Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: GEGGwNxM/dx9s1m/TRfCtMbTmKr72hfxLn56KhE+DtA=
Subject key identifier: 95:CB:C7:05:89:A0:E7:64:06:F7:DE:0E:5B:80:A9:58:86:88:C5:23
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 01A0CA103CBF6A476617138FD8E766EF3B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 1707
Signing time: Tue 22 Sep 2026 17:00:56 +0000
Manifest this update: Tue 22 Sep 2026 17:00:56 +0000
Manifest next update: Wed 23 Sep 2026 17:00:56 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: ze9za0OkvB7nEzYPeI/rsWU4/XVvq0ERu89oj3xrqJQ=)
2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:3c:bf:6a:47:66:17:13:8f:d8:e7:66:ef:3b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Sep 22 17:00:56 2026 GMT
Not After : Sep 23 17:00:56 2026 GMT
Subject: CN=95cbc70589a0e76406f7de0e5b80a9588688c523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:41:35:66:e6:1f:d0:d7:01:e7:7e:28:aa:
a9:2f:58:79:03:19:26:e0:ee:4e:1e:4c:dd:49:77:
70:1c:35:01:4b:43:6a:20:09:84:48:e8:a5:0d:48:
b0:4c:ea:e6:7f:9e:cc:a5:c3:08:64:38:57:dc:52:
43:6e:9f:cb:88:e9:e4:1d:2a:9b:d1:8e:2d:3b:a2:
4b:83:ac:d6:83:ea:93:9b:19:61:50:fc:bf:51:aa:
d8:b7:45:b1:b2:31:4b:f5:b1:7c:fd:6e:43:32:58:
5a:40:3d:0e:86:5e:09:48:7a:51:e1:da:bf:f5:29:
c5:17:32:7f:c2:3a:f8:df:99:64:3c:e7:cd:c7:e1:
c0:68:22:d5:ca:d6:e5:51:7a:a4:cb:d0:79:dd:02:
90:39:55:fe:04:0c:55:b8:dd:b5:1e:2e:86:56:89:
6f:c2:bf:5d:11:f2:64:f5:e2:b5:b9:87:76:dd:31:
83:8b:d2:83:48:bb:42:9f:a0:3f:2b:f2:ee:53:c2:
7f:64:ac:38:ce:ac:be:2b:c4:9f:52:2a:70:de:0f:
17:be:10:68:1b:8d:d7:97:9a:bd:e4:88:8b:8b:08:
40:db:cf:db:88:cb:36:59:53:c2:c1:76:f5:2b:70:
ae:c6:71:2e:e0:64:f1:9f:1a:b6:fb:5d:44:d0:fc:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CB:C7:05:89:A0:E7:64:06:F7:DE:0E:5B:80:A9:58:86:88:C5:23
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:79:6f:7f:d7:eb:65:23:1c:01:8f:3d:42:72:57:ad:fe:32:
fb:d5:2c:bd:75:2e:a9:e3:65:fd:66:b0:f2:6b:3a:6c:b9:c6:
93:75:30:73:d5:99:27:fe:1c:02:3b:ed:90:aa:91:35:bb:bf:
7c:64:10:e6:0d:04:ca:d3:52:f0:0c:38:29:9f:0a:2f:6b:2c:
98:d8:9e:32:ef:69:b1:64:da:ba:b2:90:4c:5e:59:f6:f0:67:
f0:10:c3:be:e7:88:52:1e:a0:e8:67:7f:ba:96:61:72:59:7c:
d5:37:78:a5:a7:1d:08:08:6d:7c:fc:c2:4b:a6:40:e7:9b:52:
00:4e:f0:bb:42:40:ce:b5:91:0c:1c:16:49:43:a9:aa:7e:08:
b9:02:5f:23:42:92:e7:00:27:3b:f7:47:ae:f4:cc:7a:f1:8f:
e6:b4:a9:ad:a6:70:8d:48:bb:3f:d2:10:25:c6:4c:d2:93:a0:
47:55:32:1b:04:1b:69:54:42:7e:3e:e8:6c:d0:09:39:65:3d:
13:45:c8:5d:4f:62:1a:03:c5:60:46:57:ea:5d:f9:fa:86:e6:
60:5c:e2:4e:f3:db:6d:26:a6:1a:7a:7a:9e:49:9d:63:fb:64:
e2:12:42:6d:30:a8:49:79:5b:f7:19:1d:89:00:70:41:bc:d5:
79:ba:8b:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKEDy/akdmFxOP2Odm7zslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjN2Q0YWI3NzYxYWJhMjRmMzNkNWI2ZGZiYzI3Y2FiNzM4
YmI1ZWUwHhcNMjYwOTIyMTcwMDU2WhcNMjYwOTIzMTcwMDU2WjAzMTEwLwYDVQQD
Eyg5NWNiYzcwNTg5YTBlNzY0MDZmN2RlMGU1YjgwYTk1ODg2ODhjNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxItBNWbmH9DXAed+KKqpL1h5Axkm
4O5OHkzdSXdwHDUBS0NqIAmESOilDUiwTOrmf57MpcMIZDhX3FJDbp/LiOnkHSqb
0Y4tO6JLg6zWg+qTmxlhUPy/UarYt0WxsjFL9bF8/W5DMlhaQD0Ohl4JSHpR4dq/
9SnFFzJ/wjr435lkPOfNx+HAaCLVytblUXqky9B53QKQOVX+BAxVuN21Hi6GVolv
wr9dEfJk9eK1uYd23TGDi9KDSLtCn6A/K/LuU8J/ZKw4zqy+K8SfUipw3g8XvhBo
G43Xl5q95IiLiwhA28/biMs2WVPCwXb1K3CuxnEu4GTxnxq2+11E0PwgNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXLxwWJoOdkBvfeDluAqViGiMUjMB8GA1UdIwQY
MBaAFPx9Srd2Grok8z1bbfvCfKtzi7XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYt
NDUyZWMzYTk1ODhiLzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wMjg3Y2YtODUzYi00NTE2LTlmMDYtNDUyZWMzYTk1ODhi
LzEvX0gxS3QzWWF1aVR6UFZ0dC04SjhxM09MdGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHlvf9fr
ZSMcAY89QnJXrf4y+9UsvXUuqeNl/Waw8ms6bLnGk3Uwc9WZJ/4cAjvtkKqRNbu/
fGQQ5g0EytNS8Aw4KZ8KL2ssmNieMu9psWTaurKQTF5Z9vBn8BDDvueIUh6g6Gd/
upZhcll81Td4pacdCAhtfPzCS6ZA55tSAE7wu0JAzrWRDBwWSUOpqn4IuQJfI0KS
5wAnO/dHrvTMevGP5rSpraZwjUi7P9IQJcZM0pOgR1UyGwQbaVRCfj7obNAJOWU9
E0XIXU9iGgPFYEZX6l35+obmYFziTvPbbSamGnp6nkmdY/tk4hJCbTCoSXlb9xkd
iQBwQbzVebqLgw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:12:43 2026 by rpki-client