Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier: 1OgL3vOtzCv3WSEaHKy7IMd0/HXEYbYrkJ/u5pcyPAI=
Subject key identifier: 65:A3:B4:08:72:7A:86:A8:CE:C4:29:D6:C4:7D:C5:1E:10:1D:9A:2F
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial: 01A0EAE53887B3E03D2BC3FEEFB2631C85C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number: 1A0B
Signing time: Tue 29 Sep 2026 02:01:25 +0000
Manifest this update: Tue 29 Sep 2026 02:01:25 +0000
Manifest next update: Wed 30 Sep 2026 02:01:25 +0000
Files and hashes: 1: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: ri4KUnXHf1KDz9VYHMI2RoQe6zQN3Y+R4nf3QNktdjM=)
2: eNko5h0Tp_p7b7ugEBiQkhXOA20.roa (hash: OK0LXbnfUa5IYm60HKsaC15u0Y3K/9dXchk7SJSUYf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:38:87:b3:e0:3d:2b:c3:fe:ef:b2:63:1c:85:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
Validity
Not Before: Sep 29 02:01:25 2026 GMT
Not After : Sep 30 02:01:25 2026 GMT
Subject: CN=65a3b408727a86a8cec429d6c47dc51e101d9a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:84:9b:9b:a3:f2:d8:f2:07:19:08:b7:cc:
f8:83:7d:eb:2f:7b:1c:c6:b1:e2:d4:b5:68:40:f5:
1d:77:cf:38:1a:b1:81:54:9e:82:1f:40:3e:37:36:
34:46:7b:b8:d8:67:bd:ab:6b:51:90:f9:db:b9:61:
42:b3:59:a5:e5:85:2e:26:21:f0:db:f4:59:0f:a1:
c6:22:aa:1d:13:25:16:4c:d6:92:06:e8:da:05:36:
e0:20:56:07:0e:ef:9f:e2:63:40:8b:01:6a:c4:17:
6e:bb:fd:01:d4:1e:ef:fb:2e:a1:7e:98:35:4f:3d:
11:da:95:be:ec:cc:68:f3:35:28:df:1e:75:57:c4:
28:09:88:80:a8:17:25:36:b1:ef:71:ba:c5:75:57:
f6:0f:43:4e:c9:bb:3f:86:aa:f5:ec:d1:90:ff:4c:
64:ed:da:b0:4d:e1:3b:9c:d2:f2:fe:a1:ae:7c:90:
30:70:df:2c:08:d6:13:d3:d8:6a:86:6b:38:b7:ff:
bf:8d:92:62:5f:ea:9c:7c:44:9f:e4:25:91:11:53:
a8:2f:32:d8:c3:ab:13:0f:56:d2:6f:e9:86:b2:98:
12:13:f9:f4:e6:81:e7:cd:a2:7a:a6:42:46:c4:33:
5a:1d:64:43:44:d1:07:25:03:64:e9:8a:84:d2:e4:
44:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A3:B4:08:72:7A:86:A8:CE:C4:29:D6:C4:7D:C5:1E:10:1D:9A:2F
X509v3 Authority Key Identifier:
keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8f:e7:07:ce:4f:7f:fe:30:82:62:c3:03:f9:f6:95:59:7a:
5a:fd:6a:d5:ab:aa:a2:11:cb:4d:94:da:b0:46:63:5f:d1:02:
db:8c:b7:00:98:e3:a4:40:04:b9:c8:d3:8f:e1:2a:f8:09:26:
df:97:14:8b:5d:b4:a5:98:2e:ef:1e:42:cc:06:8b:97:72:08:
4a:dd:f8:4a:7f:88:f9:b1:f2:40:50:c1:d1:cf:d7:74:77:63:
26:50:86:b2:29:4f:93:71:af:14:c1:29:7a:d0:e1:3f:cb:fa:
a3:b8:4d:78:a4:70:7d:dd:08:ce:81:82:12:5c:fb:8c:72:70:
b2:ed:00:6f:80:68:58:80:5e:a6:68:90:c9:b4:13:38:0c:60:
d2:9b:b6:14:a8:5f:c6:51:b5:69:fb:d7:e8:df:48:7f:6c:33:
95:59:2c:49:25:1b:c7:11:bb:37:36:5d:40:38:ee:fb:d7:e4:
a0:fe:02:b7:bc:db:f8:71:e9:dd:4c:31:5d:c0:3e:5c:88:3f:
8c:bf:cf:e2:7b:09:7f:e0:78:98:18:ec:ec:51:90:6b:ea:24:
bb:6a:9d:0d:f1:07:b7:e2:fe:8e:e2:c8:39:fd:2c:03:d2:df:
2b:0d:a6:a8:a4:ce:05:31:5c:00:f6:50:4b:ac:1b:e7:ce:0d:
2e:03:b3:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDq5TiHs+A9K8P+77JjHIXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTI2MzMyNzRiMWQ4ODZhOTI3NTdmNjUyMTljMmU3NTQ2
ZWNkZjUwHhcNMjYwOTI5MDIwMTI1WhcNMjYwOTMwMDIwMTI1WjAzMTEwLwYDVQQD
Eyg2NWEzYjQwODcyN2E4NmE4Y2VjNDI5ZDZjNDdkYzUxZTEwMWQ5YTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGmEm5uj8tjyBxkIt8z4g33rL3sc
xrHi1LVoQPUdd884GrGBVJ6CH0A+NzY0Rnu42Ge9q2tRkPnbuWFCs1ml5YUuJiHw
2/RZD6HGIqodEyUWTNaSBujaBTbgIFYHDu+f4mNAiwFqxBduu/0B1B7v+y6hfpg1
Tz0R2pW+7Mxo8zUo3x51V8QoCYiAqBclNrHvcbrFdVf2D0NOybs/hqr17NGQ/0xk
7dqwTeE7nNLy/qGufJAwcN8sCNYT09hqhms4t/+/jZJiX+qcfESf5CWREVOoLzLY
w6sTD1bSb+mGspgSE/n05oHnzaJ6pkJGxDNaHWRDRNEHJQNk6YqE0uREtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWjtAhyeoaozsQp1sR9xR4QHZovMB8GA1UdIwQY
MBaAFERSYzJ0sdiGqSdX9lIZwudUbs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgt
YmI4NmQ0YmEwMmRlLzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgtYmI4NmQ0YmEwMmRl
LzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdY/nB85P
f/4wgmLDA/n2lVl6Wv1q1auqohHLTZTasEZjX9EC24y3AJjjpEAEucjTj+Eq+Akm
35cUi120pZgu7x5CzAaLl3IISt34Sn+I+bHyQFDB0c/XdHdjJlCGsilPk3GvFMEp
etDhP8v6o7hNeKRwfd0IzoGCElz7jHJwsu0Ab4BoWIBepmiQybQTOAxg0pu2FKhf
xlG1afvX6N9If2wzlVksSSUbxxG7NzZdQDju+9fkoP4Ct7zb+HHp3UwxXcA+XIg/
jL/P4nsJf+B4mBjs7FGQa+oku2qdDfEHt+L+juLIOf0sA9LfKw2mqKTOBTFcAPZQ
S6wb584NLgOzdQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:13:36 2026 by rpki-client