Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: wf/qxI2EDgHfGqKqcecJi70i1jcGfKGVmHvK+Q9U/dk=
Subject key identifier: 32:BF:12:A6:8F:7A:61:B4:6D:5F:9C:D7:67:B9:A0:77:7A:06:1C:89
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 01A0C47BE0FCF408788EB74C3BE3F7C175DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 15:00:47 +0000
Manifest this update: Mon 21 Sep 2026 15:00:47 +0000
Manifest next update: Tue 22 Sep 2026 15:00:47 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: wOEk5v5x6H8DvhYxTs10dUx4Xli6us+XuaAYBiZB5RE=)
2: McYjjC5KqcvB_nVezfbVebYSEGE.roa (hash: RfRO6ieaH0AVTevS9LKIVFeYDX2W75T2UkbyiNhzcEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:e0:fc:f4:08:78:8e:b7:4c:3b:e3:f7:c1:75:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Sep 21 15:00:47 2026 GMT
Not After : Sep 22 15:00:47 2026 GMT
Subject: CN=32bf12a68f7a61b46d5f9cd767b9a0777a061c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:58:90:60:e7:67:5b:f4:e6:65:15:f0:90:
44:42:6c:41:04:51:8f:10:92:6c:7d:c5:6b:02:48:
c1:71:e9:de:d8:e4:ef:a7:fd:66:59:14:69:0d:40:
a4:2c:f3:0d:92:f0:31:5d:0f:ef:9a:de:8f:a5:74:
c9:fa:08:ff:27:98:4a:e6:4d:66:28:cb:8c:b4:d7:
f4:79:54:c3:0b:67:5b:9b:5d:8b:69:0e:d0:32:8d:
e4:38:71:93:90:5b:35:d2:2c:94:89:ce:8a:ce:e2:
9d:6b:e3:e4:1d:c7:42:14:4e:50:dd:7f:bd:87:21:
a4:1a:44:21:92:82:ed:b0:67:df:1c:2e:04:3c:cd:
d8:a0:df:3f:d3:d8:d3:65:58:95:b1:67:02:7d:7e:
dc:7f:7d:58:6d:7e:de:22:44:f1:1a:ac:73:6f:8e:
26:bd:10:ec:15:41:d2:3e:0a:6d:dd:9c:65:4f:c1:
d0:ad:54:b1:a4:f7:1c:37:ec:5c:c8:fa:9f:12:ff:
b9:23:bb:6c:86:5b:37:a0:88:d3:3a:ec:06:87:4f:
d5:60:53:d9:94:a6:bd:55:fe:6a:da:a8:3e:82:08:
2b:21:65:0d:7e:f2:7e:4b:8e:b6:8c:8b:fb:73:a9:
e4:6f:6c:72:ec:ac:70:fa:0d:4b:38:1d:4e:a2:eb:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BF:12:A6:8F:7A:61:B4:6D:5F:9C:D7:67:B9:A0:77:7A:06:1C:89
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:61:1a:8b:35:9a:e7:22:8a:1b:e1:5c:7c:4a:25:90:cb:c3:
2e:64:2c:1d:7e:63:ad:26:78:e3:b5:4e:5e:11:1b:8d:cd:eb:
e6:4e:59:d7:82:8e:2d:17:56:66:5e:eb:ad:15:6e:33:c7:be:
0e:8d:ef:0b:33:f1:e4:46:3d:7f:60:60:98:8d:d6:78:74:8b:
a6:bd:7a:15:9a:2e:db:06:49:d0:80:22:4a:fe:6a:1d:24:9f:
04:56:69:64:9d:f4:96:fd:09:fd:c2:62:fa:cd:ed:36:1b:ca:
22:30:43:bb:c3:77:71:e1:58:e4:a1:86:9c:01:43:77:b8:61:
8c:70:de:c0:e9:e9:cc:24:e2:53:cd:7c:e3:07:66:fd:50:f9:
d0:cd:ad:10:30:98:fb:fd:eb:fd:99:95:af:f2:bf:e3:1f:75:
e6:eb:40:af:a2:e5:94:77:ff:7b:fd:f6:a9:b6:80:84:59:1f:
85:84:b0:6a:4b:82:85:6d:b5:b0:5a:2b:68:f9:04:53:28:1f:
59:65:41:07:68:fe:51:a9:5b:49:05:02:d9:51:31:07:83:15:
1b:80:1a:cd:29:c5:d0:60:49:e3:d2:57:90:16:44:dd:84:69:
ff:78:8f:26:8f:e1:fe:df:a4:81:38:d9:e9:8e:96:5c:1a:42:
cc:d5:fa:50
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDEe+D89Ah4jrdMO+P3wXXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzMyMDk2MjVlMmEwM2RkZWVjZjkxYmI0ODA1NDhlNTcy
OWQ0NzkwHhcNMjYwOTIxMTUwMDQ3WhcNMjYwOTIyMTUwMDQ3WjAzMTEwLwYDVQQD
EygzMmJmMTJhNjhmN2E2MWI0NmQ1ZjljZDc2N2I5YTA3NzdhMDYxYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszBYkGDnZ1v05mUV8JBEQmxBBFGP
EJJsfcVrAkjBcene2OTvp/1mWRRpDUCkLPMNkvAxXQ/vmt6PpXTJ+gj/J5hK5k1m
KMuMtNf0eVTDC2dbm12LaQ7QMo3kOHGTkFs10iyUic6KzuKda+PkHcdCFE5Q3X+9
hyGkGkQhkoLtsGffHC4EPM3YoN8/09jTZViVsWcCfX7cf31YbX7eIkTxGqxzb44m
vRDsFUHSPgpt3ZxlT8HQrVSxpPccN+xcyPqfEv+5I7tshls3oIjTOuwGh0/VYFPZ
lKa9Vf5q2qg+gggrIWUNfvJ+S462jIv7c6nkb2xy7Kxw+g1LOB1OoutYWwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDK/EqaPemG0bV+c12e5oHd6BhyJMB8GA1UdIwQY
MBaAFPlzIJYl4qA93uz5G7SAVI5XKdR5MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YTWdsaVhpb0QzZTdQa2J0SUJVamxjcDFIay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYWY1NGU4LWJkNjMtNDI3ZC04Y2M4
LWY0ZWNlYmJiMWVjMi8xLzEtWE1nbGlYaW9EM2U3UGtidElCVWpsY3AxSGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzVkL2FmNTRlOC1iZDYzLTQyN2QtOGNjOC1mNGVjZWJiYjFl
YzIvMS8xLVhNZ2xpWGlvRDNlN1BrYnRJQlVqbGNwMUhrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWEa
izWa5yKKG+FcfEolkMvDLmQsHX5jrSZ447VOXhEbjc3r5k5Z14KOLRdWZl7rrRVu
M8e+Do3vCzPx5EY9f2BgmI3WeHSLpr16FZou2wZJ0IAiSv5qHSSfBFZpZJ30lv0J
/cJi+s3tNhvKIjBDu8N3ceFY5KGGnAFDd7hhjHDewOnpzCTiU8184wdm/VD50M2t
EDCY+/3r/ZmVr/K/4x915utAr6LllHf/e/32qbaAhFkfhYSwakuChW21sForaPkE
UygfWWVBB2j+UalbSQUC2VExB4MVG4AazSnF0GBJ49JXkBZE3YRp/3iPJo/h/t+k
gTjZ6Y6WXBpCzNX6UA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:06:46 2026 by rpki-client