Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: C8jvtXEAsMG4lTbt5xPY/zL43cYtFNGvoC0613v/Bz4=
Subject key identifier: 34:20:17:63:3B:47:25:CD:50:6F:6D:05:DD:41:FE:E0:14:D5:C5:EE
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 01A0C2FB75B51C1AC11FFEE53AA464DE26FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 08:00:54 +0000
Manifest this update: Mon 21 Sep 2026 08:00:54 +0000
Manifest next update: Tue 22 Sep 2026 08:00:54 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: twkylkvfChz0NaSY6kF+NsAvgBZispsyO2p6Ory35ik=)
2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:75:b5:1c:1a:c1:1f:fe:e5:3a:a4:64:de:26:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Sep 21 08:00:54 2026 GMT
Not After : Sep 22 08:00:54 2026 GMT
Subject: CN=342017633b4725cd506f6d05dd41fee014d5c5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:6b:d9:74:59:17:f2:44:81:91:35:9b:eb:
9a:6a:e4:0f:46:8f:67:11:83:d5:f1:34:b3:c3:4b:
e4:ba:34:c2:b1:6e:d7:e3:fd:e3:fb:27:af:9d:a4:
4f:c2:82:63:5b:0c:ea:20:af:b5:07:85:f5:1c:68:
ac:22:bf:3a:db:cf:d3:3d:0b:b8:cc:6e:f6:e5:ed:
b0:94:5b:63:0f:56:24:21:70:30:de:55:b2:5a:17:
f6:aa:bd:1d:3c:12:1b:fb:96:05:08:eb:a0:20:d5:
77:07:db:05:e3:cc:79:42:3c:35:6c:58:39:05:c2:
27:21:2d:5d:38:f3:f2:a5:f0:64:b9:44:5b:bc:cf:
f9:d1:c2:90:9b:06:57:27:c6:6a:aa:ce:1f:27:b9:
88:63:54:bb:41:0f:85:27:ab:dd:d3:22:8e:4e:12:
d3:d6:57:47:76:00:54:3a:11:57:84:da:d5:d7:9d:
c2:89:39:7a:84:57:c8:92:e2:b2:52:f0:c1:9f:e8:
c3:a1:f4:88:70:6b:d5:1e:41:cf:b4:75:9d:c3:10:
fd:c3:36:3c:dc:52:63:f5:35:1a:d7:2e:5a:a9:5f:
c5:8c:19:7c:f9:ed:3e:90:10:66:81:d8:df:82:17:
4e:2f:6c:c9:ce:1c:5d:26:2e:47:b0:c4:35:35:61:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:20:17:63:3B:47:25:CD:50:6F:6D:05:DD:41:FE:E0:14:D5:C5:EE
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b5:5b:46:b1:4e:ad:fa:2b:1e:23:18:59:ce:41:d0:16:0f:
1a:5a:e1:10:47:64:c6:6f:a9:c1:05:ed:c3:b7:9f:69:79:b9:
b6:11:f1:02:49:e4:0b:5f:1b:98:ea:f4:20:4d:cb:95:76:ac:
e3:30:83:7b:bd:81:f8:59:80:c6:39:34:80:8b:d8:21:67:62:
36:f2:ab:16:ab:0a:cd:0f:c9:9a:33:c4:be:8b:3a:01:b9:d2:
48:d9:0a:04:ce:dc:f9:aa:41:3a:2f:b7:8a:57:e2:5a:b6:09:
34:88:f5:8f:56:a6:3b:c7:3d:49:52:45:04:d8:80:4d:b9:f8:
33:86:d6:2b:27:c1:f0:61:85:b2:62:7d:c4:4c:05:a2:72:2d:
74:24:37:a0:b1:69:11:35:7b:69:07:1f:f7:c2:3c:20:30:e0:
da:10:9b:5a:d3:94:bd:69:36:8f:3f:66:c3:a8:2c:7c:dd:50:
0d:42:5d:b7:bc:91:29:05:fb:69:f0:3b:5f:fe:17:b4:63:e4:
f9:f8:43:56:78:bd:f3:87:da:78:9d:c9:53:30:ad:d0:ec:2b:
48:6d:e9:34:b3:7d:81:e5:f6:df:15:27:08:2a:bc:da:58:e1:
18:52:7b:19:1b:ec:a5:7f:b3:80:72:1f:48:ce:66:23:c7:76:
a1:f0:1b:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+3W1HBrBH/7lOqRk3ib8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNGQ1MmFiMDliMTZkNzJmNGMzZTQ4Y2M0YjQ5MDI1ZDA4
MzY3NmQwHhcNMjYwOTIxMDgwMDU0WhcNMjYwOTIyMDgwMDU0WjAzMTEwLwYDVQQD
EygzNDIwMTc2MzNiNDcyNWNkNTA2ZjZkMDVkZDQxZmVlMDE0ZDVjNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuNr2XRZF/JEgZE1m+uaauQPRo9n
EYPV8TSzw0vkujTCsW7X4/3j+yevnaRPwoJjWwzqIK+1B4X1HGisIr8628/TPQu4
zG725e2wlFtjD1YkIXAw3lWyWhf2qr0dPBIb+5YFCOugINV3B9sF48x5Qjw1bFg5
BcInIS1dOPPypfBkuURbvM/50cKQmwZXJ8Zqqs4fJ7mIY1S7QQ+FJ6vd0yKOThLT
1ldHdgBUOhFXhNrV153CiTl6hFfIkuKyUvDBn+jDofSIcGvVHkHPtHWdwxD9wzY8
3FJj9TUa1y5aqV/FjBl8+e0+kBBmgdjfghdOL2zJzhxdJi5HsMQ1NWGtOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQgF2M7RyXNUG9tBd1B/uAU1cXuMB8GA1UdIwQY
MBaAFNtNUqsJsW1y9MPkjMS0kCXQg2dtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUt
MjJiZGVmOTliY2VhLzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iYTJiYWQtZWQzNS00NWMzLWI4NGUtMjJiZGVmOTliY2Vh
LzEvMjAxU3F3bXhiWEwwdy1TTXhMU1FKZENEWjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbVbRrFO
rforHiMYWc5B0BYPGlrhEEdkxm+pwQXtw7efaXm5thHxAknkC18bmOr0IE3LlXas
4zCDe72B+FmAxjk0gIvYIWdiNvKrFqsKzQ/JmjPEvos6AbnSSNkKBM7c+apBOi+3
ilfiWrYJNIj1j1amO8c9SVJFBNiATbn4M4bWKyfB8GGFsmJ9xEwFonItdCQ3oLFp
ETV7aQcf98I8IDDg2hCbWtOUvWk2jz9mw6gsfN1QDUJdt7yRKQX7afA7X/4XtGPk
+fhDVni984faeJ3JUzCt0OwrSG3pNLN9geX23xUnCCq82ljhGFJ7GRvspX+zgHIf
SM5mI8d2ofAbOg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:46:03 2026 by rpki-client