Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: RuMl5iIT67PgCS4TPQ18sUxk0nCCVjlwVPcYN3u32q4=
Subject key identifier: 97:D3:F5:FA:55:D3:C6:A6:8A:6E:22:4D:F9:EB:52:D8:AC:47:07:36
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 01A0BDE3F25DB7B23B4267EC02A89EA4262A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 058D
Signing time: Sun 20 Sep 2026 08:17:07 +0000
Manifest this update: Sun 20 Sep 2026 08:17:07 +0000
Manifest next update: Mon 21 Sep 2026 08:17:07 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: 7OgqmI3/GkjJjZWBZdZDsGCTe1HmZPEtW8ZyL7ovemQ=)
2: 5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa (hash: OvUzcgXdun7e7rJvnWGXK1KokOo+inejKBUGCGEtOjc=)
3: 8eSRY56ivoj5PMJbAEpCd7XTFLw.roa (hash: Y+Fe7VR6p71IHtGPJcZTT8CUnj4YW5cc/AzcKvuJhU8=)
4: 8pXCuBWrEvdy2wZTlEp32tqPYW8.roa (hash: uGUL/if0f5ws0TqXiUCRr04ljVZ6Fve+sjfhpDCgGM4=)
5: Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa (hash: jQK1etd719NMqRMk4bSxLL+vsw1/OQyKrvCRPSvnFfI=)
6: i-745CKdfOf19Ku-0_PU7SvfTGk.roa (hash: D1Fm1QRFQnSjdn54Koa0eHcBcqABAYqTNgDSl0KH0Po=)
7: nHHN0WPLlHYApdgpFpnFyF7FXNo.roa (hash: xucnQbWZYtMeJ0bkGPwNcpkM2rdQLkCGv8+6HH3/d1M=)
8: pKmHj_UwSowJL7JtZ3ZsbqaOaAw.roa (hash: sJJU0c0HzgrlO4mmoDliyfZm6hgydL4GUuwlpgThsI4=)
9: yAVYxJFH5V5eInedSvCrsQJDCdM.roa (hash: JLkjfyoNHYnLxSb+aahMC+v2H24Mr3DdjFtD7SH3WJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:e3:f2:5d:b7:b2:3b:42:67:ec:02:a8:9e:a4:26:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Sep 20 08:17:07 2026 GMT
Not After : Sep 21 08:17:07 2026 GMT
Subject: CN=97d3f5fa55d3c6a68a6e224df9eb52d8ac470736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:57:1b:b5:c3:21:e9:c4:c7:26:27:6f:18:
ca:7b:6c:3a:8a:3c:ba:2f:24:4c:65:22:a8:39:f9:
af:72:b8:d9:bf:60:b3:ab:57:ad:4c:bf:39:ff:0f:
8f:c2:5c:fe:84:41:2d:da:39:6b:3c:a5:62:7e:f6:
64:2f:d7:d6:82:67:84:7d:f7:d1:a0:e7:d5:d3:ca:
d0:34:8f:c4:54:4a:0b:03:64:13:7a:9e:cb:32:fe:
0c:13:99:bb:bd:1e:e2:83:d0:38:7c:ec:91:06:8b:
25:ee:66:c2:59:ad:87:3b:5d:fb:8f:19:d4:a4:c4:
fa:94:59:b1:19:6d:f8:fc:f1:71:65:22:20:f4:6a:
71:da:a5:8a:87:b4:b2:03:86:46:e7:e9:6e:97:42:
49:76:8c:10:32:b1:b8:75:63:5f:59:0b:c9:27:d8:
09:9a:21:3d:a1:92:13:97:0a:13:ad:7b:72:e8:d3:
14:16:ad:d2:94:3a:c2:80:78:16:9b:60:dd:26:9c:
7c:2b:0f:93:55:9c:e5:21:83:d8:b1:d7:2d:1c:4f:
d3:cc:3a:5a:b8:db:9f:03:d4:e4:e8:36:5d:87:bd:
74:e7:ab:49:48:f7:1b:ba:b5:1d:8e:29:15:d2:79:
