 8Hgg7PrGAUqoQ2u3DLHM2X1ZtEo.roa (hash: ZCvbYnwhk97Csz5gtNwxvItsTIFKupRDzbGZu2sLnLA=)
3: zQQNz1XdF3zAZxj1XnIP4uPqT3E.roa (hash: RvUin8cxUdArlkfl04+0a6IY+YkgiDeNAV0KF42kT1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:e6:b4:b6:e1:48:df:77:45:10:c2:40:03:3c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Sep 21 09:00:22 2026 GMT
Not After : Sep 22 09:00:22 2026 GMT
Subject: CN=9159f5eae841b15ae3f8a8cae949f6a6e4efee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:58:33:b8:6d:f5:6b:b5:bd:52:ed:66:87:
9c:9c:91:c7:ff:e1:ac:e2:8f:b0:c3:d9:bf:a9:1d:
f8:2b:66:dc:d5:62:6f:41:e4:f7:7d:69:11:e7:a1:
c7:ae:16:82:a8:ea:a7:7b:82:c3:a9:79:10:c0:36:
45:de:2b:10:41:60:9d:b3:2e:06:c2:d6:6c:5f:95:
07:fa:1c:f3:9b:ce:0c:f9:55:06:17:1e:f3:98:9e:
eb:4a:e6:9e:19:2d:26:c0:af:92:07:35:1a:a4:d7:
54:f3:ce:38:d0:1b:3c:e4:3f:eb:12:0b:e7:18:66:
f2:81:a9:ca:67:e5:36:37:df:c6:40:08:1e:6d:c0:
27:fb:c4:c5:84:82:e0:e2:30:c9:d1:a4:7e:9e:0b:
a1:f6:24:3c:83:0e:79:d3:b3:bf:21:c7:29:56:7d:
8b:d1:b0:81:fc:b1:2b:82:71:0c:5a:e5:78:3c:c4:
65:5b:ff:84:66:f0:78:79:ed:ce:25:20:88:cb:1e:
db:a6:20:71:61:6b:48:63:6d:d5:c2:24:ff:c7:87:
c4:8d:12:fd:7e:ad:d7:4c:6c:03:ec:6c:62:ec:17:
79:7c:e4:e1:bf:a2:42:9f:51:69:a3:81:82:b6:3d:
2d:81:af:71:96:dd:86:13:47:89:f9:2b:3d:6a:fd:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:F5:EA:E8:41:B1:5A:E3:F8:A8:CA:E9:49:F6:A6:E4:EF:EE:8A
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:93:3f:3b:21:6f:cd:b6:e2:08:80:82:80:48:5c:cc:0c:ef:
e1:77:09:5a:f5:47:cd:be:e2:b2:2f:97:bc:97:fc:64:7e:a5:
55:bc:ff:36:7f:cb:ed:56:fd:82:4d:cb:f9:1c:49:5e:e4:47:
3d:4d:98:13:c3:0e:d4:38:31:02:f4:a0:b8:6a:50:5f:e4:f9:
41:f3:39:13:13:bf:37:3a:7c:bf:0f:3f:ac:71:af:a1:23:71:
33:41:f7:cb:db:b2:54:22:c5:3b:29:ba:eb:70:80:c5:74:d2:
80:3c:1c:86:26:b2:05:94:99:fd:44:c0:06:8c:35:78:21:2d:
cd:f6:9f:48:b8:ba:73:19:ac:69:94:4f:5c:8e:dd:2e:24:54:
b9:69:eb:f4:47:15:e7:fe:1e:bc:57:db:bb:5c:9c:5d:0e:c7:
d0:2c:2a:be:7a:db:d2:4a:d3:a8:96:18:f5:ce:23:56:45:c2:
e3:88:02:53:84:53:33:f4:e6:d7:6a:51:76:4f:d4:8c:f7:13:
a7:c9:50:07:ad:00:eb:0e:c2:1b:e6:02:58:c6:55:92:f0:f4:
bf:93:c9:27:aa:e2:86:08:3f:df:fb:12:4a:c5:f7:c1:35:d9:
c6:11:3f:07:46:00:ce:7f:4c:c8:97:a9:dd:32:d1:cc:15:62:
6d:2e:56:6f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDDMea0tuFI33dFEMJAAzz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MTVlMDJiZGE3YTkwNzE0ODc4MzdkMzE1NThiNWUwMjIx
ZDNjZjkwHhcNMjYwOTIxMDkwMDIyWhcNMjYwOTIyMDkwMDIyWjAzMTEwLwYDVQQD
Eyg5MTU5ZjVlYWU4NDFiMTVhZTNmOGE4Y2FlOTQ5ZjZhNmU0ZWZlZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lxYM7ht9Wu1vVLtZoecnJHH/+Gs
4o+ww9m/qR34K2bc1WJvQeT3fWkR56HHrhaCqOqne4LDqXkQwDZF3isQQWCdsy4G
wtZsX5UH+hzzm84M+VUGFx7zmJ7rSuaeGS0mwK+SBzUapNdU88440Bs85D/rEgvn
GGbyganKZ+U2N9/GQAgebcAn+8TFhILg4jDJ0aR+nguh9iQ8gw5507O/IccpVn2L
0bCB/LErgnEMWuV4PMRlW/+EZvB4ee3OJSCIyx7bpiBxYWtIY23VwiT/x4fEjRL9
fq3XTGwD7Gxi7Bd5fOThv6JCn1Fpo4GCtj0tga9xlt2GE0eJ+Ss9av2/ZQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJFZ9eroQbFa4/ioyulJ9qbk7+6KMB8GA1UdIwQY
MBaAFPgV4CvaepBxSHg30xVYteAiHTz5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1CWGdLOXA2a0hGSWVEZlRGVmkxNENJZFBQay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2Q0NzJjLTQyNTYtNDBmZi05OGUy
LWQ5ODM4NDM5NzkyOS8xLzEtQlhnSzlwNmtIRkllRGZURlZpMTRDSWRQUGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI4L2NkNDcyYy00MjU2LTQwZmYtOThlMi1kOTgzODQzOTc5
MjkvMS8xLUJYZ0s5cDZrSEZJZURmVEZWaTE0Q0lkUFBrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJM/
OyFvzbbiCICCgEhczAzv4XcJWvVHzb7isi+XvJf8ZH6lVbz/Nn/L7Vb9gk3L+RxJ
XuRHPU2YE8MO1DgxAvSguGpQX+T5QfM5ExO/Nzp8vw8/rHGvoSNxM0H3y9uyVCLF
Oym663CAxXTSgDwchiayBZSZ/UTABow1eCEtzfafSLi6cxmsaZRPXI7dLiRUuWnr
9EcV5/4evFfbu1ycXQ7H0Cwqvnrb0krTqJYY9c4jVkXC44gCU4RTM/Tm12pRdk/U
jPcTp8lQB60A6w7CG+YCWMZVkvD0v5PJJ6rihgg/3/sSSsX3wTXZxhE/B0YAzn9M
yJep3TLRzBVibS5Wbw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:49 2026 by rpki-client