Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: mkc16eoSRaj43X9W0k+jj+/1nrBITraRosr5ad+eew0=
Subject key identifier: 6F:89:99:21:4C:5F:43:53:8C:D7:C2:A0:D2:43:BD:EA:49:19:24:B0
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 01A1494EA0FB27543BE4B62511D16C9BF309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 121C
Signing time: Sat 17 Oct 2026 10:00:52 +0000
Manifest this update: Sat 17 Oct 2026 10:00:52 +0000
Manifest next update: Sun 18 Oct 2026 10:00:52 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: Gd0swbHa7OkjieKi9Ti5sDQsILN5bzeID6WEw8iA01Q=)
2: MlQTgjgh5uSzQaXxeS49FotuS_Y.roa (hash: 0wxpEKJE8z5xrE9cQTX/pfOjLHngXIh1dDaRLCQI7cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4e:a0:fb:27:54:3b:e4:b6:25:11:d1:6c:9b:f3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Oct 17 10:00:52 2026 GMT
Not After : Oct 18 10:00:52 2026 GMT
Subject: CN=6f8999214c5f43538cd7c2a0d243bdea491924b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a0:65:c4:f0:28:af:33:fc:76:95:8a:35:98:
51:ec:ef:75:35:37:e8:9b:b3:54:29:80:78:01:d9:
42:34:06:42:5f:c7:72:cc:66:cf:19:f4:15:6a:cb:
22:9b:94:a7:2d:b5:29:4c:65:f4:a3:da:d3:62:c9:
81:e2:11:f7:09:37:6b:d5:3d:54:f0:60:47:89:fd:
e2:db:c5:6b:73:26:1e:96:5f:8f:81:fd:45:cf:04:
d3:67:ac:1d:46:3a:1b:4b:0d:13:f3:aa:72:89:ae:
d1:c7:5f:8a:6b:19:05:f6:7f:3c:fe:bc:00:89:23:
d4:1b:64:2e:55:d5:c4:e6:64:a6:e8:6d:38:d2:cf:
c6:3a:b5:a7:b6:93:19:8e:13:1c:28:e3:0c:60:33:
54:c8:d4:39:5a:76:5a:84:9c:2c:8a:15:3f:49:db:
30:80:3e:da:c8:83:e0:10:f4:e5:72:3e:7e:84:5b:
3f:91:90:13:b7:34:14:7a:60:1c:6b:b9:57:6c:bb:
30:ba:08:3e:cb:69:10:7f:63:dc:bd:34:47:59:e6:
fa:a6:6d:69:a1:02:75:46:1e:83:91:fa:3c:69:0c:
bf:8b:00:b7:c2:01:b5:ad:70:c6:c5:49:e1:b9:86:
cd:c0:05:fe:51:f5:43:10:cc:ea:84:ab:ab:d5:7d:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:89:99:21:4C:5F:43:53:8C:D7:C2:A0:D2:43:BD:EA:49:19:24:B0
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a8:90:2f:1f:e5:94:26:49:1c:84:9b:57:95:dd:ff:63:50:
7d:0a:c2:3f:5a:e8:e7:0d:49:98:db:74:14:ce:72:09:2a:fa:
fa:e6:c5:cb:c1:a0:4b:20:98:7c:07:eb:6f:a4:38:5b:5a:97:
2d:eb:69:96:a8:9d:12:82:f5:74:c9:48:d3:ff:f6:56:da:26:
80:e9:62:a0:af:24:d8:7a:67:ba:82:c4:98:60:41:1f:16:e6:
84:1d:43:ce:3a:57:b0:f0:71:10:19:a8:b1:63:33:e1:ea:4a:
0f:43:5d:a4:10:9f:2e:8c:c5:38:ee:d9:f6:c6:7d:e1:8a:8d:
04:c8:34:ef:60:48:51:88:f9:3a:4d:bb:91:cd:f7:a9:2b:7e:
dd:40:6e:3d:76:62:5f:b5:f0:5a:90:03:7a:5e:46:5b:82:0a:
dc:a4:d2:83:d3:30:16:62:24:10:85:fc:00:e4:19:32:21:90:
18:62:23:f0:a0:bf:da:4c:0c:b2:c3:62:33:ee:d2:fb:8b:a6:
73:b0:1f:94:2d:44:51:7f:47:23:65:cb:41:88:39:f0:df:d2:
12:b8:e8:3f:bd:06:36:d0:19:3a:87:b8:52:dc:6f:56:e6:98:
19:58:95:56:69:49:4e:5d:9e:9c:2c:9c:d0:d9:ff:a0:57:11:
90:2b:c5:69
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaFJTqD7J1Q75LYlEdFsm/MJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWRlMzdiYmM2YzA2NDIwZGE2MjZjMGJiNGQ3MjMyMzFl
OTNlODQwHhcNMjYxMDE3MTAwMDUyWhcNMjYxMDE4MTAwMDUyWjAzMTEwLwYDVQQD
Eyg2Zjg5OTkyMTRjNWY0MzUzOGNkN2MyYTBkMjQzYmRlYTQ5MTkyNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26BlxPAorzP8dpWKNZhR7O91NTfo
m7NUKYB4AdlCNAZCX8dyzGbPGfQVassim5SnLbUpTGX0o9rTYsmB4hH3CTdr1T1U
8GBHif3i28VrcyYell+Pgf1FzwTTZ6wdRjobSw0T86pyia7Rx1+KaxkF9n88/rwA
iSPUG2QuVdXE5mSm6G040s/GOrWntpMZjhMcKOMMYDNUyNQ5WnZahJwsihU/Sdsw
gD7ayIPgEPTlcj5+hFs/kZATtzQUemAca7lXbLswugg+y2kQf2PcvTRHWeb6pm1p
oQJ1Rh6Dkfo8aQy/iwC3wgG1rXDGxUnhuYbNwAX+UfVDEMzqhKur1X3ZlwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG+JmSFMX0NTjNfCoNJDvepJGSSwMB8GA1UdIwQY
MBaAFPod43u8bAZCDaYmwLtNcjIx6T6EMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oM2plN3hzQmtJTnBpYkF1MDF5TWpIcFBvUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvNjA4ZjZkLThjZDEtNDk5ZS1hNTE4
LTVmMTU5MzllNzY4MC8xLzEtaDNqZTd4c0JrSU5waWJBdTAxeU1qSHBQb1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FjLzYwOGY2ZC04Y2QxLTQ5OWUtYTUxOC01ZjE1OTM5ZTc2
ODAvMS8xLWgzamU3eHNCa0lOcGliQXUwMXlNakhwUG9RLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKiQ
Lx/llCZJHISbV5Xd/2NQfQrCP1ro5w1JmNt0FM5yCSr6+ubFy8GgSyCYfAfrb6Q4
W1qXLetplqidEoL1dMlI0//2VtomgOlioK8k2HpnuoLEmGBBHxbmhB1DzjpXsPBx
EBmosWMz4epKD0NdpBCfLozFOO7Z9sZ94YqNBMg072BIUYj5Ok27kc33qSt+3UBu
PXZiX7XwWpADel5GW4IK3KTSg9MwFmIkEIX8AOQZMiGQGGIj8KC/2kwMssNiM+7S
+4umc7AflC1EUX9HI2XLQYg58N/SErjoP70GNtAZOoe4UtxvVuaYGViVVmlJTl2e
nCyc0Nn/oFcRkCvFaQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 13:48:45 2026 by rpki-client