Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: S5XsL+mL5VF672+TBNhqkecC/ZN9yVRIUUbZzcBR/yk=
Subject key identifier: 3E:A8:F1:6F:0F:67:1C:2C:CA:A3:5D:AA:8F:7A:4A:2B:BB:6C:0C:D9
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 01A0DEE0D6F67890BD8E8909BC504F35B9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 0444
Signing time: Sat 26 Sep 2026 18:01:12 +0000
Manifest this update: Sat 26 Sep 2026 18:01:12 +0000
Manifest next update: Sun 27 Sep 2026 18:01:12 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: 0LHvnL6sHEqO6US0oRIcCBz7Jn5Al/uD2m9smgF58Es=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:d6:f6:78:90:bd:8e:89:09:bc:50:4f:35:b9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Sep 26 18:01:12 2026 GMT
Not After : Sep 27 18:01:12 2026 GMT
Subject: CN=3ea8f16f0f671c2ccaa35daa8f7a4a2bbb6c0cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:86:b6:e5:22:dd:5b:6b:0e:bd:cf:09:0b:
24:e0:7f:73:b1:80:ca:1f:d5:43:e1:c9:a8:e0:0d:
34:23:b6:d4:09:51:a2:51:67:5d:46:19:43:45:6b:
a1:56:4c:d6:18:68:e6:48:e8:26:2c:e2:ae:4f:12:
25:7e:b6:04:02:71:69:f9:c5:12:c1:76:cd:45:3d:
eb:91:92:6d:5a:10:b1:2f:03:56:1c:45:0b:3e:a3:
21:a9:64:d1:ba:e2:3e:65:f8:0e:1d:39:ce:02:9d:
63:09:79:ea:ea:fb:58:a2:ad:73:38:9e:bc:c6:8b:
77:88:78:8a:94:0e:d3:c6:9c:27:70:84:70:32:ef:
7f:aa:35:f7:d2:a6:12:53:b3:94:ab:8e:13:e5:be:
df:97:bb:ae:11:8e:21:67:28:b8:8e:7e:87:89:7f:
81:eb:d6:5e:5d:38:ba:a6:db:86:15:b2:a3:81:c2:
6d:f9:86:1c:81:b2:74:fa:ee:da:8c:9d:c9:c8:33:
3f:75:09:07:bb:bd:18:fe:ef:5b:a5:a8:cd:c6:73:
30:15:bf:e2:63:49:7d:2f:dd:42:e7:b3:d5:b9:09:
df:2f:7f:37:08:2b:7a:5d:9b:82:3d:da:cd:ef:52:
49:93:85:e6:c8:95:e1:be:fe:b0:fb:f0:6f:0e:74:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A8:F1:6F:0F:67:1C:2C:CA:A3:5D:AA:8F:7A:4A:2B:BB:6C:0C:D9
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5d:fd:0f:84:56:c0:40:b1:ad:0b:65:1a:b4:5a:4e:9d:96:
3f:d2:97:b0:ed:29:ae:05:e2:89:dc:a0:2b:d6:9d:bc:29:2f:
c4:e1:a6:fe:af:8a:21:fe:12:04:1f:40:ac:4d:bc:62:b9:dd:
dc:8e:b1:c3:7c:2f:52:1b:a4:ae:0f:d5:12:1e:cc:11:3b:4c:
1d:48:55:67:b3:ee:79:e8:a6:a4:0d:87:8a:95:d0:f8:28:57:
de:2a:4d:e6:90:a2:dd:03:94:27:77:80:f5:41:fa:14:11:56:
5e:86:43:b3:d9:84:59:a0:25:15:47:66:98:fe:31:68:fe:2f:
08:1a:ed:2a:eb:26:e6:30:a5:dd:73:1d:b2:be:5a:1a:52:96:
18:24:bd:3f:13:7b:74:34:a7:9e:9e:eb:51:f6:81:dc:25:71:
7c:3e:36:51:c2:97:96:5a:a3:5b:69:40:c6:79:9a:39:a1:f4:
15:11:61:e1:13:b7:dc:09:98:48:76:b6:f7:37:6d:c8:e8:6b:
82:4e:e1:96:21:a4:be:8c:2c:2e:8c:f4:ec:e3:8b:37:31:51:
2e:c3:ce:52:fb:e8:ee:69:c5:7f:25:24:82:cb:23:f2:e9:d4:
23:8b:bc:40:ae:49:9a:0f:0c:46:3e:bb:0e:6b:ab:ea:6b:e2:
d8:d3:d5:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDe4Nb2eJC9jokJvFBPNbnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTU0OWY1NzViMDQ3YmNiZGMzM2U3ZDJkMzZlZGE4NDcx
ZmRlY2EwHhcNMjYwOTI2MTgwMTEyWhcNMjYwOTI3MTgwMTEyWjAzMTEwLwYDVQQD
EygzZWE4ZjE2ZjBmNjcxYzJjY2FhMzVkYWE4ZjdhNGEyYmJiNmMwY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CeGtuUi3VtrDr3PCQsk4H9zsYDK
H9VD4cmo4A00I7bUCVGiUWddRhlDRWuhVkzWGGjmSOgmLOKuTxIlfrYEAnFp+cUS
wXbNRT3rkZJtWhCxLwNWHEULPqMhqWTRuuI+ZfgOHTnOAp1jCXnq6vtYoq1zOJ68
xot3iHiKlA7TxpwncIRwMu9/qjX30qYSU7OUq44T5b7fl7uuEY4hZyi4jn6HiX+B
69ZeXTi6ptuGFbKjgcJt+YYcgbJ0+u7ajJ3JyDM/dQkHu70Y/u9bpajNxnMwFb/i
Y0l9L91C57PVuQnfL383CCt6XZuCPdrN71JJk4XmyJXhvv6w+/BvDnRq2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6o8W8PZxwsyqNdqo96Siu7bAzZMB8GA1UdIwQY
MBaAFNYVSfV1sEe8vcM+fS027ahHH97KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMt
NWZkMDk4ZjM0NTlkLzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMtNWZkMDk4ZjM0NTlk
LzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfF39D4RW
wECxrQtlGrRaTp2WP9KXsO0prgXiidygK9advCkvxOGm/q+KIf4SBB9ArE28Yrnd
3I6xw3wvUhukrg/VEh7METtMHUhVZ7PueeimpA2HipXQ+ChX3ipN5pCi3QOUJ3eA
9UH6FBFWXoZDs9mEWaAlFUdmmP4xaP4vCBrtKusm5jCl3XMdsr5aGlKWGCS9PxN7
dDSnnp7rUfaB3CVxfD42UcKXllqjW2lAxnmaOaH0FRFh4RO33AmYSHa29zdtyOhr
gk7hliGkvowsLoz07OOLNzFRLsPOUvvo7mnFfyUkgssj8unUI4u8QK5Jmg8MRj67
Dmur6mvi2NPVOA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:04:27 2026 by rpki-client