Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier: h7xA7HIQ8CLCBHAR856Cp6J3zT4hduvqMib+p17LzHQ=
Subject key identifier: 1A:3F:14:90:8D:54:0D:6A:5D:D9:1C:22:33:50:3E:B5:5C:EE:2E:74
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer: /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial: 01A0C9A224BE718461841A03309B215637EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number: 09F9
Signing time: Tue 22 Sep 2026 15:00:41 +0000
Manifest this update: Tue 22 Sep 2026 15:00:41 +0000
Manifest next update: Wed 23 Sep 2026 15:00:41 +0000
Files and hashes: 1: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: OhhCw1bO0CLfPJtZPlCyCQLbq3eXuaabF+nvkYkZicY=)
2: fPatIQG_vn-KpCzLNpi1KmGZICQ.roa (hash: rt2SMboQCCIlzb5Lym5TzRN3RtHv+A8V2C5lF65IdPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:24:be:71:84:61:84:1a:03:30:9b:21:56:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Validity
Not Before: Sep 22 15:00:41 2026 GMT
Not After : Sep 23 15:00:41 2026 GMT
Subject: CN=1a3f14908d540d6a5dd91c2233503eb55cee2e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:0d:8e:76:8a:c5:a7:7d:a7:df:32:2d:67:
29:11:e0:41:39:b0:34:e0:5f:97:31:73:18:7f:8a:
30:8c:1f:2c:74:62:fc:c2:cd:93:ed:51:c7:f2:23:
e3:22:ba:31:5a:2c:e5:5f:0a:78:c7:5c:91:d2:b4:
6d:e2:50:64:7e:8a:07:f4:a5:9e:69:51:81:51:72:
fc:5b:95:8d:2c:89:f4:4f:a0:0c:56:e8:b9:5f:dd:
da:00:6b:f7:15:dc:99:34:54:af:be:e7:9a:20:f0:
eb:ab:dd:79:37:9c:d4:67:0e:5c:15:1f:a9:c3:d2:
d4:8b:8e:f4:68:de:9b:45:b1:5e:e3:b1:a2:ac:ff:
7d:7d:50:df:13:3f:9a:e0:0d:05:7d:32:83:db:86:
3a:35:71:27:b4:d2:12:ab:f7:9b:4a:24:af:35:04:
bb:86:c1:60:9b:f3:52:94:d7:34:ff:81:a5:4c:a9:
1c:85:19:ea:1c:74:be:06:78:2a:ed:10:a8:9f:05:
fa:3b:2d:63:5a:4c:dd:c5:03:fc:61:d5:73:4a:e3:
11:91:a8:74:29:4e:01:73:0e:5e:5c:bf:ff:95:5b:
14:bb:50:2f:09:fe:a4:fe:d6:2a:de:38:0c:0a:61:
c5:a2:db:15:cc:02:5d:c0:9c:fb:4c:64:47:ce:19:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3F:14:90:8D:54:0D:6A:5D:D9:1C:22:33:50:3E:B5:5C:EE:2E:74
X509v3 Authority Key Identifier:
keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:69:35:56:32:6b:d9:02:41:c7:c0:9c:b4:70:62:10:21:7a:
22:de:67:a8:c2:f5:35:dd:6e:ce:8b:1d:d9:d7:62:81:44:4a:
70:1d:75:ec:70:3b:44:6e:a8:35:da:a1:83:b6:49:ce:0d:61:
7c:2d:06:ed:52:de:67:cb:24:2f:42:a7:05:36:55:c6:68:55:
e3:84:e3:6f:57:98:b2:05:1b:49:31:f6:b9:3e:70:77:a5:cb:
fb:b2:d3:a7:98:cc:76:bc:01:9a:d6:f1:51:6b:55:6d:a2:a2:
c9:a8:33:81:d3:04:a2:69:f7:38:5d:f2:96:8c:e3:d6:50:51:
c4:de:35:82:b8:3d:63:32:0b:75:3f:ae:fa:25:79:c9:a7:b2:
95:e4:a4:06:0d:44:f6:19:94:a2:2c:d8:b6:ab:d1:cb:e6:c4:
a7:84:7c:0c:95:89:34:76:71:a4:bd:6b:5c:b3:ab:f1:f3:b6:
ad:17:69:d7:cd:0a:f6:79:c9:90:de:6d:db:5f:fd:c2:10:8a:
54:d2:96:42:6f:58:b2:2f:b2:2f:2f:6f:33:ac:47:c6:51:91:
a1:f6:e0:b9:33:2b:0d:a8:ee:87:12:ff:3b:a0:6e:32:94:40:
90:9c:aa:fe:48:73:1e:65:e9:27:61:57:4f:0b:10:7e:93:c4:
3d:29:27:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJoiS+cYRhhBoDMJshVjfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTg0NWY4NmNiYzNjZmE5ZTBlNzk4N2EwMzgyZDVkMGRk
N2NlM2UwHhcNMjYwOTIyMTUwMDQxWhcNMjYwOTIzMTUwMDQxWjAzMTEwLwYDVQQD
EygxYTNmMTQ5MDhkNTQwZDZhNWRkOTFjMjIzMzUwM2ViNTVjZWUyZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrgNjnaKxad9p98yLWcpEeBBObA0
4F+XMXMYf4owjB8sdGL8ws2T7VHH8iPjIroxWizlXwp4x1yR0rRt4lBkfooH9KWe
aVGBUXL8W5WNLIn0T6AMVui5X93aAGv3FdyZNFSvvueaIPDrq915N5zUZw5cFR+p
w9LUi470aN6bRbFe47GirP99fVDfEz+a4A0FfTKD24Y6NXEntNISq/ebSiSvNQS7
hsFgm/NSlNc0/4GlTKkchRnqHHS+Bngq7RConwX6Oy1jWkzdxQP8YdVzSuMRkah0
KU4Bcw5eXL//lVsUu1AvCf6k/tYq3jgMCmHFotsVzAJdwJz7TGRHzhnwhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBo/FJCNVA1qXdkcIjNQPrVc7i50MB8GA1UdIwQY
MBaAFANYRfhsvDz6ng55h6A4LV0N184+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAt
M2I4NGQ3OWFiZGFmLzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kMjc5ZDMtOTQ3ZS00NWM3LWE4OTAtM2I4NGQ3OWFiZGFm
LzEvQTFoRi1HeThQUHFlRG5tSG9EZ3RYUTNYemo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2k1VjJr
2QJBx8CctHBiECF6It5nqML1Nd1uzosd2ddigURKcB117HA7RG6oNdqhg7ZJzg1h
fC0G7VLeZ8skL0KnBTZVxmhV44Tjb1eYsgUbSTH2uT5wd6XL+7LTp5jMdrwBmtbx
UWtVbaKiyagzgdMEomn3OF3ylozj1lBRxN41grg9YzILdT+u+iV5yaeyleSkBg1E
9hmUoizYtqvRy+bEp4R8DJWJNHZxpL1rXLOr8fO2rRdp180K9nnJkN5t21/9whCK
VNKWQm9Ysi+yLy9vM6xHxlGRofbguTMrDajuhxL/O6BuMpRAkJyq/khzHmXpJ2FX
TwsQfpPEPSknHA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:46:13 2026 by rpki-client