Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
File: 1Kje6labT0AYsLpuRDtVY663YiA.mft (raw, json)
Hash identifier: aa0r5r9iA1xkUxpSKCSDkOooP9TGPAtHSVbXjQZqxCI=
Subject key identifier: 70:30:04:1A:C8:50:E7:1A:EB:FC:DE:A0:1C:69:D7:1A:ED:59:B9:45
Authority key identifier: D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
Certificate issuer: /CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Certificate serial: 01A0DD977A41C1352F1E7A8B5C1F1D1522F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
Manifest number: EF
Signing time: Sat 26 Sep 2026 12:01:27 +0000
Manifest this update: Sat 26 Sep 2026 12:01:27 +0000
Manifest next update: Sun 27 Sep 2026 12:01:27 +0000
Files and hashes: 1: 1Kje6labT0AYsLpuRDtVY663YiA.crl (hash: 99aZhfH+yBnK+PyAy6yM2faGhGtwhmJtrsvVD6jz2tE=)
2: puE6u0HKBVhoiNbcuu-ULYY8Kk8.roa (hash: Nsy+BGKO8DFH8hsL6UVbzQQ8Z1YVvGEGRofMSsrpZ4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:7a:41:c1:35:2f:1e:7a:8b:5c:1f:1d:15:22:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a8deea569b4f4018b0ba6e443b5563aeb76220
Validity
Not Before: Sep 26 12:01:27 2026 GMT
Not After : Sep 27 12:01:27 2026 GMT
Subject: CN=7030041ac850e71aebfcdea01c69d71aed59b945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:5e:27:8c:a5:ac:4d:e8:00:5d:d8:bb:d0:
66:b3:f7:d3:c6:91:4b:2c:2d:15:95:10:4e:af:94:
74:cd:31:a3:3b:f6:47:5e:35:10:9a:95:d2:72:72:
8d:32:be:73:77:91:3b:0a:09:50:18:67:ac:cc:9e:
59:80:7c:d9:90:f9:d9:45:d2:6b:fd:8e:da:10:55:
44:df:df:e3:35:41:57:f2:2c:30:a3:58:97:1e:bc:
79:39:fd:d5:fa:c7:01:40:88:b3:34:b0:c9:27:54:
9e:19:8b:a6:70:40:aa:e7:36:11:ff:07:4c:2f:52:
85:9b:cf:c6:46:92:0d:5b:21:49:30:30:e3:49:86:
20:cf:ec:88:7c:27:3f:2c:1c:e9:ac:45:fc:54:a3:
1c:0b:7b:f5:32:ee:52:1e:bc:e7:06:f1:e9:c1:e5:
c9:c7:eb:66:03:93:0f:f2:fe:b0:47:11:e2:ee:6f:
2e:98:ba:8d:9d:32:6d:46:33:76:85:b7:70:b4:3e:
80:b7:07:fa:95:8d:06:e1:96:bf:d2:d0:f7:5f:e8:
2e:8a:bb:d6:7e:3c:d0:99:6d:e9:2c:63:3b:ed:bd:
fc:c8:91:69:77:b5:1a:8d:5f:50:8e:4b:48:2c:39:
88:b3:54:b6:c9:21:db:fe:cd:44:ea:24:61:5c:cd:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:30:04:1A:C8:50:E7:1A:EB:FC:DE:A0:1C:69:D7:1A:ED:59:B9:45
X509v3 Authority Key Identifier:
keyid:D4:A8:DE:EA:56:9B:4F:40:18:B0:BA:6E:44:3B:55:63:AE:B7:62:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Kje6labT0AYsLpuRDtVY663YiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/1Kje6labT0AYsLpuRDtVY663YiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c0:4f:d8:1d:53:89:95:56:e3:e3:dc:03:22:22:af:cd:9e:
