Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: lvaxRHebOwUPbxG3m/zIHCImcj69ZwhBTu1RkeZpILs=
Subject key identifier: 37:24:E3:DD:A8:5E:44:3D:0C:46:C7:96:AC:DA:33:6F:D4:A9:1A:99
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 01A0C58ECD6AD297DE873EA80EA94F7C3A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0C9F
Signing time: Mon 21 Sep 2026 20:01:05 +0000
Manifest this update: Mon 21 Sep 2026 20:01:05 +0000
Manifest next update: Tue 22 Sep 2026 20:01:05 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: MebYZJ07oIz5ZSb5BQcjHbMMabHfpiPqqYEYbaOW+cs=)
2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
3: xKZaKt2ejyS1RvKxbygcbV14q7Y.roa (hash: pRhnCq62G3nLpLOE3zJBDzARRGgB05rKDlaS5XncNNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:cd:6a:d2:97:de:87:3e:a8:0e:a9:4f:7c:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Sep 21 20:01:05 2026 GMT
Not After : Sep 22 20:01:05 2026 GMT
Subject: CN=3724e3dda85e443d0c46c796acda336fd4a91a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:8f:1b:86:72:d4:82:04:ed:60:da:50:32:
ab:2d:1e:ed:85:96:be:ec:71:a6:11:8d:d0:23:d2:
68:de:3c:f5:87:c3:3e:80:20:b9:dd:39:10:9b:8f:
d9:1a:77:04:1a:45:c2:43:a2:dd:61:26:c9:80:81:
4e:9a:96:b7:dd:df:87:c8:30:5b:85:70:3a:e5:5e:
d3:b4:e7:35:5c:49:82:7f:7a:c9:41:14:df:e5:52:
04:a3:d2:5c:27:53:dc:2b:15:97:21:5e:ef:98:cc:
be:33:aa:8c:19:37:a8:b7:2d:f1:30:be:4c:de:e2:
2a:4e:56:f7:58:47:0b:d8:ed:a4:07:d7:e4:db:f3:
6a:de:98:f6:f4:a7:e8:18:0e:fb:78:e7:8c:71:52:
8a:2e:2d:ce:0c:1e:48:4f:09:db:95:13:a2:5d:45:
4a:7b:41:2e:d9:f3:97:2a:0a:21:b9:ff:80:4b:13:
ea:56:1b:dd:bb:8d:55:5a:cf:20:3b:50:71:c1:b3:
ae:29:73:8f:99:17:4c:6b:da:7c:f4:7b:51:8e:d6:
e1:bb:a6:39:26:cf:b4:35:d9:e0:a8:97:10:73:6e:
21:4b:bc:c8:e1:9b:7b:57:66:65:6b:23:b1:65:a5:
26:88:57:4c:30:55:07:57:e9:6d:5c:31:00:ba:54:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:24:E3:DD:A8:5E:44:3D:0C:46:C7:96:AC:DA:33:6F:D4:A9:1A:99
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f3:42:e2:4e:c1:df:a3:8a:be:22:cf:a2:4d:b3:d5:fe:b6:
64:79:0e:73:ce:12:18:50:2d:1e:c3:1f:16:9b:7c:48:a9:d7:
92:29:65:b4:81:a8:55:85:0e:e9:f1:35:62:6d:04:be:f4:b3:
f6:d2:11:86:29:0a:0c:21:36:95:63:54:74:b8:57:fe:4b:4f:
5e:f3:d0:9f:6d:b5:5f:c6:fd:76:cb:eb:b4:02:1d:89:06:26:
b7:79:5a:5c:93:f9:6f:97:a6:9d:5e:47:a5:07:f9:4b:6a:43:
92:97:55:ce:db:9c:8a:d0:14:8a:bc:9b:2e:34:2a:32:25:ba:
eb:1f:9f:a8:12:d7:8f:67:50:c3:e6:dc:54:a6:54:95:36:5b:
bc:db:fb:6b:7b:88:40:4a:ed:72:df:9c:1b:50:62:f4:06:93:
15:61:4d:a3:a2:4e:bc:3c:51:ea:72:e3:07:1b:ac:8e:7e:8b:
83:8e:b3:92:6c:b7:d1:a3:c1:2e:d5:93:78:13:bd:c7:2c:d7:
27:b3:e7:87:02:38:4e:eb:57:03:4e:d5:c8:e5:bb:36:68:43:
6f:88:a7:1d:2e:7b:b3:04:27:40:ec:b5:24:dc:9b:1a:2c:87:
d4:6d:4a:3c:1f:96:59:6a:dc:44:6c:f1:9b:10:2f:6e:f0:95:
03:14:bf:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFjs1q0pfehz6oDqlPfDqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3
ZjcyMGEwHhcNMjYwOTIxMjAwMTA1WhcNMjYwOTIyMjAwMTA1WjAzMTEwLwYDVQQD
EygzNzI0ZTNkZGE4NWU0NDNkMGM0NmM3OTZhY2RhMzM2ZmQ0YTkxYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaWPG4Zy1IIE7WDaUDKrLR7thZa+
7HGmEY3QI9Jo3jz1h8M+gCC53TkQm4/ZGncEGkXCQ6LdYSbJgIFOmpa33d+HyDBb
hXA65V7TtOc1XEmCf3rJQRTf5VIEo9JcJ1PcKxWXIV7vmMy+M6qMGTeoty3xML5M
3uIqTlb3WEcL2O2kB9fk2/Nq3pj29KfoGA77eOeMcVKKLi3ODB5ITwnblROiXUVK
e0Eu2fOXKgohuf+ASxPqVhvdu41VWs8gO1BxwbOuKXOPmRdMa9p89HtRjtbhu6Y5
Js+0NdngqJcQc24hS7zI4Zt7V2ZlayOxZaUmiFdMMFUHV+ltXDEAulSySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDck492oXkQ9DEbHlqzaM2/UqRqZMB8GA1UdIwQY
MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt
YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk
LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfNC4k7B
36OKviLPok2z1f62ZHkOc84SGFAtHsMfFpt8SKnXkilltIGoVYUO6fE1Ym0EvvSz
9tIRhikKDCE2lWNUdLhX/ktPXvPQn221X8b9dsvrtAIdiQYmt3laXJP5b5emnV5H
pQf5S2pDkpdVztucitAUirybLjQqMiW66x+fqBLXj2dQw+bcVKZUlTZbvNv7a3uI
QErtct+cG1Bi9AaTFWFNo6JOvDxR6nLjBxusjn6Lg46zkmy30aPBLtWTeBO9xyzX
J7PnhwI4TutXA07VyOW7NmhDb4inHS57swQnQOy1JNybGiyH1G1KPB+WWWrcRGzx
mxAvbvCVAxS/FQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:01:37 2026 by rpki-client