Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File: 564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier: 1l6NpSSJuFh+mxZ9xm0OJ5XFbZKTwXBZ+Szr6kf8i50=
Subject key identifier: 60:E9:47:59:2E:E3:28:E4:A7:CD:89:41:4A:B9:BC:06:4E:01:65:0C
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer: /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial: 01A0C1B1692DCB735DF79E50031569D2DA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 02:00:24 +0000
Manifest this update: Mon 21 Sep 2026 02:00:24 +0000
Manifest next update: Tue 22 Sep 2026 02:00:24 +0000
Files and hashes: 1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: gsHxFVtQeVrsN7fJsWS9qj/mRW3e0VwYbJAuo3QpuxY=)
2: MpJSn9TWRwhS5zTd8KOd_dUj3X8.roa (hash: 3l8Y3glur9khayrgDEUAxZoVQurQKRMAgC985VKxnJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:69:2d:cb:73:5d:f7:9e:50:03:15:69:d2:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Validity
Not Before: Sep 21 02:00:24 2026 GMT
Not After : Sep 22 02:00:24 2026 GMT
Subject: CN=60e947592ee328e4a7cd89414ab9bc064e01650c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:6c:40:80:2d:01:fb:05:39:08:79:d6:b5:
a5:cf:ff:7b:b6:e5:7c:2f:00:57:2d:72:a1:33:7d:
c3:e4:81:98:22:60:c9:64:7e:08:93:c3:40:e3:ae:
20:e8:29:55:d3:54:02:64:6f:33:fa:ef:54:5f:2a:
80:b5:7c:9c:9d:e4:37:63:49:2c:d1:60:33:7b:02:
56:bf:d9:77:15:aa:bf:6e:d1:81:01:7e:67:13:f1:
50:50:0a:b0:c5:25:3d:53:26:b2:bb:0f:e7:ae:98:
8f:89:db:c8:92:d9:4d:97:d6:71:33:ca:79:a2:57:
6d:4b:3b:fd:d4:f0:ff:61:d0:93:41:f8:c6:20:38:
6d:57:76:20:38:30:db:aa:32:d8:97:ae:d5:d9:82:
e8:55:51:bf:a9:16:bd:20:d3:4f:bf:cb:7f:36:8e:
e4:90:f3:8e:30:bd:a9:dc:08:b1:b7:e1:87:b5:aa:
58:8d:b2:8f:d5:c3:3e:9e:d1:8c:c5:d1:83:47:5d:
69:e4:2f:f7:56:9c:6d:f4:81:a1:98:a4:4d:f0:5f:
7e:f1:94:ec:4b:7f:38:c5:eb:b5:c5:fe:73:03:cc:
6b:f5:25:05:db:b4:87:d5:5d:b2:c5:0b:db:cb:fb:
f7:25:19:76:20:24:20:37:f3:5f:29:bb:ad:87:e4:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E9:47:59:2E:E3:28:E4:A7:CD:89:41:4A:B9:BC:06:4E:01:65:0C
X509v3 Authority Key Identifier:
keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:97:43:94:b1:90:27:d7:fa:ee:e5:c8:e7:ed:ea:21:bc:22:
d2:c0:97:15:06:b4:31:fb:36:28:48:5d:67:18:de:4f:0d:62:
0f:a9:69:4a:d3:96:ec:22:d4:db:04:ec:4f:81:bd:26:15:32:
d7:65:21:e1:a0:a7:97:4c:92:89:a3:56:65:72:ac:91:0f:8c:
9c:7b:07:34:4f:bc:87:8c:55:aa:50:f2:50:dc:83:e2:e7:8f:
29:2c:ee:c5:ac:4c:92:66:1e:4f:72:cd:d0:a7:92:87:bd:7c:
a5:70:33:e8:28:84:64:06:c1:62:9a:46:6b:f4:5b:cb:18:0b:
1d:35:3c:51:73:02:a6:9a:66:6d:a6:8b:5b:ec:59:c8:52:1d:
27:cd:a4:ae:2a:3e:59:1d:44:9c:05:2b:10:42:e4:00:1d:cb:
21:67:a6:a5:00:47:fc:7c:73:aa:86:ee:c4:3f:a7:3c:c1:1d:
4c:50:93:14:0a:0a:58:ba:f6:50:f2:91:21:e9:33:88:58:58:
56:7d:c0:5b:19:2a:3f:21:8d:01:fb:5f:a8:4f:0a:8c:8c:43:
02:23:15:b1:d1:ab:c9:db:ec:68:ab:1c:6e:da:ae:d1:3c:a5:
56:0d:81:dd:8b:5b:f5:9d:93:f3:1a:f2:6b:a9:d7:05:5a:d1:
bd:47:97:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBsWkty3Nd955QAxVp0togMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWUwMzMyOWUzYzBmNzNlYTgzZmI2MzdjYTIwYWVjZTE2
YThlYjQwHhcNMjYwOTIxMDIwMDI0WhcNMjYwOTIyMDIwMDI0WjAzMTEwLwYDVQQD
Eyg2MGU5NDc1OTJlZTMyOGU0YTdjZDg5NDE0YWI5YmMwNjRlMDE2NTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNRsQIAtAfsFOQh51rWlz/97tuV8
LwBXLXKhM33D5IGYImDJZH4Ik8NA464g6ClV01QCZG8z+u9UXyqAtXycneQ3Y0ks
0WAzewJWv9l3Faq/btGBAX5nE/FQUAqwxSU9Uyayuw/nrpiPidvIktlNl9ZxM8p5
oldtSzv91PD/YdCTQfjGIDhtV3YgODDbqjLYl67V2YLoVVG/qRa9INNPv8t/No7k
kPOOML2p3Aixt+GHtapYjbKP1cM+ntGMxdGDR11p5C/3Vpxt9IGhmKRN8F9+8ZTs
S384xeu1xf5zA8xr9SUF27SH1V2yxQvby/v3JRl2ICQgN/NfKbuth+Qi/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDpR1ku4yjkp82JQUq5vAZOAWUMMB8GA1UdIwQY
MBaAFOeuAzKePA9z6oP7Y3yiCuzhao60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAt
YTE3ZGFiNzAxYzQxLzEvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80NzhhZWItZDk3Zi00N2I3LTgxYjAtYTE3ZGFiNzAxYzQx
LzEvNTY0RE1wNDhEM1BxZ190amZLSUs3T0ZxanJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpdDlLGQ
J9f67uXI5+3qIbwi0sCXFQa0Mfs2KEhdZxjeTw1iD6lpStOW7CLU2wTsT4G9JhUy
12Uh4aCnl0ySiaNWZXKskQ+MnHsHNE+8h4xVqlDyUNyD4uePKSzuxaxMkmYeT3LN
0KeSh718pXAz6CiEZAbBYppGa/RbyxgLHTU8UXMCpppmbaaLW+xZyFIdJ82krio+
WR1EnAUrEELkAB3LIWempQBH/HxzqobuxD+nPMEdTFCTFAoKWLr2UPKRIekziFhY
Vn3AWxkqPyGNAftfqE8KjIxDAiMVsdGrydvsaKscbtqu0TylVg2B3Ytb9Z2T8xry
a6nXBVrRvUeXTw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:42:11 2026 by rpki-client