Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
File: l1otW428KUB1EBfkqLR2cy5_ToQ.mft (raw, json)
Hash identifier: dr10pj9iNfSnzERwMnjVKW1qkJD4AyOp8Ncwrpve5xQ=
Subject key identifier: 0F:13:8C:01:EE:8B:B2:E2:C0:32:F3:70:A3:41:5E:F3:D4:EF:28:94
Authority key identifier: 97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
Certificate issuer: /CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Certificate serial: 01A0C39FF4E9FF8DBEA9E0778E22FDA8C950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
Manifest number: 8C
Signing time: Mon 21 Sep 2026 11:00:35 +0000
Manifest this update: Mon 21 Sep 2026 11:00:35 +0000
Manifest next update: Tue 22 Sep 2026 11:00:35 +0000
Files and hashes: 1: IQxi_ycveBSnK1Ru6EC_lb20R2M.roa (hash: qkCT/kfpBxRfgLxAiyBIqf6L9Svv3JlOCCjBfxcll6E=)
2: l1otW428KUB1EBfkqLR2cy5_ToQ.crl (hash: zzxFmce3BkitL9FWxLRehz84Gx/6jXvkbYEVmLxaGqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:f4:e9:ff:8d:be:a9:e0:77:8e:22:fd:a8:c9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975a2d5b8dbc2940751017e4a8b476732e7f4e84
Validity
Not Before: Sep 21 11:00:35 2026 GMT
Not After : Sep 22 11:00:35 2026 GMT
Subject: CN=0f138c01ee8bb2e2c032f370a3415ef3d4ef2894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:b6:bc:9d:32:57:52:2e:3d:2d:68:af:f1:
a5:b9:fc:fb:f3:05:54:5f:e1:6d:d2:37:11:9f:d0:
05:b3:8d:23:90:b3:7c:a7:aa:3b:9d:29:d4:70:60:
a8:f9:44:35:7a:52:7d:d4:72:19:6b:04:3d:5c:3a:
c2:32:64:b8:bd:05:77:94:b7:17:f5:ac:4d:29:8d:
a2:d7:df:f1:ce:7e:18:35:bd:ee:b4:1f:35:91:c4:
0d:56:62:16:22:63:6f:3f:c3:e2:86:0e:e5:ed:eb:
df:ef:e7:03:1a:c8:66:9c:3e:0a:f6:93:a4:34:ab:
14:e8:7b:ff:5f:6f:d9:17:7e:32:5d:f0:61:22:18:
ac:d4:03:1e:6b:5a:e3:ec:9d:1e:08:8d:f8:4f:ba:
11:3e:e2:9d:51:f2:48:94:af:c6:bf:d8:f0:c8:68:
3d:ae:1f:fb:4e:b2:53:77:01:1d:ec:c2:3b:12:70:
fa:9a:b2:98:95:b3:34:a9:ed:77:92:8a:3b:6b:7b:
ee:f8:68:36:ce:c8:36:3a:f5:d1:d1:83:0d:62:d8:
94:15:98:ec:7e:82:87:d2:f8:68:b2:a8:c7:c9:c5:
c8:9e:cb:32:7a:67:e2:64:90:94:83:be:a4:dd:52:
46:e0:35:0c:aa:67:e4:bf:c3:6c:df:3e:59:fe:66:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:13:8C:01:EE:8B:B2:E2:C0:32:F3:70:A3:41:5E:F3:D4:EF:28:94
X509v3 Authority Key Identifier:
keyid:97:5A:2D:5B:8D:BC:29:40:75:10:17:E4:A8:B4:76:73:2E:7F:4E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1otW428KUB1EBfkqLR2cy5_ToQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d9ab39-e19e-4a52-8f63-7b0b7b66f09d/1/l1otW428KUB1EBfkqLR2cy5_ToQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6f:20:fe:a0:82:ac:0a:1c:e4:64:a3:59:e5:81:9c:c6:43:
bc:0f:2b:f2:ab:04:a8:95:2c:d0:1d:06:d3:4e:81:57:47:a1:
b2:51:f0:dd:19:66:b2:9b:b8:24:01:58:d0:70:0d:c6:d6:c6:
77:df:aa:5e:b4:82:1d:21:96:e4:cc:1d:60:a9:da:13:21:05:
b2:5a:64:a7:92:e1:bb:ec:be:11:d4:a5:93:04:9f:d6:5d:df:
de:a3:36:c3:01:05:e4:e0:e7:8a:85:68:53:1b:54:78:ef:d1:
cd:b4:a7:ac:f4:62:db:bb:b7:55:e6:35:50:85:01:bb:ab:3d:
13:09:67:13:d1:e9:76:13:d5:47:91:8d:e7:2b:cd:51:fe:2a:
4c:9f:52:55:be:30:68:56:5d:07:92:44:03:52:7c:53:1e:bc:
06:96:52:9f:5e:22:f1:98:6d:ba:58:19:ce:01:47:46:28:81:
83:ff:47:76:fd:d8:97:e8:e0:f4:62:fa:24:f0:25:ab:94:3c:
92:9c:f9:9d:b8:2b:59:27:49:d9:72:7e:b0:ad:a0:69:e9:2f:
84:0c:9e:7f:1e:bc:40:69:47:b3:cc:c6:19:e1:af:4e:dc:a2:
0c:25:08:3f:18:a4:74:03:39:44:1c:c2:11:3d:dd:e0:be:ec:
dc:8b:bd:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn/Tp/42+qeB3jiL9qMlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWEyZDViOGRiYzI5NDA3NTEwMTdlNGE4YjQ3NjczMmU3
ZjRlODQwHhcNMjYwOTIxMTEwMDM1WhcNMjYwOTIyMTEwMDM1WjAzMTEwLwYDVQQD
EygwZjEzOGMwMWVlOGJiMmUyYzAzMmYzNzBhMzQxNWVmM2Q0ZWYyODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNm2vJ0yV1IuPS1or/Glufz78wVU
X+Ft0jcRn9AFs40jkLN8p6o7nSnUcGCo+UQ1elJ91HIZawQ9XDrCMmS4vQV3lLcX
9axNKY2i19/xzn4YNb3utB81kcQNVmIWImNvP8Pihg7l7evf7+cDGshmnD4K9pOk
NKsU6Hv/X2/ZF34yXfBhIhis1AMea1rj7J0eCI34T7oRPuKdUfJIlK/Gv9jwyGg9
rh/7TrJTdwEd7MI7EnD6mrKYlbM0qe13koo7a3vu+Gg2zsg2OvXR0YMNYtiUFZjs
foKH0vhosqjHycXInssyemfiZJCUg76k3VJG4DUMqmfkv8Ns3z5Z/ma/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8TjAHui7LiwDLzcKNBXvPU7yiUMB8GA1UdIwQY
MBaAFJdaLVuNvClAdRAX5Ki0dnMuf06EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFvdFc0MjhLVUIxRUJma3FMUjJjeTVfVG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kOWFiMzktZTE5ZS00YTUyLThmNjMt
N2IwYjdiNjZmMDlkLzEvbDFvdFc0MjhLVUIxRUJma3FMUjJjeTVfVG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kOWFiMzktZTE5ZS00YTUyLThmNjMtN2IwYjdiNjZmMDlk
LzEvbDFvdFc0MjhLVUIxRUJma3FMUjJjeTVfVG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWW8g/qCC
rAoc5GSjWeWBnMZDvA8r8qsEqJUs0B0G006BV0ehslHw3Rlmspu4JAFY0HANxtbG
d9+qXrSCHSGW5MwdYKnaEyEFslpkp5Lhu+y+EdSlkwSf1l3f3qM2wwEF5ODnioVo
UxtUeO/RzbSnrPRi27u3VeY1UIUBu6s9EwlnE9HpdhPVR5GN5yvNUf4qTJ9SVb4w
aFZdB5JEA1J8Ux68BpZSn14i8ZhtulgZzgFHRiiBg/9Hdv3Yl+jg9GL6JPAlq5Q8
kpz5nbgrWSdJ2XJ+sK2gaekvhAyefx68QGlHs8zGGeGvTtyiDCUIPxikdAM5RBzC
ET3d4L7s3Iu99w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:20 2026 by rpki-client