60:70:46:69:03:80:ac:30:cf:7a:ae:4c:75:75:f5:
10:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:F5:FA:55:D3:C6:A6:8A:6E:22:4D:F9:EB:52:D8:AC:47:07:36
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:70:aa:80:99:92:09:e1:80:8e:15:08:22:30:ef:e3:4e:
05:d9:17:99:ce:94:3e:16:ba:b5:98:43:5d:fa:7e:23:c2:98:
26:28:a5:f7:f4:19:63:bc:da:3a:6b:13:e0:52:51:26:ab:32:
e5:41:d6:c3:40:e6:b4:3f:ee:c8:38:a3:92:a4:19:57:7d:33:
84:b6:54:19:3c:9e:f1:0f:09:aa:5d:08:9a:39:35:a4:c1:84:
cb:91:d9:45:42:d3:5e:27:55:22:11:8e:48:6a:b0:2b:0f:6e:
01:e8:d4:07:7a:ee:c3:52:c5:f6:7e:ad:3b:38:15:80:91:08:
80:f8:78:66:41:bc:35:33:5a:46:8c:86:5f:01:75:44:3d:91:
09:41:33:aa:4a:04:5f:d6:25:df:4b:ed:4c:2e:ff:ba:a8:b8:
fe:1d:58:d7:c5:98:00:80:91:d3:26:a5:b7:ce:ae:cc:65:a6:
d4:b1:61:02:3c:90:22:6b:f8:df:1a:2c:8d:2b:8e:6e:84:93:
8b:b9:fe:f6:85:67:0b:18:ff:6b:a1:89:00:8a:ba:ed:a3:d5:
18:48:3c:a3:81:9e:a6:70:f7:06:4b:35:8d:a1:24:8c:92:73:
02:df:63:1d:2c:e3:d2:87:f9:d3:10:f5:27:15:69:b3:d3:19:
fb:29:22:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC94/Jdt7I7QmfsAqiepCYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh
MThjZWUwHhcNMjYwOTIwMDgxNzA3WhcNMjYwOTIxMDgxNzA3WjAzMTEwLwYDVQQD
Eyg5N2QzZjVmYTU1ZDNjNmE2OGE2ZTIyNGRmOWViNTJkOGFjNDcwNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmVXG7XDIenExyYnbxjKe2w6ijy6
LyRMZSKoOfmvcrjZv2Czq1etTL85/w+Pwlz+hEEt2jlrPKVifvZkL9fWgmeEfffR
oOfV08rQNI/EVEoLA2QTep7LMv4ME5m7vR7ig9A4fOyRBosl7mbCWa2HO137jxnU
pMT6lFmxGW34/PFxZSIg9Gpx2qWKh7SyA4ZG5+lul0JJdowQMrG4dWNfWQvJJ9gJ
miE9oZITlwoTrXty6NMUFq3SlDrCgHgWm2DdJpx8Kw+TVZzlIYPYsdctHE/TzDpa
uNufA9Tk6DZdh71056tJSPcburUdjikV0nlgcEZpA4CsMM96rkx1dfUQ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfT9fpV08amim4iTfnrUtisRwc2MB8GA1UdIwQY
MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt
YzU5ODI1YmJjYjMyLzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy
LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUitwqoCZ
kgnhgI4VCCIw7+NOBdkXmc6UPha6tZhDXfp+I8KYJiil9/QZY7zaOmsT4FJRJqsy
5UHWw0DmtD/uyDijkqQZV30zhLZUGTye8Q8Jql0Imjk1pMGEy5HZRULTXidVIhGO
SGqwKw9uAejUB3ruw1LF9n6tOzgVgJEIgPh4ZkG8NTNaRoyGXwF1RD2RCUEzqkoE
X9Yl30vtTC7/uqi4/h1Y18WYAICR0yalt86uzGWm1LFhAjyQImv43xosjSuOboST
i7n+9oVnCxj/a6GJAIq67aPVGEg8o4GepnD3Bks1jaEkjJJzAt9jHSzj0of50xD1
JxVps9MZ+ykijw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:41:03 2026 by rpki-client