e3:99:59:10:7f:e4:16:19:14:1a:c2:de:d6:f1:09:3a:e0:3e:
f5:06:6a:8d:e6:0b:38:48:e2:63:12:7a:2d:98:73:15:5a:75:
cf:f7:14:13:62:ce:1e:31:9c:c9:6e:98:30:74:14:49:d5:b0:
55:d5:a2:08:f4:50:d2:79:0d:7d:e4:b3:f7:a7:e5:8f:ae:c9:
d2:92:72:57:7d:89:9d:86:58:07:94:24:af:07:f0:71:5b:5e:
1f:f9:df:47:86:91:4f:95:f7:b6:06:48:2c:ef:28:7c:24:88:
42:91:c8:34:53:aa:3a:49:91:37:fb:c5:7b:4c:bf:32:0a:7e:
af:1a:dc:a6:01:ad:64:f0:89:7b:2f:78:d0:99:f6:07:cf:da:
80:c8:2c:0f:c7:fc:90:08:b5:00:05:4b:3b:c3:44:5f:d2:22:
42:13:1a:b6:83:c0:43:ec:09:bb:c8:3d:ef:9c:d5:7b:fd:5d:
5e:3f:9c:23:e9:24:37:e4:4f:fd:5a:02:ee:8b:ea:41:06:f1:
a2:64:43:d0:33:96:14:54:9b:e3:da:b5:f9:a9:0f:82:16:ae:
8f:64:d3:1b:46:f0:28:73:d2:de:a2:8a:f5:7b:8e:4c:9d:d0:
e2:09:5f:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdl3pBwTUvHnqLXB8dFSL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YThkZWVhNTY5YjRmNDAxOGIwYmE2ZTQ0M2I1NTYzYWVi
NzYyMjAwHhcNMjYwOTI2MTIwMTI3WhcNMjYwOTI3MTIwMTI3WjAzMTEwLwYDVQQD
Eyg3MDMwMDQxYWM4NTBlNzFhZWJmY2RlYTAxYzY5ZDcxYWVkNTliOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4BeJ4ylrE3oAF3Yu9Bms/fTxpFL
LC0VlRBOr5R0zTGjO/ZHXjUQmpXScnKNMr5zd5E7CglQGGeszJ5ZgHzZkPnZRdJr
/Y7aEFVE39/jNUFX8iwwo1iXHrx5Of3V+scBQIizNLDJJ1SeGYumcECq5zYR/wdM
L1KFm8/GRpINWyFJMDDjSYYgz+yIfCc/LBzprEX8VKMcC3v1Mu5SHrznBvHpweXJ
x+tmA5MP8v6wRxHi7m8umLqNnTJtRjN2hbdwtD6Atwf6lY0G4Za/0tD3X+guirvW
fjzQmW3pLGM77b38yJFpd7UajV9QjktILDmIs1S2ySHb/s1E6iRhXM2D7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAwBBrIUOca6/zeoBxp1xrtWblFMB8GA1UdIwQY
MBaAFNSo3upWm09AGLC6bkQ7VWOut2IgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2It
MTYwMmQ2YWQxNDFhLzEvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85N2I5YzEtYzFkZS00MWFjLWE5Y2ItMTYwMmQ2YWQxNDFh
LzEvMUtqZTZsYWJUMEFZc0xwdVJEdFZZNjYzWWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMBP2B1T
iZVW4+PcAyIir82e45lZEH/kFhkUGsLe1vEJOuA+9QZqjeYLOEjiYxJ6LZhzFVp1
z/cUE2LOHjGcyW6YMHQUSdWwVdWiCPRQ0nkNfeSz96flj67J0pJyV32JnYZYB5Qk
rwfwcVteH/nfR4aRT5X3tgZILO8ofCSIQpHINFOqOkmRN/vFe0y/Mgp+rxrcpgGt
ZPCJey940Jn2B8/agMgsD8f8kAi1AAVLO8NEX9IiQhMatoPAQ+wJu8g975zVe/1d
Xj+cI+kkN+RP/VoC7ovqQQbxomRD0DOWFFSb49q1+akPghauj2TTG0bwKHPS3qKK
9XuOTJ3Q4glfhQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:36:18 2026 by rpki-client