Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File: 1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier: a8b5xher0PCxNErdVvWmRnT9TTai9kNM7lMn7pOHnlc=
Subject key identifier: 7B:40:48:11:81:6D:82:28:C9:59:2B:7F:99:7B:62:77:8E:66:9A:66
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer: /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial: 01A0C2C40FA6E8E2CD58623C7B3711C957E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number: 0CCA
Signing time: Mon 21 Sep 2026 07:00:23 +0000
Manifest this update: Mon 21 Sep 2026 07:00:23 +0000
Manifest next update: Tue 22 Sep 2026 07:00:23 +0000
Files and hashes: 1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: tbvoWQkGCGu/aabR49XWqmlXK2tmT42741V7RsohiSM=)
2: AKAYJxK55ho0_-tu4n3xkwEVy0E.roa (hash: CwiOEuZ5WNXcf/WHMc8X4C6V6miMKO5JICnCl7N0bT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:0f:a6:e8:e2:cd:58:62:3c:7b:37:11:c9:57:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Validity
Not Before: Sep 21 07:00:23 2026 GMT
Not After : Sep 22 07:00:23 2026 GMT
Subject: CN=7b404811816d8228c9592b7f997b62778e669a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:47:1a:84:af:43:db:91:61:32:16:76:db:
ec:87:f8:6a:ab:97:a2:04:41:ed:25:81:30:ba:51:
99:28:f4:dd:a5:d4:91:c1:5c:e5:dd:c6:00:e2:aa:
5a:5a:b5:3c:6c:ab:69:8c:18:13:03:cf:46:78:30:
f9:4b:14:3f:b0:9e:13:84:a5:32:d7:38:94:48:46:
2a:fa:5c:da:d3:5b:4d:12:16:50:bc:cc:e8:43:09:
68:c1:b6:8e:3a:e2:17:64:1b:4a:fe:e2:3f:18:9b:
79:fc:2e:93:61:50:2b:e2:de:7b:ee:4c:dd:5d:5c:
d0:15:34:72:60:80:2e:9f:df:7a:1b:07:5b:de:cd:
39:db:41:72:8a:d7:ee:1b:8e:1d:17:e0:63:12:49:
e3:a3:fb:8c:9f:18:41:99:14:50:99:9a:55:e6:78:
2c:97:93:e2:40:e3:29:43:42:d3:90:7f:7b:1a:6c:
0e:47:50:08:ed:35:ec:17:17:1d:60:9c:0a:7b:5d:
3b:19:a4:5d:f0:96:20:34:d9:12:e7:9a:d4:e6:11:
98:54:ba:ab:ae:de:72:c9:02:ce:b4:cf:c3:5b:01:
04:ff:cd:56:dc:7f:08:28:32:c4:fe:77:c7:41:45:
c1:e7:bd:df:27:8b:4b:38:3e:6f:71:bb:bd:1f:11:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:40:48:11:81:6D:82:28:C9:59:2B:7F:99:7B:62:77:8E:66:9A:66
X509v3 Authority Key Identifier:
keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:77:67:ca:17:47:e2:69:f5:da:e6:76:77:96:eb:81:9f:6f:
0c:b1:ee:e6:8b:ce:8d:8f:17:27:6c:ae:a8:03:97:3f:ea:38:
f9:91:73:5c:dd:d6:33:de:43:f6:62:f0:25:73:b0:1e:a2:ae:
15:5f:ab:00:cd:a2:67:07:0e:08:1c:66:72:bd:48:3b:0f:6e:
36:32:67:d1:2a:0c:85:e1:63:ab:d7:30:e3:eb:67:b9:5d:a2:
a3:fc:d1:25:50:1f:71:b4:20:b9:bd:3a:d2:8c:29:97:08:54:
40:1c:42:f5:d9:84:82:d4:a1:19:6e:ce:b4:01:63:ca:45:0f:
e7:9e:25:61:24:0f:83:5c:30:32:15:b3:a9:b3:cc:ef:dd:64:
6a:da:66:35:b4:ae:c0:d3:a8:3f:b8:f6:b3:0c:90:7b:ae:01:
7d:62:c5:18:58:66:08:ff:c1:ee:8f:99:38:8c:bc:f5:14:07:
65:6a:c0:66:bd:7e:06:24:63:d9:8b:c3:d7:14:35:ed:62:69:
c9:db:ba:6f:7e:22:c5:1e:03:e7:dc:aa:15:fd:76:a4:b7:51:
89:8f:0a:4a:ac:4f:f1:34:9c:0c:d7:d9:3f:41:5d:c0:35:8d:
b4:8e:23:9b:8a:d6:b2:00:b8:96:38:d1:ea:7f:c1:dc:ed:3b:
5f:25:e2:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxA+m6OLNWGI8ezcRyVfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NjQzM2ZiMGZiZGRjYzk3ZWIwMTU2NjkyOGQ2MDcwNmNj
YzY2MjMwHhcNMjYwOTIxMDcwMDIzWhcNMjYwOTIyMDcwMDIzWjAzMTEwLwYDVQQD
Eyg3YjQwNDgxMTgxNmQ4MjI4Yzk1OTJiN2Y5OTdiNjI3NzhlNjY5YTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLVHGoSvQ9uRYTIWdtvsh/hqq5ei
BEHtJYEwulGZKPTdpdSRwVzl3cYA4qpaWrU8bKtpjBgTA89GeDD5SxQ/sJ4ThKUy
1ziUSEYq+lza01tNEhZQvMzoQwlowbaOOuIXZBtK/uI/GJt5/C6TYVAr4t577kzd
XVzQFTRyYIAun996Gwdb3s0520FyitfuG44dF+BjEknjo/uMnxhBmRRQmZpV5ngs
l5PiQOMpQ0LTkH97GmwOR1AI7TXsFxcdYJwKe107GaRd8JYgNNkS55rU5hGYVLqr
rt5yyQLOtM/DWwEE/81W3H8IKDLE/nfHQUXB573fJ4tLOD5vcbu9HxETPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtASBGBbYIoyVkrf5l7YneOZppmMB8GA1UdIwQY
MBaAFNZkM/sPvdzJfrAVZpKNYHBszGYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDkt
MDVkMmNkZmExNmE2LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDktMDVkMmNkZmExNmE2
LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHdnyhdH
4mn12uZ2d5brgZ9vDLHu5ovOjY8XJ2yuqAOXP+o4+ZFzXN3WM95D9mLwJXOwHqKu
FV+rAM2iZwcOCBxmcr1IOw9uNjJn0SoMheFjq9cw4+tnuV2io/zRJVAfcbQgub06
0owplwhUQBxC9dmEgtShGW7OtAFjykUP554lYSQPg1wwMhWzqbPM791katpmNbSu
wNOoP7j2swyQe64BfWLFGFhmCP/B7o+ZOIy89RQHZWrAZr1+BiRj2YvD1xQ17WJp
ydu6b34ixR4D59yqFf12pLdRiY8KSqxP8TScDNfZP0FdwDWNtI4jm4rWsgC4ljjR
6n/B3O07XyXiDg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:00:49 2026 by rpki-client